All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
dnscry.pt - Road to 100 resolvers
➜ ~ whois dnscry.pt
Domain: dnscry.pt
Domain Status: Registered
Creation Date: 10/01/2023 10:26:12
It's been almost two years since I started the project with about 30 resolvers taken from my collection of idlers. And while I still love idling servers, it felt good to have them do something useful. But what is this all about?
The dnscry.pt project is a personal initiative by a developer known as @brueggus. It focuses on enhancing DNS security and privacy through the use of the DNSCrypt protocol. Here are some key points about the project:
- DNSCrypt Protocol: This protocol authenticates and encrypts DNS requests between clients and resolvers, preventing third parties (like ISPs) from spying on or tampering with your DNS queries.
- Public Resolvers: The project operates public DNSCrypt, DNS over HTTPS (DoH), and DNS over TLS (DoT) resolvers in various locations worldwide. These resolvers are uncensored, unfiltered, encrypted, and support DNSSEC.
- No Logging: The project ensures privacy by not storing any query logs.
- Accessibility: The resolvers can be used with any client implementing the DNSCrypt protocol, with dnscrypt-proxy being a recommended option.
If you’re interested in securing your DNS traffic, dnscry.pt offers a robust solution. Would you like to know more about how to set it up?
Thanks, Microsoft Copilot. While I wouldn't consider myself a developer, the rest is pretty accurate.
Since then, the project has been growing steadily and while I started it to promote the DNSCrypt protocol, which I still prefer over DoT/DoH, I eventually decided to support these two protocols as well on popular demand. My resolvers have been added to the official DNSCrypt resolver list and I am aware of a handful of open source projects which use my resolvers to circumvent censorship in countries which don't have the privilege of free internet access.
If you haven't looked into switching to an encrypted protocol to prevent your ISP, employer, Google or Cloudflare from analyzing or even tampering with your DNS traffic, I encourage you to do so. Chances are good that there's a dnscry.pt resolver near you.
This wouldn't have been possible without the help of generous providers sponsoring the project. Most of them are active here as well – show them some love, please!
At the moment, I am running 88 resolvers around the globe. 12 to go to reach my next milestone of 100 resolvers worldwide.
I'm particularly interested in expanding in Africa and South America and am still looking into providing a proper solution for Chinese users. But what would you be interested in? Any particular location in mind? Features you are missing? Let me know!
Hey Copilot, tell me a joke about DNSCrypt.
Sure, here’s a lighthearted one for you:
Why did the DNSCrypt protocol go to therapy?
Because it had too many unresolved queries! 😄
Comments
A map like leaflet with all the location markers on it.
We're happy to sponsor you in each of our main locations. I think all you're missing from us is Kansas City, correct?
PM me and lets make it happen.
I've got something to pitch to you that you may like. DM me at your convenience.
Legendary broiges! Do you still have that epic excel with all your idlers?
@OwnTN in Uruguay and Kazakhstan
(btw what's the point of Kharkiv if it's in Kyiv?)
(Internetport is in Hudiksvall, not Stockholm)
@brueggus We can provide you some of locations as well in Europe..
That'd be amazing
All I can offer for now is the map on https://www.dnscry.pt/ if you scroll down.
Yes, correct. IIRC you were one of the first providers sponsoring the project. That's much appreciated!
I'll respond to your PM shortly!
Sure thing. And even though I'm using @v3ng's tool to keep track of my servers for quite some time, I'm still updating that Excel.
Would love to see them introduce IPv6 support 🥲
Good catch. Both resolvers in Ukraine used to be in different cities and data centers, but I'll reach out to the provider to see if something had changed. They are still advertising both locations on their website, though.
Thanks, will update it shortly.
Much appreciated - I'll send you a PM!
I am blind as fuck.
Just one request can you change the website font as its a pain to read (might be only me).
I changed it to Arial and looks nice: https://prnt.sc/aOrV5ZZ4lisd
Comic Sans MS comes to mind.
I could give you a server hosted in germany in the myloc datacenter.
1c
2gb
25gb ssd
unlimited data transfer
1 ipv4 + ipv6
Actually, I'll keep it as-is. It's inaccurate, for sure, but if I change it, the resolver's name will not only change on the website, but also in the resolver lists which may break things for people who have it hardcoded.
Is it really that bad? I like the font.
The website layout is on my TODO list anyways because the current one has few glitches and I've been asked for dark mode multiple times. But I don't enjoy doing web design and neither am I very good at it, so that will likely be postponed even further.
Will shoot you a PM, thanks!
Unfortunately yes
Just compare:
If you like the font maybe you can just increase font-weight as its too thin
Done! Good luck with servers!
@BlaZe how to get on to ExoticVM list?
@brueggus
Happy to be part of your project, when I saw the map, I was like:
Keep up the nice work! and congratulations.
As we will expand our operations, I will DM you for further additions to the location list.
I'm recoding ExoticVM and will launch ExoticVM v2 shortly (ETA month of October)
Sorry for the delay.
Still waiting to see my sponsored server on the list
Nice, you have 2 resolver for VN, and 2 more closest HK, SGP. 👌👌👌👌
Keep up the good work mate, I’ll reconfigure my home DNS to this. Currently using DoH with nextdns.
Are users with a high number of DNS requests in a short period of time welcome? So Tor exitnodes to be precise?
Or do you limit the number of DNS requests in any way?
Not even a single russian server, meh.
@Zappie can maybe help with a south african, a new zealand or a chile server.
one in south africa would be so rad!
Maybe @Virtury will sponsor one in pakistan?
Why wouldn't you run recursor on Tor exit node itself?
Happy to sponsor a VPS in Sydney if you need one. Will be able to provide one in Melbourne next year as well.
Send me a PM.
In my opinion, it is often better to outsource the DNS resolution process when working with weaker hardware, so that the resources can be fully dedicated to the outgoing traffic. This has proven to be very effective on hardware such as SBC‘s.
On stronger hardware its better to do DNS resolution on the same machine, thats right.
Thanks everyone for your feedback!
We're getting there, apologies for the delay. All servers are provisioned but the FTP service of the shared hosting server the website is running on has TLS issues. Therefore, my tool to create the resolver lists can't push the new lists. I hope they get that sorted today...
Oh, and if you've sent me an email this week and don't have a response yet, please resend it. Emails were broken as well. Sigh.
I don't have a rate limiting implemented and I don't plan to do so unless it's necessary to prevent abuse. So I'm happy to accommodate you.
Already available
https://www.dnscry.pt/public-resolvers/jnb01
I would love to have a resolver in Cape Town as well since I kind of have a special relationship to the city (spent some months there while I was studying, good memories...), but haven't been able to find a suitable provider yet. Have been in touch with Rackzar, but they don't support IPv6, sadly.
There are resolvers in Zappie's other locations as well:
https://www.dnscry.pt/public-resolvers/zal01
https://www.dnscry.pt/public-resolvers/akl01
Good idea. Maybe I can snag a deal on Black Friday.
Will do, thanks a bunch for the offer!
Your adl01.dnscry.pt resolver seems to be located in New Zearland and not Adelaide, Australia.
Looks like you're right. It used to be in Adelaide, but they must have moved it without telling me. sigh I'll get that sorted.
We went back and forth today but they seem to be unable (or unwilling) to resolve the issue. I can't really blame them, considering the small amount of money I pay them.
I'll wait and see if anything happens over the weekend. Otherwise it may be time to give Namecrane's migration tool a try. Do you have any other suggestions for reliable shared hosting providers? (EU location, SSH access, 15 domains, 10 GB storage, full IPv6 support)
Hostbrr maybe, I am testing them right now, looks solid.