1 # Defaults for dnscrypt-proxy upstart script
2 # See man 8 dnscrypt-proxy for more info on each parameter
4 # What local IP the daemon will listen to, with an optional port. The default port is 53.
5 local-address=127.0.0.2:53
7 # instructs resolvconf (if installed) to update the machine dns servers
10 # Write PID to a file.
11 pidfile=/run/dnscrypt-proxy.pid
13 # runs dnscrypt-proxy as a dedicated user with restrict privileges
14 # This is a security feature and should never be disabled.
17 # Remote DNS(Crypt) provider settings
18 # You can find a list of resolvers at https://github.com/jedisct1/dnscrypt-proxy/
19 # or locally in file /usr/share/doc/dnscrypt-proxy/README.markdown.gz
20 # Specifying multiple resolvers is not yet supported!
21 #resolver-address=208.67.220.220:443
22 #provider-name=2.dnscrypt-cert.opendns.com
23 #provider-key=B735:1140:206F:225D:3E2B:D822:D7FD:691E:A1C3:3CC8:D666:8D0C:BE04:BFAB:CA43:FB79
25 # Transparently add an OPT pseudo-RR to outgoing queries in order to enable the EDNS0 extension mechanism.
26 # This feature is enabled by default, with a payload size of 1252 bytes. Any value below 512 disables it.
27 #edns-payload-size=1252
29 # The maximum number of simultaneous active requests. The default value is 250.
30 #max-active-requests=250
32 # Use TCP instead of UDP. This is slower than UDP, and this workaround should never be used
33 # except when bypassing a filter is actually required.
34 # Moreover, multiple queries over a single TCP connections aren't supported yet.