What's new

DNScrypt dnscrypt installer for asuswrt

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

How to:
Install DNSCrypt-proxy and how to set it up with NextDNS/Controld (DNS over HTTPS) with your personal account.
DNSCrypt installer in amtm and di
Info: Detected RT-AX88U router.
Info: Detected Linux platform.
Info: Detected ARMv8 architecture.
Info: JFFS custom scripts and configs are already enabled.
Info: DNS Environment is Ready.
Info: DI_VERSION=v2.4.4
Info: DNSCRYPT_VER=2.1.1
Info: Manager file is Up-To-Date!
Info: Choose what you want to do:
1) Install/Update dnscrypt-proxy
2) Uninstall dnscrypt-proxy
3) Configure dnscrypt-proxy
4) Set timezone
5) Unset timezone
6) Install (P)RNG
7) Uninstall (P)RNG
8) Install swap file
9) Uninstall ALL
b) Backup
q) Quit
=> Please enter the number that designates your selection:, [1-9/b/q]: 1
Info: This operation will install dnscrypt-proxy and related files (<6MB)
Info: to jffs, no other data will be changed.
Info: Also some start scripts will be installed/modified as required.
=> Do you want to install dnscrypt-proxy to /jffs? [y/n]: y
...
Info: Checking dnscrypt-proxy configuration...
[2022-05-23 16:52:58] [NOTICE] dnscrypt-proxy 2.1.1
[2022-05-23 16:52:58] [NOTICE] Dropping privileges
[2022-05-23 16:52:58] [NOTICE] Source [relays] loaded
[2022-05-23 16:52:58] [NOTICE] Source [odoh-servers] loaded
[2022-05-23 16:52:58] [NOTICE] Source [odoh-relays] loaded
[2022-05-23 16:52:58] [NOTICE] Source [public-resolvers] loaded
[2022-05-23 16:52:58] [NOTICE] Configuration successfully checked
=> Do you want to redirect all DNS resolutions on your network through to Dnscrypt-Proxy? [y/n]: y
Info: You can choose to keep any custom dnsfilter values by only redirect non-custom traffic or send all traffic through to Dnscrypt-Proxy.
=> Do you want to redirect only NON-CUSTOM DNS resolutions on your network through to Dnscrypt-Proxy? [y/n]: y (if you have any devices set in LAN/DNS-Filter)
Info: DNSFilter is set to control DNS through to Dnscrypt-Proxy, while leaving any Custom Rules and Values.
Info: Choose DNS resolving load balancing strategy:
1) p2 (default)
2) ph
3) first
4) random
=> Select your strategy, [1-4]: 1
=> Do you want to use load balance estimator to adjust resolvers based on latency calculations? [y/n]: y
Info: Choose how your DNS servers are selected:
1) Automatically (default)
2) Manually
3) Static
=> Select your mode, [1-3]: 3
(NextDNS Account visit https://my.nextdns.io/login enter your setup and copy your DNS STAMP can be found on setup tabs Linux or Router. For Controld use
This guide
)
=> Please choose Static Server Name: NextDNS-Custom or Controld-Custom
=> Please enter Static Server SDNS stamp: sdns://AgEAAAAAAAAAAAA..
=> Is NextDNS-Custom-Static a DNSCrypt Server? [y/n]: n
=> Is NextDNS-Custom-Static an Oblivious DNS-over-HTTPS Server? [y/n]: n
=> Do you want to set up another Static Server? [y/n]: n
Info: finished static setup.
Info: Evaluating the possibilities for other dnscrypt-proxy configurations such as relay support...
Info: Continue without Relays Support
Info: Set the DNS server(s) for initializing dnscrypt-proxy
Info: and router services (e.g. ntp) at boot
=> Default is 9.9.9.9: (Enter preferred DNS ip Or press enter to keep the default)
=> 2nd Default is 8.8.8.8: 1.1.1.1 (Or press enter to keep the default)
Info: Checking dnscrypt-proxy configuration...
[2022-05-23 16:53:09] [NOTICE] dnscrypt-proxy 2.1.1
[2022-05-23 16:53:09] [NOTICE] Dropping privileges
[2022-05-23 16:53:09] [NOTICE] Source [public-resolvers] loaded
[2022-05-23 16:53:09] [NOTICE] Source [relays] loaded
[2022-05-23 16:53:09] [NOTICE] Source [odoh-servers] loaded
[2022-05-23 16:53:09] [NOTICE] Source [odoh-relays] loaded
[2022-05-23 16:53:09] [NOTICE] Configuration successfully checked
Info: Starting dnscrypt-proxy...
Back at menu:
Recommend option 4 setup TimeZone

From router syslog:
###########################################
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: dnscrypt-proxy 2.1.1
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Network connectivity detected
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Dropping privileges
May 23 16:53:10 RT-AX88U manager[932]: start_dnscrypt_proxy took 0 second(s) to complete.
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Network connectivity detected
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Now listening to 127.0.1.1:53 [UDP]
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Now listening to 127.0.1.1:53 [TCP]
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Source [public-resolvers] loaded
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Source [relays] loaded
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Source [odoh-servers] loaded
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Source [odoh-relays] loaded
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Firefox workaround initialized
May 23 16:53:11 RT-AX88U dnscrypt-proxy[15405]: [NextDNS-Custom-Static] OK (DoH) - rtt: 21ms
May 23 16:53:11 RT-AX88U dnscrypt-proxy[15405]: Server with the lowest initial latency: NextDNS-Custom-Static (rtt: 21ms)
May 23 16:53:11 RT-AX88U dnscrypt-proxy[15405]: dnscrypt-proxy is ready - live servers: 1
###########################################
Enjoy and please check nextdns account page to see that you are connected to your account.
All good!
This device is using NextDNS with this configuration.
The personal sdns stamp can now again be found on NextDNS setup page under setup guides (linux/router)
If SDNS Stamp on NextDNS setup page is missing you can look at this post
This guide should also help for users that want Controld services.
 
