DNSCrypt.nl

Free public DNSCrypt v2 server hosted in Amsterdam, The Netherlands, powered by Vultr and maintained by Yee Chie Tu.

For DNS traffic encryption and authentication.

Features

  • DNSSEC validation for better security
  • Caching
  • No logs
  • ED25519 and ED448 algorithm support
  • Query prefetching to reduce latency
  • Query minimization for improved privacy
  • No forwarding to external/upstream DNS servers
  • Daily certificate rotation for forward secrecy
  • Supporting the latest DNSCrypt protocol
  • Unbound DNS resolver
  • Pi-hole compatible

DNSCrypt v2 server

Server namednscrypt.nl-ns0, dnscrypt.nl-ns0-ipv6
Provider name2.dnscrypt-cert.ns0.dnscrypt.nl
FQDNns0.dnscrypt.nl
IPv4 address45.76.35.212
IPv6 address2001:19f0:5001:30a:5400:ff:fe58:7140
Port443

Provider key and DNS stamps

# Provider key
4C84:FB8C:0511:5DFA:5F97:C5ED:0329:1370:C78A:BCD6:4E15:DD53:AB08:DE72:FB84:4ACA
# dnscrypt.nl-ns0
sdns://AQcAAAAAAAAADDQ1Ljc2LjM1LjIxMiBMhPuMBRFd-l-Xxe0DKRNwx4q81k4V3VOrCN5y-4RKyh8yLmRuc2NyeXB0LWNlcnQubnMwLmRuc2NyeXB0Lm5s

# dnscrypt.nl-ns0-ipv6
sdns://AQcAAAAAAAAAJlsyMDAxOjE5ZjA6NTAwMTozMGE6NTQwMDpmZjpmZTU4OjcxNDBdIEyE-4wFEV36X5fF7QMpE3DHirzWThXdU6sI3nL7hErKHzIuZG5zY3J5cHQtY2VydC5uczAuZG5zY3J5cHQubmw

Verification

Server details can be verified by checking out my Keybase public files which are PGP signed by me. Alternatively use dig as shown below.

To verify that you are actually making use of the server do a DNS Leak test.

Vultr promo banner

More …