dnscrypt-proxy VS nextdns

I use dnscrypt 2.0 . https://dnscrypt.info/.

[anonymized_dns] routes = [ { server_name='*', via=['anon-plan9-ns2', 'anon-plan9-dns'] } ] skip_incompatible = true ``` I have all the default sources and lists enabled, and have not added any of my own. Load balancing is left on the default (p2). The documentation states::

It's up to you whether you trust Cloudflare or not. There are a lot of other DNS providers that can do DNSCrypt, DoH, or DoT. I think Firefox even lets you enable it by default very easily in the network settings.

I’m not familiar with DNSCrypt, but I found there might be a specific thing you need to run to completely uninstall it: https://github.com/DNSCrypt/dnscrypt-proxy/blob/master/windows/

Maybe check out the documentation? https://github.com/DNSCrypt/dnscrypt-proxy/wiki

This is FUD. This possibility has nothing to do with HTTP vs. [some other DNS-like protocol] sitting on top of an encrypted connection.

This possibility is, however, enabled by having the application package its own DNS resolution.

If you want to use DNS over HTTPS as a system-wide daemon, you can use DNSCrypt 2 (https://dnscrypt.info/ ) and disable DoH within Firefox/Chrome.

My personal use-case is that I use DNSCrypt-Proxy (DoH) with dnsmasq (caching), and use very strict filters to block domains. I don't face any issues with the websites that I use regularly, but in some cases it can cause problems. Having DoH support in Firefox saves me time and effort it would take. I don't have to find and whitelist the domain(s), remove the filter(s) entirely, or disabling system-wide DoH, as I can just use a different resolver specific to Firefox.

NextDNS.io is like a hosted version of pihole, but more reliable. It's free, or $20/yr for more features/capacity. Set up your router to send requests to it via DoH and all your internal stuff to use your router as DNS. Done and done.

I like pi-hole but I guess I'm just lazy as I really don't wanna manage any more than I necessarily have to... I use NextDNS and works wonders without me to actually manage anything (I use to have an instance of pi-hole in a local server, then I moved it to my NAS, then to a Raspberry Pi... then I just dropped the ball).

Gonna plug https://nextdns.io here. It's basically a cloud service pihole. Easier to setup and use and functions the same. Doesn't require extra hardware like a raspberry pi or Linux knowledge to set up. They have a free plan, I use it myself as a single guy but if you live with other people you'll probably have to pay $ as you would burn through the free dns requests too quickly. But solo living I skate under the max free requests even using it on my home router and phone

I just went to nextdns.io to check my subscription, and am seeing the message that my device is not using NextDNS.

NextDNS allows more control

I used to use AdGuard's DNS (https://adguard-dns.io/). It looks like they're going to be launching an upgraded version that you can customize in the future.

Right now, I'm using NextDNS (https://nextdns.io). It lets me add ad/tracking block lists, block specific domains (especially ones that serve annoying embeds in many sites), and setup rewrites so that I can have my-fake-domain.com resolve to localhost. I can use their DNS-over-HTTPS with Chrome/Edge/Firefox and I can setup my router to to use their DNS. It's basically my own little PiHole without needing the RaspberryPi (which are very hard to come by these days).

(Anxiously awaits someone on HN telling me that I shouldn't be using NextDNS)

Sign up for NextDNS and configure your router to use it as its DNS servers. In NextDNS dashboard, you will have to “link” your router’s IP for your custom settings to apply. It should be right on your dashboard after signing up.

Not directly related to OPNsense, but NextDNS with the NextDNS proxy running locally, can pass along the clients hostname and filter based on that. At one point you could run the NextDNS proxy on OPNsense, which could pass that info to NextDNS, but I’m not sure of the current status of that. https://nextdns.io/