Feature request - DNSCrypt support...

I’d be grateful if Mikrotik could consider adding DNSCrypt urgently to the current and future versions of ROS.

DNSCrypt has been released by DYNDNS.org as open-source code and allows users to effectively wrap DNS requests to DYNDNS servers in an SSL layer. This significantly improves security for users in public networks but should also add security for businesses against eavesdropping and man-in-the-middle attacks.

Currently the only client support for DNSCrypt is an OS-X release from DYNDNS.org but as they have published the source code, it must be straightforward for Mikrotik to add this as a package option.

All of my WAN facing Mikrotik routers use DYNDNS.org as their DNS servers as this allows free and effective filtering to avoid phishing sites and illegal content (which is flexibly adjustable by the user/manager).

Best Regards

Ian Beeby

i add my request too

I vote for DNSCrypt.
OpenDNS supports DNSCrypt. I use Mikrotik as DNS proxy to OpenDNS.

I’d also love RouterOS to support DNSCrypt!
Right now I have to run it locally on every machine on the network and reconfigure the network settings on every machine for every connection - which tedious and it’s easy to miss a connection or a machine and then DNS goes in the clear again… EWWW.

If I could just get it on the router as a package all that hassle wouldn’t be necessary!

I’d also love RouterOS to support DNSCrypt!
Right now I have to run it locally on every machine on the network and reconfigure the network settings on every machine for every connection - which tedious and it’s easy to miss a connection or a machine and then DNS goes in the clear again… EWWW.

If I could just get it on the router as a package I could get rid of all that hassle with manually editing every single connection on every single machine!

That’s old but hey.. never give up!

It should be great. Selecting already existing DNSes like cloudns or dnscrypt.eu or opendns
(or adding ours) would be great too. :smiley:
spending power and $ to have always-on an old hardware server only for dns or running the dnscrypt-proxy anywhere when we got mikrotik it’s a torture.

(Especially when there are devices that can’t support it like cellphones, or in points which you offer wifi / internet and you want all dns traffic forced to dnscrypt)

it would be nice option :slight_smile:

I agree it would be nice to have it somewhere in the future

Add me to the list. Right now I keep a little 1U Atom box just for running things like DNSCrypt. I’d love to move that to my CCR1016

Totally agree, nice feature!

+1

Would be really useful to bypass DNS-based censorship

be fine, if version 7 will support ikev2 vpn.

that is to use blackberry z10

Vote for this as well! Currently there is no proper method and using metarouter is too complex/heavy.

+1 for dnscrypt!

+i it should have, security at first position !

Would be a welcome addition to routeros.

+1 for dnscrypt!

+1 for dnscrypt!

this would be Amazing if ROS supported DNSCrypt. would really open up alot of potentail buyers to ROS just for this one feature in a home router that doesnt require alot of linux+setup.

tks

+1 for DNSCrypt support…