Particular settings of the dnscrypt proxy for IPv6 usage

September

2026

Particular settings of the dnscrypt proxy for IPv6 usage

Linux, безопасность

4 September 2026 22:01

Clarification: setting proxy dnscrypt-proxy for IPv6 protocol.

This setting is needed if the provider supports IPv6 and websites are accessible via the IPv6 protocol, so that DNS requests go through dns-proxy and the systemd-resolved cache.

1) Edit the file /etc/dnscrypt-proxy/dnscrypt-proxy.toml

in server-names specify the name of the DNS server that can resolve IPv6 names:

server_names = ['cloudflare-security-ipv6']
in section#Use reachable

ipv4_servers=true
ipv6_servers=true

in section#Enable DoH specifically:

block_ipv6=false

2) Restart the dnscrypt-proxy service:

sudo systemctl restart dnscrypt-proxy

3) Checking name resolution and IPv6 accessibility of the website (key -6 - IPv6, key -I- header only):

curl -6 -I https://www.google.com

You can also use your web browser to go to a test website that only works over IPv6:

https://dnslabs.nl/
https://ipv6test.google.com/

If the provider has IPv6 and dns-proxy and systemd-resolved DNS cache are running, then the site will open using the IPv6 protocol.

Checking the operation of the DNS query cache

dig -t AAAA ipv6test.google.com

View statistics:

resolvectl statistics

After each site opening or dig command request, the counter value is incremented "Total transactions".

Note
This and previous article they only provide faster responses to DNS requests, but if IPv6 does not work for the provider, then this article is useless (in 99% of cases, fixed Internet providers do not support IPv6 and do not provide it even if you ask to enable it).

Addition
The IPv6 protocol was launched by the mobile operators Megafon and MTS and works automatically when all subscribers connect to the mobile network.