Last edited:
*Update DI_Version=v2.0.8*
  • Enhanced Update function now detects minor changes.
  • Added support for defining Multiple Static Servers (as oppose to only single) thanks @Zastoff for contributions
I tried to update my Asus RT-AC68U this morning. AMTM and Diversion and Entware all appeared to update fine.

When I tried to update dnscrypt I started having errors.

There was a message about a script error in line 1335 ( I only got a glance at it) in the installer. Now when I run AMTM all looks fine, but checking for script updates I get a lines for dnscrypt that read:

di open dnscrypt ins. v2.0.8
dnscrypt-pro. v"$(curl -sL "$LATEST_URL" | grep "tag_name" | head -1 | cut -d \" -f 4)" -> v2.0.39

I have tried rerunning the installer and deleting the whole install and reinstalling, with all the necessary reboots.

Any ideas?

Can't send your .tar file - file type not allowed. Tried appending .txt to filename - file too large (8.62MB)...
Router: Asus RT-AC68U running AsusWRT-Merlin 384.14_2
DNS servers selected 45-cloudflare and 131 - google

Thanks in advance and for all the other great work to date.

Randall
 
I tried to update my Asus RT-AC68U this morning. AMTM and Diversion and Entware all appeared to update fine.

When I tried to update dnscrypt I started having errors.

There was a message about a script error in line 1335 ( I only got a glance at it) in the installer. Now when I run AMTM all looks fine, but checking for script updates I get a lines for dnscrypt that read:

di open dnscrypt ins. v2.0.8
dnscrypt-pro. v"$(curl -sL "$LATEST_URL" | grep "tag_name" | head -1 | cut -d \" -f 4)" -> v2.0.39

I have tried rerunning the installer and deleting the whole install and reinstalling, with all the necessary reboots.

Any ideas?

Can't send your .tar file - file type not allowed. Tried appending .txt to filename - file too large (8.62MB)...
Router: Asus RT-AC68U running AsusWRT-Merlin 384.14_2
DNS servers selected 45-cloudflare and 131 - google

Thanks in advance and for all the other great work to date.

Randall
I think it will be fixed in the next amtm update (i get the same "$(curl -sL "$LATEST_URL" | grep "tag_name" | head -1 | cut -d \" -f 4)" -> v2.0.39)
But di in amtm opens installer menu correct and works for me
Same for you?
DNSCrypt installer now checks and handle updates if one is available and can be updated with option 1 install/update in menu
 
I think it will be fixed in the next amtm update (i get the same "$(curl -sL "$LATEST_URL" | grep "tag_name" | head -1 | cut -d \" -f 4)" -> v2.0.39)
But di in amtm opens installer menu correct and works for me
Same for you?
DNSCrypt installer now checks and handle updates if one is available and can be updated with option 1 install/update in menu

Thanks for the info. It all appeasr to be working but that installer error made me wonder...
 
Hi, is it possible to update installer to use latest timezone data, preferably from the IANA source:
ftp://ftp.iana.org/tz/tzdata-latest.tar.gz
 
Hi, is it possible to update installer to use latest timezone data, preferably from the IANA source:
ftp://ftp.iana.org/tz/tzdata-latest.tar.gz
the one we have is the latest that I have access to that is in the appropriate format, the one you just provided is not in an appropriate format that can be used sorry as it does not have individual timezone files per regional requirements.
this is the contents of the one you provided:

upload_2020-2-8_3-14-17.png

this is only some of the zone info the one we use now includes:
upload_2020-2-8_3-16-46.png


the one you provided is incomplete.
 
Last edited:
After upgrading firmware to latest release , diversion and amtm to latest release when entering U from amtm
Code:
usr/sbin/amtm: line 80: /jffs/dnscrypt/dnscrypt-proxy: not found
di open dnscrypt inst v2.0.9 -> min upd
dnscrypt-prox upd err
ep manage Entware packages no upd
m menu amtm uu force update v3.1.1
_____________________________________________
Script update(s) available!
_____________________________________________
 
After upgrading firmware to latest release , diversion and amtm to latest release when entering U from amtm
Code:
usr/sbin/amtm: line 80: /jffs/dnscrypt/dnscrypt-proxy: not found
di open dnscrypt inst v2.0.9 -> min upd
dnscrypt-prox upd err
ep manage Entware packages no upd
m menu amtm uu force update v3.1.1
_____________________________________________
Script update(s) available!
_____________________________________________

upload_2020-2-9_1-23-47.png

it is working for me. run /jffs/dnscrypt/installer in the ssh terminal and hit option 1 for me and try again.
 

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top