You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: README.md
+16-7
Original file line number
Diff line number
Diff line change
@@ -48,30 +48,38 @@ Usage:
48
48
dnsproxy [OPTIONS]
49
49
50
50
Application Options:
51
-
--config-path= yaml configuration file. Minimal working configuration in config.yaml.dist. Options passed through command line will override the ones from this file.
51
+
--config-path= yaml configuration file. Minimal working configuration in config.yaml.dist. Options passed through command
52
+
line will override the ones from this file.
52
53
-o, --output= Path to the log file. If not set, write to stdout.
53
54
-c, --tls-crt= Path to a file with the certificate chain
54
55
-k, --tls-key= Path to a file with the private key
55
56
--https-server-name= Set the Server header for the responses from the HTTPS server. (default: dnsproxy)
56
57
--https-userinfo= If set, all DoH queries are required to have this basic authentication information.
57
58
-g, --dnscrypt-config= Path to a file with DNSCrypt configuration. You can generate one using https://github.com/ameshkov/dnscrypt
58
59
--edns-addr= Send EDNS Client Address
59
-
--upstream-mode= Defines the upstreams logic mode, possible values: load_balance, parallel, fastest_addr (default: load_balance)
60
+
--upstream-mode= Defines the upstreams logic mode, possible values: load_balance, parallel, fastest_addr (default:
61
+
load_balance)
60
62
-l, --listen= Listening addresses
61
63
-p, --port= Listening ports. Zero value disables TCP and UDP listeners
62
64
-s, --https-port= Listening ports for DNS-over-HTTPS
63
65
-t, --tls-port= Listening ports for DNS-over-TLS
64
66
-q, --quic-port= Listening ports for DNS-over-QUIC
65
67
-y, --dnscrypt-port= Listening ports for DNSCrypt
66
-
-u, --upstream= An upstream to be used (can be specified multiple times). You can also specify path to a file with the list of servers
68
+
-u, --upstream= An upstream to be used (can be specified multiple times). You can also specify path to a file with the
69
+
list of servers
67
70
-b, --bootstrap= Bootstrap DNS for DoH and DoT, can be specified multiple times (default: use system-provided)
68
-
-f, --fallback= Fallback resolvers to use when regular ones are unavailable, can be specified multiple times. You can also specify path to a file with the list of servers
71
+
-f, --fallback= Fallback resolvers to use when regular ones are unavailable, can be specified multiple times. You can also
72
+
specify path to a file with the list of servers
69
73
--private-rdns-upstream= Private DNS upstreams to use for reverse DNS lookups of private addresses, can be specified multiple times
70
-
--dns64-prefix= Prefix used to handle DNS64. If not specified, dnsproxy uses the 'Well-Known Prefix' 64:ff9b::. Can be specified multiple times
74
+
--dns64-prefix= Prefix used to handle DNS64. If not specified, dnsproxy uses the 'Well-Known Prefix' 64:ff9b::. Can be
75
+
specified multiple times
71
76
--private-subnets= Private subnets to use for reverse DNS lookups of private addresses
72
-
--bogus-nxdomain= Transform the responses containing at least a single IP that matches specified addresses and CIDRs into NXDOMAIN. Can be specified multiple times.
77
+
--bogus-nxdomain= Transform the responses containing at least a single IP that matches specified addresses and CIDRs into
78
+
NXDOMAIN. Can be specified multiple times.
79
+
--hosts-files= List of paths to the hosts files relative to the root, can be specified multiple times
73
80
--timeout= Timeout for outbound DNS queries to remote upstream servers in a human-readable form (default: 10s)
74
-
--cache-min-ttl= Minimum TTL value for DNS entries, in seconds. Capped at 3600. Artificially extending TTLs should only be done with careful consideration.
81
+
--cache-min-ttl= Minimum TTL value for DNS entries, in seconds. Capped at 3600. Artificially extending TTLs should only be
82
+
done with careful consideration.
75
83
--cache-max-ttl= Maximum TTL value for DNS entries, in seconds.
76
84
--cache-size= Cache size (in bytes). Default: 64k
77
85
-r, --ratelimit= Ratelimit (requests per second)
@@ -93,6 +101,7 @@ Application Options:
93
101
--edns Use EDNS Client Subnet extension
94
102
--dns64 If specified, dnsproxy will act as a DNS64 server
95
103
--use-private-rdns If specified, use private upstreams for reverse DNS lookups of private addresses
104
+
--hosts-file-enabled= If specified, use hosts files for resolving (default: true)
0 commit comments