secure-dns-proxy

A lightweight proxy that handles secure DNS (DoH/DoT/DoQ) upstream while exposing a standard unencrypted DNS interface on 127.0.0.35:53.

Since the proxy listens only on a local address, unencrypted DNS is not a concern. All outbound DNS queries are securely forwarded using HTTPS, TLS, or QUIC.

Example Flow

https://doh.archuser.org/dns-query (encrypted: HTTPS protocol) → secure-dns-proxy (unencrypted: standard DNS protocol) → 127.0.0.35:53