Download DNSCrypt Proxy v2 dari Github
# buat folder tempat menyimpan dnscrypt mkdir ~/src cd ~/src # download wget https://github.com/jedisct1/dnscrypt-proxy/releases/download/2.0.7/dnscrypt-proxy-linux_arm-2.0.7.tar.gz tar zxvf dnscrypt-proxy-linux_arm-2.0.7.tar.gz cd linux-arm
Copy file konfigurasi DNSCrypt
cp example-dnscrypt-proxy.toml dnscrypt-proxy.toml
bila anda ingin mengaktifkan pengecekan DNSSEC edit file dnscrypt-proxy.toml
ubah
require_dnssec = falsemenjadi
require_dnssec = truejalankan dnscrypt
./dnscrypt-proxy start
ganti nameserver menjadi 127.0.0.1 di /etc/resolv.conf
echo "nameserver 127.0.0.1" > /etc/resolv.conf
Tes DNSCRYPT
./dnscrypt-proxy -resolve linux.com # output perintah diatas Resolving [linux.com] Domain exists: yes, 3 name servers found Canonical name: linux.com. IP addresses: 151.101.193.5, 151.101.129.5, 151.101.65.5, 151.101.1.5 TXT records: v=spf1 ip4:140.211.169.12/30 ip4:198.145.29.98 include:aspmx.pardot.com +all google-site-verification=SDW6U9788xC80xinO4aDxrgD4bkaCjLozXPv4R7oMbk globalsign-domain-verification=GAw3QxpoQCUd6MEBcIrvwmn1548c2kZ_M8jDU57Ho3 google-site-verification=AqV3SU_MRUY0GYnNYAKi_6pa0S1WU7hfq5SapcMUycI Resolver IP: 93.95.226.165 (vps-93-95-226-165.1984.is.)
DNSCrypt sebagai systemd service
Agar bisa menjalankan dnscrypt sebagai systemd service, jalankan
./dnscrypt-proxy -service install
Sekarang dnscrypt sudah bisa diaktifkan dengan systemctl
# aktifkan dnscrypt tiap booting systemctl enable dnscrypt-proxy # jalankan dnscrypt systemctl start dnscrypt-proxy