To improve performance we can use a Name Service Caching Daemon, nscd: sudo apt-get install nscd sudo service nscd stop

The following guide is based on the article found on in Italian. Installation for Debian should work also on Ubuntu. Let’s see in detail how to use it on Linux. The software is released as open source on GitHub.Īt the moment this solution only works in conjunction with OpenDNS, which means that you need to change your computer’s DNS provider to OpenDNS to make use of the this security feature, that’s their business after all. It doesn’t require any changes to domain names or how they work, it simply provides a method for securely encrypting communication between OpenDNS customers and their DNS servers. In the same way the SSL turns HTTP web traffic into HTTPS encrypted Web traffic, DNSCrypt turns regular DNS traffic into encrypted DNS traffic that is secure from eavesdropping and man-in-the-middle attacks. OpenDNS is a popular DNS provider used widely both in the server as in home desktop, one of the feature they provide to their customer is DNSCrypt, a security enhancement that should add protection against all DNS based attacks, such as cache poisoning.

Opendns dnscrypt servers