secDNS

secDNS is a DNS resolver to help you bypass DNS spoofing (aka DNS cache poisoning) from your local ISP.

Features

Support DoT (DNS over TLS), DoH (DNS over HTTPS), and regular DNS (insecurely over TCP / UDP) upstream resolvers.
Support query over SOCKS5 proxy.
Support DNS64.
Multiple listeners and upstream resolvers can be configured.
Queries to a group of upstream resolvers can be either queued (failover, trying the next resolver if one fails) or concurrent (accepting results from the fastest resolver).
Support name-based custom rules, enabling the possibility to customize the DNS results.

Configuration

See docs/configuration.md.

Version History

See docs/version_history.md.

License

The GNU Affero General Public License v3.0 (GNU AGPLv3)

Credits

This project relies on the following third-party project:

miekg/dns

Documentation loosely ~~copied~~ referenced from:

v2ray/v2ray-core