It was DNS

I publicly provide 3 DNS server endpoints using the   DNS over HTTPS  ᛡ  DNSCrypt    protocol. This means that the communication between your terminal and my DNS servers will be encrypted. If someone attempts a Man-in-the-Middle attack using mitmproxy, bettercap, or a simple tcpdump on port 53, they will be unable to see your traffic.

My servers use Adguard, DNSCrypt Technitium as DNS software continuously updated.

The Adguard endpoint is useful for dispersing your DNS requests across multiples   DNS over HTTPS  ᛡ  DNSCrypt   servers, all hosted in Europe with extremely low latency. I have benchmarked each of them to create a curated list that respects privacy.

The Technitium endpoint is a unique DNS over HTTPS server Recursive Resolver, which can be useful for filling your list of dispersed servers, such as the one I offer above.

The DNSCrypt Server endpoint is a unique DNSCrypt Recursive Resolver, which can be useful for filling your list of dispersed servers, such as the one I offer above.

Regarding privacy, I host services in separate LXC containers on my own equipment, connected to a low-latency fiber connection. I anonymize all IP addresses that connect to my DNS servers. I do not exploit any data and do not look at logs - I have better things to do. Life is short.

Dilution Upstreams Proxy

Software: AdGuard Home (latest)

Endpoint : https://doh-dilution-to-upstreams-adguardhome.nicolas-dorriere.fr/dns-query

Features : 

- DNS over HTTPS (reverse caddy TLS)
- dilution max 5%
- self-hosted in France
- adblock
- DNSSEC
- no filter
- no logging
- IP anonymized
- load-balancing mode
- cache
- dashboard not exposed to internet
- average processing time 30ms

ip anonymization enabled

Ad-Blocklists

Dilution

What is dilution? I've adopted this term to simply explain that each DNS request is systematically sent to a different DNS server, thus avoiding any notion of centralization by a single entity and reinforcing privacy.

The DNS servers of Cloudflare (1.1.1.1) or Google (8.8.8.8) concentrate too many DNS requests. They use your data to likely serve ads for Google, and for Cloudflare, likely to improve their products. 1.1.1.1 remains the recursive DNS server with the lowest latency in the world, ahead of Google and others.

We avoid centralization, as mentioned earlier, and achieve dilution. 
The more servers we have in our dilution list, the better your privacy will be.

DNS over HTTPS servers with low latency and respect for privacy (no logging, anonymization) are rare. That's why I offer a public endpoint to help improve the global privacy of internet users.

Dilution list

Features Public Upstream :

- DNS over HTTPS (DoH)
- DNSCrypt
- Direct to root servers (no upstream)
- Keeps DNS traffic inside Europe
- 200ms max
- No Cloudflare
- No Google

∴ DOH Server (5)

∵  DNSCrypt Server (5)

Stats

The percentages in the table below show the number of requests dispatched to the different DNS servers present in Adguard's list. For example, for the server collecting the most requests, doh.ffmuc.net, they will see a maximum of 34.36% of my DNS traffic. The public DNS server of sdns://AQcAAAAAAAAAK1syMDAxOjliMTo0 sees only 1,93% of my traffic.

Recursive Resolver