Step 1 - Install and Configure dnscrypt-proxy
sudo su
pacman -S dnscrypt-proxy
cd /etc/dnscrypt-proxy/
vim dnscrypt-proxy.toml
- Choose dns resolver
https://download.dnscrypt.info/resolvers-list/v2/public-resolvers.md
server_names = ['scaleway-fr', 'soltysiak', 'cloudflare', 'doh-blahdns-de']
- Configure Liste address on port 53000
listen_addresses = ['127.0.0.1:53000', '[::1]:53000']
- Enable dns cache
cache = true
- Start service and add it ot the boot time
systemctl start dnscrypt-proxy
systemctl enable dnscrypt-proxy
Step 2 - Install and Configure Dnsmasq
pacman -S dnsmasq
vim /etc/dnsmasq.conf
- Configure Dnsmasq
no-resolv
server=::1#53000
server=127.0.0.1#53000
listen-address=::1,127.0.0.1
- DNSSEC Validation
conf-file=/usr/share/dnsmasq/trust-anchors.conf
dnssec
- Start service and add it to the boot time
systemctl start dnsmasq
systemctl enable dnsmasq
Step 3 - systemsettings
systemsettings/connection automatically(only address) dns: 127.0.0.1
Step 4 - china dns
https://github.com/felixonmars/dnsmasq-china-list
Step 5 - Checking the Result