How to install and configure DNSCrypt Proxy service on RHEL 8 - nomorespice/rhel8-howto GitHub Wiki

DNSCrypt Proxy is a flexible DNS proxy, with support for modern encrypted DNS protocols. This procedure will guide you through the installation and configuration of DNSCrypt Proxy on a Red Hat Enterprise Linux 8 server.

This document assumes that:

  • you installed the RHEL 8 x64 Operating System according to How to install RHEL 8 via kickstart
  • you are performing these tasks as root
  • you are performing these tasks in order, as some tasks require others to be completed first

Install required software

yum -y --enablerepo=epel install dnscrypt-proxy

Configure DNSCrypt Proxy service

Disable the socket requirement for the service

Optional - Configure named (BIND) to forward requests to the DNSCrypt Proxy service

Add the following forward statements to the global options in named.conf

  forwarders { 127.0.0.1 port 8053; };
  forward only;
/bin/sed -i "s/Requires=dnscrypt-proxy.socket/#Requires=dnscrypt-proxy.socket/" /etc/systemd/system/dnscrypt-proxy.service
/bin/sed -i "s/Also=dnscrypt-proxy.socket/#Also=dnscrypt-proxy.socket/" /etc/systemd/system/dnscrypt-proxy.service

Enable and start the DNSCrypt service

systemctl enable dnscrypt-proxy --now