DNSCrypt-Proxy 2.1.17

DNSCrypt-Proxy 2.1.17

DNSCrypt-Proxy is one of the most respected DNS privacy tools in the open source networking community. Designed to encrypt DNS traffic and improve privacy, the software helps protect users from DNS spoofing, surveillance, filtering manipulation, and ISP level DNS monitoring.
(4.8)

Developer

DNSCrypt

Category

Utilities

Operating System

Windows / macOS / Linux / Android

Date Published

Mon Jul 13 2026

DNSCrypt-Proxy 2.1.17

DNSCrypt-Proxy is a free and open source DNS proxy application that encrypts DNS traffic between a user’s device and supported DNS resolvers.

The software supports multiple modern encrypted DNS protocols including DNSCrypt, DNS over HTTPS (DoH), and Oblivious DoH (ODoH). It works on Windows, Linux, macOS, BSD systems, routers, and self hosted network environments.

DNSCrypt-Proxy acts as a local DNS proxy running on the user’s machine or network gateway while forwarding encrypted DNS queries to privacy focused DNS providers.

DNSCrypt-Proxy is one of the most respected DNS privacy tools in the open source networking community. Designed to encrypt DNS traffic and improve privacy, the software helps protect users from DNS spoofing, surveillance, filtering manipulation, and ISP level DNS monitoring.

Unlike simple consumer DNS changers, DNSCrypt-Proxy provides deep customization, advanced filtering capabilities, encrypted DNS protocols, and extensive resolver management options aimed primarily at technical users and privacy enthusiasts.

Key Features of DNSCrypt-Proxy

  • Encrypted DNS Traffic
    DNSCrypt-Proxy encrypts DNS requests to prevent interception, spoofing, and ISP level DNS monitoring.

  • Support for Multiple DNS Encryption Standards
    The software supports DNSCrypt, DoH, Anonymized DNSCrypt, and ODoH for flexible privacy configurations.

  • Large Resolver Selection
    Users can choose from many public encrypted DNS providers including privacy focused resolvers and non logging DNS services.

  • Advanced Filtering and Blocking
    DNSCrypt-Proxy includes built in support for ad blocking, malware filtering, blacklist systems, cloaking, and domain filtering rules.

  • Anonymized DNS Routing
    The application supports relays and anonymized query forwarding to reduce direct association between users and DNS providers.

  • Caching and Performance Optimization
    Local DNS caching improves performance and reduces repeated network queries.

Download DNSCrypt-Proxy 2.1.17 - Software Mirrors

Download DNSCrypt-Proxy 2.1.17 for Windows
dnscrypt-proxy-x86-2.1.17.msi | 4.68 MB

Download DNSCrypt-Proxy 2.1.17 for Windows
dnscrypt-proxy-x64-2.1.17.msi | 4.75 MB

Download DNSCrypt-Proxy 2.1.17 for Windows
dnscrypt-proxy-winarm-2.1.17.zip | 4.01 MB

Download DNSCrypt-Proxy 2.1.17 for Windows
dnscrypt-proxy-win64-2.1.17.zip | 4.51 MB

Download DNSCrypt-Proxy 2.1.17 for Windows
dnscrypt-proxy-win32-2.1.17.zip | 4.43 MB

Download DNSCrypt-Proxy 2.1.17 for Solaris
dnscrypt-proxy-solaris_amd64-2.1.17.tar.gz | 4.45 MB

Download DNSCrypt-Proxy 2.1.17 for BSD
dnscrypt-proxy-openbsd_i386-2.1.17.tar.gz | 4.27 MB

Download DNSCrypt-Proxy 2.1.17 for BSD
dnscrypt-proxy-openbsd_amd64-2.1.17.tar.gz | 4.41 MB

Download DNSCrypt-Proxy 2.1.17 for BSD
dnscrypt-proxy-netbsd_i386-2.1.17.tar.gz | 4.25 MB

Download DNSCrypt-Proxy 2.1.17 for BSD
dnscrypt-proxy-netbsd_amd64-2.1.17.tar.gz | 4.4 MB

Download DNSCrypt-Proxy 2.1.17 for macOS
dnscrypt-proxy-macos_x86_64-2.1.17.zip | 4.66 MB

Download DNSCrypt-Proxy 2.1.17 for macOS
dnscrypt-proxy-macos_arm64-2.1.17.zip | 4.14 MB

Download DNSCrypt-Proxy 2.1.17 for Linux
dnscrypt-proxy-linux_x86_64-2.1.17.tar.gz | 4.63 MB

Download DNSCrypt-Proxy 2.1.17 for Linux
dnscrypt-proxy-linux_riscv64-2.1.17.tar.gz | 4.3 MB

Download DNSCrypt-Proxy 2.1.17 for Linux
dnscrypt-proxy-linux_mipsle-2.1.17.tar.gz | 4.24 MB

Download DNSCrypt-Proxy 2.1.17 for Linux
dnscrypt-proxy-linux_mips64le-2.1.17.tar.gz | 4.06 MB

Download DNSCrypt-Proxy 2.1.17 for Linux
dnscrypt-proxy-linux_mips64-2.1.17.tar.gz | 4.14 MB

Download DNSCrypt-Proxy 2.1.17 for Linux
dnscrypt-proxy-linux_mips-2.1.17.tar.gz | 4.31 MB

Download DNSCrypt-Proxy 2.1.17 for Linux
dnscrypt-proxy-linux_loong64-2.1.17.tar.gz | 4.37 MB

