New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Comments
@brueggus I have a sponsor for a Cape Town node, DM'ing you
@MassiveGRID with their HA cluster hosting
@hostking in ZA but im not sure if the servers are located there
With pleasure!
This are fantastic news
@brueggus
I used to use this program called Simple DNSCrypt several years ago. I just loved it because of the GUI and everything flowed nicely together with the DNSCrypt protocol.
Extra smart options too for automation.
For example, only connect to DNSCrypt servers that don't log, only servers with best encryption, only selected servers, etc...
It hasn't been updated since 2020, could I run this program now in 2024 and connect to the dns servers that dnscry.pt has??
@tothost for VN @brueggus as a backup to your greencloud servers there
You can try yogadns, it's free for one dns server or https://github.com/DNSCrypt/dnscrypt-proxy
Thanks everyone for your feedback!
Thank you so much! I'm in contact with them and hope the servers will be provisioned soon.
Maybe, just give it a try! The DNSCrypt protocol hasn't changed in years, so that shouldn't be an issue. But the resolver lists I provide are signed using the current "hashed" signature format and I don't think that existed back in 2020...
I still can't use my automation because of the hosting server acting up (fun fact, had another downtime while I was typing this post), but I have updated the resolver lists manually and hopefully haven't fat-fingered anything...
Update
hkg02I'd like to say "Thank you!" to all generous sponsors who donate resources to the project and allow me to grow the project and to continue providing this service to the internet community for free.
Talking of community, I have made few attempts to contact providers outside the Green Forums trying to fill them with enthusiasm for the project. In most cases I got no response at all (which is fine and expected), in some cases I communicated with clueless support agents and eventually gave up and in one case I found myself in a weird Zoom meeting with a Ferengi from their sales department offering me a 10% discount if I rent a gross ton of servers and pay for at least a year upfront. In none of these cases have I been able to partner up with the provider.
In the LE world, it's way less complicated. Few PMs forth and back and everything is sorted.
I have some more locations coming up next week. Stay tuned!
Imo not only quantity is necessary but quality. As a user of the dns server I'm not interested in switching constantly cause some servers gets cancelled cause the sponsor is not sponsoring anymore, or server is sometimes offline,.... . Atleast there should be one address for one location (example Amsterdam, like ams.dnscry.pt) right now I guess it's not necessary to have more than one server for one location.
Maybe extend the service to adblocking dns too like ams.ad.dnscry.pt and one address for blocking
kick out all servers with low uptime or an uptime lower than 99,9 percent.
I have no problem to extend the server I've sponsored for some years so you don't have to worry to switch addresses or servers again for the location and I think providers which are sponsoring one or more servers could also extend their sponsorship so you don't have to spend much time to extend servers or contact the sponsors if they could extend the sponsorship. You could also add DOH,... to your servers.
Btw I'm typing on my phone and I'm super tired so excuse me if something is not easy to understand
@brueggus if my sponsored server needs to be renewed, contact me and I will extend it and post your btc or ltc address here, so people can donate so you can buy a beer, a coffee or a server.
@brueggus
I think we want to sponsor you
Write in DM to make arrangements.
I fully agree. That's why I only accept long-term sponsorships and focus on reliable hosting companies. In some locations I don't really have a choice, obviously.
If you use
dnscrypt-proxy, I recommend configuring it to fetch the auto-generated resolver list. It will update the list periodically and select the resolvers with the lowest latency.I've been looking into that. This won't work for DNSCrypt (which uses DNS stamps containing the resolvers' IP addresses) but could definitely be done for DoT/DoH.
This could be done on a per-country basis (i. e. de.dnscry.pt, gb.dnscry.pt and so on). But in some cases (USA, Canada), I would need to add some logic so that someone on the East Coast doesn't get sent to Los Angeles.
In some locations (esp. East Asia) the resolvers are used a lot more than in other locations and peering to local ISPs differs a lot depending on the upstreams (or networks) the resolver is hosted on - even though the servers are hosted in the same city.
I've had that request few times but refused implementing it, because I don't want to fuck around with my users' DNS requests. And I would either need additional IPs or use non-standard ports which might lead to confusion.
...but @MannDude and I may have something exciting coming up sooner or later...
Don't get me started
The server you're sponsoring has been giving me headaches but since yesterday it is fully working. The provider's DDoS protection has been filtering DNSCrypt packages and they had to switch me to a new IP without DDoS protection (pls don't ddos me, thx).
DNSCrypt, Anonymized DNS, DoT and DoH are supported.
Thanks to generous sponsors and the cooperation of providers, I am happy to announce that I've been able to add resolvers in some (more or less uncommon) locations:
This makes a total of 105 resolvers in 96 different locations. Quest completed!
I hope you like the new locations and I hope they are useful for you! Thanks everyone for your feedback and a special thanks to all sponsors! The project wouldn't have been able to grow as much as it did over the last almost two years without your support!
Quick update: A second resolver in Stockholm has just gone live. It is generously provided by Skhron (@tentor ) .
Wow, this is a great project and one of the best usecases for so many vpses I have seen in a long time. Will for sure check it out and change my regular dns resolvers to it
Keep up the good job
Great project! I will try it and share with my friends.
Damn, I should really start using these and start looking into how I can use DoH on Windows 10 systemwide (right now I've only got DoH setup in my browsers), as the Windows options don't show a DoH option.
I think it's only available in Preview Builds at the moment, but it's confusing. I googled around and some articles suggest to edit the Registry to switch to DoH while others show screenshots of the Network Settings UI where they can select DoH servers (for example here: https://winaero.com/how-to-enable-dns-over-https-in-windows-10/)
You could have a look at https://github.com/instantsc/SimpleDnsCrypt instead. It uses the DNSCrypt protocol instead of encapsulating DNS in HTTP requests and is more lightweight.
It's been about two years since I came up with the wet idea to turn my idlers into something useful for the public. Today, I am running 106 resolvers worldwide. Oopsie.
This wouldn't have been possible without the generosity of the sponsors of this project, of course. Most of them are active members of the LowEnd community.
I'd like to celebrate this by giving away two of these brand new dnscry.pt mugs:
ChatGPT and I have created a small CTF challenge which can be found at https://raffle.dnscry.pt/
More information on how to participate can be found here.
If you don't live in the EU or rather spend your time on smashing F5 in the Christmas thread, I still have few dnscry.pt stickers in stock. Just shoot me a PM - I ship these worldwide.
Good luck and Merry Christmas!
Yup, I too ended up being confused after googling and then just set private dns (DoH) in Browser. Kinda lame this isn't supported by default on Windows. Like, not even any other type of encrypted DNS by default is supported. Just plain dns
Harder then expected
I wasn't sure whether it's too difficult.. but then I got a PM from @FAT32 with the correct solution few minutes after I published the post
Problem is I have no idea what I am looking for XD. Found some stuff but no idea, is windows needed?
One thing was rather obvious IMHO, but the password/key seems to be quite well-hidden (or I'm simply dumb...).
Edit: and of course thanks @brueggus!
There's a hint in the text on the raffle website.
Found it!
Can't really find it, but after I found the key, it seemed rather dumb of me to not have looked there before.
You sly fox, that was pretty funny
@brueggus do the non-ascii characters at the end belong to the solution?
And thanks, that was fun!
They are emoji's