encrypted-dns

DNS over HTTPS config profiles for iOS & macOS

DNS Profile Generator for Apple devices.

Universal Linux Upgrade: this script increases system performance and security for Linux.

Secure DNS(also known as DNS firewall & protective DNS) with ad-blocking, threat protection, and fully encryption support for enhanced privacy and security.

pfSense package for DNSCrypt Proxy - encrypted DNS with full GUI support

Professional Encrypted DNS profiles & signing tools for Apple devices.

Configuration profile generator for iOS and macOS to utilise DNS over HTTPS and DNS over TLS.

DNS resolver with support for DNS over TLS and ad blocking

Source code release for the 2020 FOCI paper: "Padding Ain’t Enough: Assessing the Privacy Guarantees of Encrypted DNS"

iOS/iPadOS & macOS Encrypted DNS Profile

Complete Orange Pi Zero VPN & Hotspot server with encrypted DNS, restricted SSH management, and security hardening

DoH & DoT for pfSense with a native webGUI - zero dependencies, upstream tested before every save

Lightweight local DNS proxy that forwards queries over DNS-over-QUIC (DoQ/RFC 9250). Auto-configures Windows DNS with system tray support.

A privacy-conscious macOS utility for encrypted DNS and local ByeDPI-based Discord connectivity

Temporarily disable and automatically restore profile-installed encrypted DNS on macOS from Raycast.

ClambHook is a private VPN and proxy router for macOS, GNU/Linux, and Android, powered by an independent C17 protocol core with local traffic insights, routing rules, encrypted DNS, WireGuard, OpenVPN, Tor and SOCKS5, etc..

Measure what encrypted DNS costs on the wire: round trips, bytes per cold lookup, behaviour under packet loss, and post-quantum handshake cost for Do53, DoT, DoQ, DoH/2 and DoH/3

Lightweight encrypted DNS forwarding daemon for macOS.

An OpenWrt utility that automatically switches between DNS-over-TLS and DNS-over-HTTPS based on network conditions. Includes tools to configure and verify router DNS settings.

🛠️ Fix for Encrypted-DNS (DoH/DoT) profiles on macOS 26.2 (Tahoe). Resolves the "VPN Service Payload" installation error by forcing System-wide PayloadScope. Optimized for dnsforge.de and custom DNS providers.