This is a OpenNIC Tier2 resolver with Alfis zones support.

OpenNIC server name: ns8.fr.dns.opennic.glue

Latest changes

• 29.10.24: Server migrated to other location. Please update your configuration
• 23.09.21: Recreated I2P address. New one is cudguj3d5t2hvhqqpk7uvtcn7vnwg5sl5s56anukbesovvo3fboq.b32.i2p
• 22.09.21: Increased limit to 10 requests per second
• 21.09.21: Requests limit enabled due to excessive traffic flow from clearnet. If your IP address make more than 120 requests per minute using UDP, it will be blocked

Service information

Our addresses:

• 191.96.153.75
• 2001:470:1f15:b80::53
• 316:8141:cf4a:9b5a::53

DNSCrypt validation information:

• DNSCrypt-Name: 2.dnscrypt-cert.opennic.i2pd.xyz
• DNSCrypt-Key: A9D6:323A:4F25:8009:2619:7515:02CE:231E:1F76:D9DE:776C:87C6:BBB2:8A0E:FFDB:0E4E

DNSCrypt stamps:

• IPv4 - sdns://AQcAAAAAAAAAETE5MS45Ni4xNTMuNzU6NDQzIKnWMjpPJYAJJhl1FQLOIx4fdtned2yHxruyig7_2w5OIDIuZG5zY3J5cHQtY2VydC5vcGVubmljLmkycGQueHl6
• IPv6 - sdns://AQcAAAAAAAAAG1syMDAxOjQ3MDoxZjE1OmI4MDo6NTNdOjQ0MyCp1jI6TyWACSYZdRUCziMeH3bZ3ndsh8a7sooO_9sOTiAyLmRuc2NyeXB0LWNlcnQub3Blbm5pYy5pMnBkLnh5eg
• Ygg - sdns://AQcAAAAAAAAAHFszMTY6ODE0MTpjZjRhOjliNWE6OjUzXTo0NDMgqdYyOk8lgAkmGXUVAs4jHh922d53bIfGu7KKDv_bDk4gMi5kbnNjcnlwdC1jZXJ0Lm9wZW5uaWMuaTJwZC54eXo

DoH:

• URL: https://opennic.i2pd.xyz/dns-query
• URL (Ygg - Alfis): https://opennic.i2pd.ygg/dns-query (note: opennic.i2pd.xyz certificate is used)
• URL (Ygg): https://[316:8141:cf4a:9b5a::53]/dns-query (note: opennic.i2pd.xyz certificate is used)

DoH stamps:

• IPv4 - sdns://AgYAAAAAAAAADTE5MS45Ni4xNTMuNzUgRE69Z7uD-IB7OSHpOKyReLiCvVCq2xEjHwRM9fCN984Qb3Blbm5pYy5pMnBkLnh5egovZG5zLXF1ZXJ5
• IPv6 - sdns://AgYAAAAAAAAAF1syMDAxOjQ3MDoxZjE1OmI4MDo6NTNdIEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOEG9wZW5uaWMuaTJwZC54eXoKL2Rucy1xdWVyeQ
• Ygg - sdns://AgYAAAAAAAAAGFszMTY6ODE0MTpjZjRhOjliNWE6OjUzXSBETr1nu4P4gHs5Iek4rJF4uIK9UKrbESMfBEz18I33zhBvcGVubmljLmkycGQueHl6Ci9kbnMtcXVlcnk

Anonymized DNS stamps:

• IPv4 - sdns://gRExOTEuOTYuMTUzLjc1OjQ0Mw
• IPv6 - sdns://gRtbMjAwMTo0NzA6MWYxNTpiODA6OjUzXTo0NDM
• Ygg - sdns://gRxbMzE2OjgxNDE6Y2Y0YTo5YjVhOjo1M106NDQz

DNS over I2P (DoI):

• Address: cudguj3d5t2hvhqqpk7uvtcn7vnwg5sl5s56anukbesovvo3fboq.b32.i2p

DoI example tunnel configuration (for i2pd):

[OPENNIC-DNS]
type = client
address = 127.0.0.1
port = 5353
destination = cudguj3d5t2hvhqqpk7uvtcn7vnwg5sl5s56anukbesovvo3fboq.b32.i2p
destinationport = 53
gzip = false
signaturetype = 7
inbound.quantity = 3
outbound.quantity = 3
inbound.length = 1
outbound.length = 1
i2p.streaming.initialAckDelay = 20
i2cp.leaseSetType = 3
i2cp.leaseSetEncType = 4
keepaliveinterval = 30
keys = transient-opennic-dns

[OPENNIC-DNS-UDP]
type = udpclient
address = 127.0.0.1
port = 5353
destination = cudguj3d5t2hvhqqpk7uvtcn7vnwg5sl5s56anukbesovvo3fboq.b32.i2p
destinationport = 53
gzip = false
keys = transient-opennic-dns

## Note: both TCP and UDP tunnels are required
## Don't forget to point outgoing DNS requests to 5353 port using firewall, for example iptables!