search

celzero / rethink-app

DNS over HTTPS / DNS over Tor / DNSCrypt client, WireGuard proxifier, firewall, and connection tracker for Android.
https://rethinkfirewall.com/
Apache License 2.0
3.03k stars 155 forks source link

DNS: Root mode #78

Open ignoramous opened 4 years ago

ignoramous commented 4 years ago

Perhaps there's a way to avoid setting up a VPN tunnel, trapping TCP and UDP requests in port 53, yada, yada, yada ... and instead make use of root privileges for DNS over HTTPS? A possibility suggested on the telegram group to create a Magisk Module: https://github.com/xerta555/CloudflareDNS4Magisk-IPv6

See also: #66

Ch4t4r commented 4 years ago

Something like this? https://git.frostnerd.com/PublicAndroidApps/smokescreen/-/blob/master/docs/NONVPNMODE.md It still requires the user to use the app though (but not the VPN)

ignoramous commented 4 years ago

Proxy mode on port 53 makes sense (and also, may be on other ports too). Need to see how android reacts to someother process taking up the port 53 slot.

We are already adding an outgoing (forward) proxy, for example, BraveDNS would be able to send traffic to Nebulo and other such feature rich DNS apps. #45

ghost commented 1 year ago

@ignoramous hello, thank you for this great app. I tried many DNS applications for Android. Only Rethink DNS, Cloudflare Warp and SagerNet can bypass censorship. But I prefer to use Rethink DNS.

Is there any progress for root mode? I want to use Wireguard in kernel module backend mode not in userspace mode. I remember the author of WireGuard once said on XDA that WireGuard has better performance in kernel module backend mode. And of course battery life will definitely be better.