Download DNSCrypt-Proxy 2.1.17 for Linux
dnscrypt-proxy-linux_i386-2.1.17.tar.gz | 4.47 MB

Download DNSCrypt-Proxy 2.1.17 for Linux
dnscrypt-proxy-linux_arm64-2.1.17.tar.gz | 4.16 MB

Download DNSCrypt-Proxy 2.1.17 for Linux
dnscrypt-proxy-linux_arm-2.1.17.tar.gz | 4.42 MB

Download DNSCrypt-Proxy 2.1.17 for BSD
dnscrypt-proxy-freebsd_i386-2.1.17.tar.gz | 4.31 MB

Download DNSCrypt-Proxy 2.1.17 for BSD
dnscrypt-proxy-freebsd_arm64-2.1.17.tar.gz | 4.01 MB

Download DNSCrypt-Proxy 2.1.17 for BSD
dnscrypt-proxy-freebsd_arm-2.1.17.tar.gz | 4.27 MB

Download DNSCrypt-Proxy 2.1.17 for BSD
dnscrypt-proxy-freebsd_amd64-2.1.17.tar.gz | 4.47 MB

Download DNSCrypt-Proxy 2.1.17 for BSD
dnscrypt-proxy-dragonflybsd_amd64-2.1.17.tar.gz | 4.41 MB

Download DNSCrypt-Proxy 2.1.17 for Android
dnscrypt-proxy-android_x86_64-2.1.17.zip | 4.87 MB

Download DNSCrypt-Proxy 2.1.17 for Android
dnscrypt-proxy-android_i386-2.1.17.zip | 4.96 MB

Download DNSCrypt-Proxy 2.1.17 for Android
dnscrypt-proxy-android_arm64-2.1.17.zip | 4.4 MB

Download DNSCrypt-Proxy 2.1.17 for Android
dnscrypt-proxy-android_arm-2.1.17.zip | 4.63 MB

DNSCrypt-Proxy 2.1.17 Release Notes:

  • Added support for PQDNSCrypt (DNSCrypt 2026), using post-quantum cryptography with compatible DNSCrypt servers to protect query confidentiality against future quantum computers. It is enabled by default and can be disabled with the new pqdnscrypt setting.
  • Key material is now rotated when the local network changes, reducing linkability across network changes.
  • Fixed a cache issue that could corrupt cached responses or cause data races under concurrent use.
  • The netprobe_timeout configuration setting is now honored instead of being silently overridden by its command-line default.
  • Forwarded queries now correctly fall back to TCP after a truncated UDP response, and SOCKS-proxied anonymized DNS exchanges are sent to the relay.
  • HTTP/3 connections now retry after transient failures, and bootstrap resolution succeeds when at least one address was obtained.
  • Cloaking rules that resolve through a rule ending in an IP address are no longer incorrectly rejected as recursive. Actual loops are still rejected.
  • The monitoring dashboard now resolves API paths against the page origin, allowing it to work correctly when hosted under a path.

User Experience

DNSCrypt-Proxy is extremely powerful, but it is not beginner friendly.

The software is heavily configuration driven and relies primarily on text based configuration files rather than graphical interfaces. Initial setup can feel intimidating for users unfamiliar with networking concepts or DNS infrastructure.

For advanced users, however, the flexibility is outstanding. The ability to customize resolvers, filtering systems, anonymization layers, and query routing gives DNSCrypt-Proxy far more control than most consumer DNS tools.

Many privacy enthusiasts specifically prefer DNSCrypt-Proxy because it avoids the oversimplified limitations of browser based DNS settings.

Performance and Reliability

Performance is generally excellent when configured properly.

DNS query latency depends mostly on selected resolvers and network conditions, but local caching and optimized resolver selection often improve browsing responsiveness compared to ISP DNS systems.

The software is lightweight and runs efficiently even on low powered hardware such as Raspberry Pi based network appliances.

Reliability is also strong due to the maturity of the project and its active maintenance within privacy focused networking communities.

Privacy and Security

Privacy is the primary reason most users adopt DNSCrypt-Proxy.

Traditional DNS traffic is usually unencrypted, making requests visible to ISPs, network operators, and potentially attackers on insecure networks. DNSCrypt-Proxy helps close that gap through encrypted transport systems.

However, users should still understand that encrypted DNS alone does not provide complete anonymity. DNS providers themselves can still potentially see requests unless anonymization systems or trusted no log providers are used.

DNSCrypt-Proxy works best as one component within a broader privacy strategy alongside VPNs, secure browsers, hardened operating systems, and encrypted traffic protocols.

Pros

  • Strong DNS encryption support

  • Supports DNSCrypt, DoH, and ODoH

  • Highly customizable configuration system

  • Excellent filtering and blocking capabilities

  • Lightweight and efficient

  • Works on many operating systems and routers

  • Strong privacy oriented ecosystem

Cons

  • Steep learning curve for beginners

  • No beginner focused graphical interface

  • Configuration complexity can be overwhelming

  • Some advanced features require networking knowledge

DNSCrypt-Proxy is ideal for privacy enthusiasts, self hosted infrastructure users, advanced home network administrators, Linux users, and security focused users who want maximum control over DNS privacy and filtering.

Casual users looking for simple encrypted DNS setup may prefer easier alternatives built directly into browsers or operating systems.

DNSCrypt-Proxy remains one of the most powerful and flexible DNS privacy tools available. Its support for modern encrypted DNS standards, advanced filtering systems, and anonymized query routing make it an outstanding solution for users who prioritize privacy, security, and deep network level customization.

Comments on DNSCrypt-Proxy 2.1.17