The title is overselling it a bit. What I originally wanted was a transparent proxy for the LAN. But I’ve been short on time lately, and after poking at it on and off I ended up with just a DNS box. I’ll get around to compiling and installing the transparent proxy gateway another day. That said, even running nothing but a DNS service taught me a fair bit, especially about how stable the Raspberry Pi is, so I figured I’d write it down in case it helps someone.

I only use Ubuntu and Windows 10, so getting DNSCrypt configured on those two is all I need. On Ubuntu you can add a PPA and install dnscrypt sudo add-apt-repository ppa:anton+/dnscrypt sudo apt-get update sudo apt-get install dnscrypt-proxy Once it’s installed, edit the config first — the default isn’t OpenDNS’s server. sudo vim /etc/default/dnscrypt-proxy Comment out the original DNS server in there and uncomment the OpenDNS server above it. You don’t have to do this, it’s just that speed might be a bit slow otherwise.