# Install dnscrypt-wrapper with Homebrew, apk, pacman Server-side proxy that adds dnscrypt support to name resolvers. Version 0.4.2 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:dnscrypt-wrapper ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install dnscrypt-wrapper ``` Evidence: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add dnscrypt-wrapper ``` Evidence: Alpine Linux edge package indexes: dnscrypt-wrapper from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - pacman (92%): ```sh sudo pacman -S dnscrypt-wrapper ``` Evidence: Arch Linux sync databases: dnscrypt-wrapper from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz ## Package facts - **Package key:** brew:dnscrypt-wrapper - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.4.2 - **Source summary:** Server-side proxy that adds dnscrypt support to name resolvers - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** ISC - **Source archive:** - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - dnscrypt-wrapper (cli) - dnscrypt-wrapper (alias) ## Dependencies - libevent - libsodium ## Build dependencies - autoconf ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, monterey, sonoma, ventura, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.4.2 - Local data: ok - Upstream repository: https://github.com/cofyc/dnscrypt-wrapper - Upstream latest detected: v0.4.2 (current) - info: No package-manager update timestamp was available. ## Project history and usage dnscrypt-wrapper is the server-side companion to DNSCrypt client tools: it wraps an existing recursive or authoritative DNS service so that clients can speak DNSCrypt to it. ### Project history The project describes itself as a server-side proxy that adds DNSCrypt support to name resolvers. Instead of replacing resolvers such as Unbound, BIND, or PowerDNS Recursor, it was designed to sit in front of them and handle the DNSCrypt layer. Its documentation and repository identify it with the earlier DNSCrypt server ecosystem, including key generation, provider names, and a wrapper process around a conventional DNS backend. That makes it a smaller, more specialized counterpart to dnscrypt-proxy. ### Adoption history dnscrypt-wrapper reached package-manager visibility in Homebrew, Alpine, and Arch-style packaging, but it never had the broad desktop/client adoption of dnscrypt-proxy. Its audience is operators who want to publish a DNSCrypt-capable resolver rather than users who only want to consume one. ### How it is used Operators use dnscrypt-wrapper when they already run a DNS resolver and want to expose a DNSCrypt endpoint. The package is therefore configured around server keys, certificates, provider names, listen addresses, and forwarding to the local resolver. ### Why package nerds care For package history, dnscrypt-wrapper is interesting because it packages the other side of the DNSCrypt protocol. It shows how early encrypted-DNS tooling needed both client daemons and server wrappers before encrypted transport was folded into larger resolver projects. ### Timeline - 2012-2015: The public project documentation and copyright range cover the early DNSCrypt server-wrapper era. - 2010s: The package becomes available through Homebrew and Linux packaging for operators running DNSCrypt-capable resolvers. ### Related projects - Related projects include dnscrypt-proxy for clients, Unbound, BIND, and PowerDNS Recursor as wrapped DNS backends, and dnsdist for DNS load balancing in front of resolver fleets. ### Sources - - - ## Security Notes broad file, network, media, or database tool signal. - **Geiger risk:** blue / medium - broad file, network, media, or database tool signal ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** dnscrypt-wrapper - **Version Scheme:** 0 - **Revision:** 2 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - apk - dnscrypt-wrapper - 0.4.2-r3: normalized package name match | Alpine Linux edge package indexes: dnscrypt-wrapper from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | dnscrypt wrapper (server-side dnscrypt proxy), which helps to add dnscrypt support to any name resolver | https://github.com/Cofyc/dnscrypt-wrapper - pacman - dnscrypt-wrapper - 0.4.2-5: normalized package name match | Arch Linux sync databases: dnscrypt-wrapper from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A server-side dnscrypt proxy | https://dnscrypt.org/ ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [libevent](https://www.automicvault.com/pkg/brew/libevent/) - Runtime dependency declared by Homebrew. - [autoconf](https://www.automicvault.com/pkg/brew/autoconf/) - Build dependency declared by Homebrew. - [dnscrypt-proxy](https://www.automicvault.com/pkg/brew/dnscrypt-proxy/) - Shares av.db curated category or tags: cli, dns, dnscrypt, networking, privacy. - [stubby](https://www.automicvault.com/pkg/brew/stubby/) - Shares av.db curated category or tags: cli, dns, networking, privacy. - [bind](https://www.automicvault.com/pkg/brew/bind/) - Shares av.db curated category or tags: cli, dns, networking, server. - [coredns](https://www.automicvault.com/pkg/brew/coredns/) - Shares av.db curated category or tags: cli, dns, networking, server. - [ctrld](https://www.automicvault.com/pkg/brew/ctrld/) - Shares av.db curated category or tags: cli, dns, networking, proxy. - [hickory-dns](https://www.automicvault.com/pkg/brew/hickory-dns/) - Shares av.db curated category or tags: cli, dns, networking, server. - [sdns](https://www.automicvault.com/pkg/brew/sdns/) - Shares av.db curated category or tags: cli, dns, networking, privacy, server. - [adns](https://www.automicvault.com/pkg/brew/adns/) - Shares av.db curated category or tags: cli, dns, networking. - [nsd](https://www.automicvault.com/pkg/brew/nsd/) - Local metadata places this package in an adjacent workflow. Shared terms: cli, dns, libevent, name, networking. ## Combined YAML source View the package source record on GitHub. [combined/dnscrypt-wrapper.yml](https://github.com/automic-vault/db/blob/main/combined/dnscrypt-wrapper.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph