CentOS, DNSCrypt and pdnsd

Sun, 01 Nov 2015 22:40:27 +0000

DNSCrypt installation process is pretty simple since it is present in the repository, pdnsd on the other hand is missing, luckily compiling from source is not that hard.
For the sake of completeness I will also cover the procedure to install DNSCrypt from source, alternatively yum install dnscrypt-proxy.
Install the required dependencies and get the source code:

[root@CentOS ~]# yum install gcc libsodium-devel libtool-ltdl-dev git wget
[root@CentOS ~]# git clone https://github.com/jedisct1/dnscrypt-proxy.git
[root@CentOS ~]# wget http://members.home.nl/p.a.rombouts/pdnsd/releases/pdnsd-1.2.9a-par.tar.gz

pdnsd

Compile and install:

DNScrypt-proxy 1.6.2, new configuration

Tue, 18 Aug 2015 17:24:15 +0000

The latest version of DNScrypt-proxy does not use anymore a single configuration file (/etc/conf.d/dnscrypt-proxy) but instead completely relies on systemd.
Configuration is now split in two different files.

[root@arch ~]# cat /etc/systemd/system/multi-user.target.wants/dnscrypt-proxy.service
---
[Unit]
Description=DNSCrypt client proxy
Requires=dnscrypt-proxy.socket

[Install]
Also=dnscrypt-proxy.socket
WantedBy=multi-user.target

[Service]
Type=simple
NonBlocking=true
ExecStart=/usr/bin/dnscrypt-proxy \
 --resolver-address=185.97.7.7:27015 \
 --provider-name=2.dnscrypt-cert.fvz-rec-de-fra-01.dnsrec.meo.ws \
 --provider-key=9FCC:EB74:6856:238D:AC57:428B:DE4F:D9C6:E736:5370:E9F9:5415:3BD3:6EBE:A8C2:FAFE \
 --user=nobody

…and…

[root@arch ~]# cat /etc/systemd/system/dnscrypt-proxy.socket
---
[Unit]
Description=dnscrypt-proxy listening socket
After=network.target

[Socket]
ListenStream=127.0.0.2:53
ListenDatagram=127.0.0.2:53

[Install]
WantedBy=sockets.target

DNScrypt on nagg.eu

CentOS, DNSCrypt and pdnsd

pdnsd

DNScrypt-proxy 1.6.2, new configuration