mleo
Gold Member | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
Whitelists have been implemented: one a name matches a pattern in the whitelist, rules from the name-based and IP-based blacklists will be bypassed. Whitelists support the same patterns as blacklists, as well as time-based rules, so that some website can be normally blocked, but accessible on specific days or times of the day.
Lists are now faster to load, and large lists require significantly less memory than before.
New options have been added to disable TLS session tickets as well as use a specific cipher suite. See the example configuration file for a recommended configuration to speed up DoH servers on ARM such as Android devices and Raspberry Pi.
The -service install command now remembers what the current directory was when the service was installed, in order to later load configuration files with relative paths.
DoH: The "Cache-Control: max-age" header is now ignored.
Patterns can now be prefixed with = to do exact matching: =example.com matches example.com but will not match www.example.com.
Patterns are now fully supported by the cloaking module.
A new option was added to use a specific cipher suite instead of the server's provided one. Using RSA+ChaChaPoly over ECDSA+AES-GCM has shown to decrease CPU usage and latency when connecting to Cloudflare, especially on Mips and ARM systems.
The ephemeral keys mode of dnscrypt-proxy v1.x was reimplemented: this creates a new unique key for every single query.
|
