secure-dns-proxy/README.md

# secure-dns-proxy

A lightweight proxy that handles secure DNS (DoH/DoT/DoQ) upstream while exposing a standard unencrypted DNS interface on `127.0.0.35:53`.

Since the proxy listens only on a local address, unencrypted DNS is not a concern. All outbound DNS queries are securely forwarded using HTTPS, TLS, or QUIC.

### Example Flow

Local DNS Client → (unencrypted DNS on 127.0.0.35:53) → secure-dns-proxy → (encrypted DNS: DoH/DoT/DoQ) → Upstream DNS Resolver (e.g., [https://doh.archuser.org/dns-query](https://doh.archuser.org/dns-query))

# LEGAL

This project is licensed under the AGPL version 3. Note the license terms, which are summarized at [https://choosealicense.com/licenses/agpl-3.0/](https://choosealicense.com/licenses/agpl-3.0).
Initial commit 2025-04-03 14:19:28 -04:00			`# secure-dns-proxy`

commit 2025-04-03 14:44:28 -04:00			A lightweight proxy that handles secure DNS (DoH/DoT/DoQ) upstream while exposing a standard unencrypted DNS interface on `127.0.0.35:53`.

			`Since the proxy listens only on a local address, unencrypted DNS is not a concern. All outbound DNS queries are securely forwarded using HTTPS, TLS, or QUIC.`

			`### Example Flow`

commit 2025-04-03 14:53:44 -04:00			`Local DNS Client → (unencrypted DNS on 127.0.0.35:53) → secure-dns-proxy → (encrypted DNS: DoH/DoT/DoQ) → Upstream DNS Resolver (e.g., [https://doh.archuser.org/dns-query](https://doh.archuser.org/dns-query))`
commit 2025-04-03 14:51:12 -04:00
			`# LEGAL`

commit 2025-04-03 14:53:12 -04:00			`This project is licensed under the AGPL version 3. Note the license terms, which are summarized at [https://choosealicense.com/licenses/agpl-3.0/](https://choosealicense.com/licenses/agpl-3.0).`