HowTo

DNS over HTTPS (DoH) is a next-generation communication protocol on track on becoming a major Internet standard (RFC 8484). By adding strong encryption and authentication to the good old DNS protocol, DoH tries to eliminate some of the biggest problems DNS had from the beginning: censorship, surveillance, and man-in-the-middle attacks.

FDNS was designed to run as a local DoH proxy on a Linux desktop, or as a server for a small network. Lean and mean, it protects the computers against some of the most common cyber threats, all while improving the privacy and the system performance.

FDNS is written in C and licensed under GPLv3. The number one job is privacy. We use only DoH services from non-logging providers, while preferring small operators such as open-source enthusiasts and privacy-oriented non-profit organizations.

• Works out of the box with little or no configuration changes.
• Network of 100+ non-logging DoH service providers spread across the globe. Access to specialized services such as family filtering, adblocking, security, OpenNIC.
• DNS over TLS support.
• Blocking ads, first and third-party trackers, coinminers, etc. The filters are configurable, the user can add his own hosts filter.
• DNS resolver cache and firewall: by default only A and AAAA queries are forwarded.
• Conditional DNS forwarding support and whitelisting mode.
• Regular DNS over UDP fallback in case the DoH service becomes unavailable.
• Live DNS request monitoring and statistics.
• Highly scalable multi-process design and built-in support for various security technologies: chroot, seccomp, Linux namespaces, and AppArmor.
• Seamless integration with Firejail Security Sandbox.

FDNS is a community project. We are not affiliated with any company, and we don’t have any commercial goals. Our focus is the Linux desktop. Home users and Linux beginners are our target market. The software is built by a large international team of volunteers on GitHub. Expert or regular Linux user, you are welcome to join us!

Security bugs are taken seriously, please email them to netblue30 at protonmail.com.

• Webpage: https://firejaildns.wordpress.com
• Development: https://github.com/netblue30/fdns
• Documentation: https://github.com/netblue30/fdns/wiki (wiki)
• Download: https://github.com/netblue30/fdns/releases
• Support: https://github.com/netblue30/fdns/issues (GitHub)
• FAQ: https://github.com/netblue30/fdns/wiki/FAQ (wiki)