Tried DNSCrypt-Proxy ... service not starting

Started by Chrome, January 01, 2026, 03:48:41 AM

Previous topic - Next topic

I am running version OPNsense 25.7.10 (which is the latest as of this post). I decide to try DNSCrypt version 1.16 for the first time. The service simply won't start. I've made sure the port is not in use. I am using port 5353. I have enabled DNSCrypt ... and when I try to start the service... the "please wait" bar just flashes and the service does not start.

The log/General, log/Queries and log/NX are empty.

System/Log files/General does not show any DNSCrypt error and neither does "backend".

The /var/log/dnscrypt-proxy directory is empty.

I am at a loss here.. maybe this plugin is not compatible with 25.7.10?

Any help or guidenance would be most appreciated!

Hi, normally port 5353 is used for Multicast DNS (MDNS). I think this is the reason why the service will not start.
XSK NUC Intel Celeron J3160 aka Protectli FW4B, 8GB RAM
OPNsense 25.7.2

I don't have mdns installed, but tried changing the port anyway... I tried 5354 and 53153 and there's no difference. The service still won't start.

I am currently running mine under 5353 and I have no issues with that so it is likely not a port conflict.  What error are you getting in the DNSCrypt Genral log in the services section of the web GUI?   
I had the same issue with it not starting, and it turned out to be that I did not have the Secure DNS servers listed in both sections of the GUI config.  Here is how to add them.

1. Go to this list or other site and select the Secure DNS servers you want to use https://github.com/DNSCrypt/dnscrypt-resolvers/blob/master/v3/public-resolvers.md  (I chose a few providers since DNSCrypt will select the fastest server)

2. In the Web GUI go to DNSCrypt Proxy section under services then select Configuration then the Servers Section

3. In the servers section you will want to  add a new server, Type in a unique name for the the server and then paste the SDNS ID (you do not need the sdns://) then Save it.  Repeat this for each server you wish to use. Make sure you note the names of the servers since you will need it for the next step

4.  Go to the general tab of the configuration page and scroll down to the Server List section and add the names of the servers you created in the previous and save.   

5, Try starting the service and see what the log says.



Quote from: mpoldphone191 on Today at 02:18:51 PM3. In the servers section you will want to  add a new server, Type in a unique name for the the server and then paste the SDNS ID (you do not need the sdns://) then Save it.  Repeat this for each server you wish to use. Make sure you note the names of the servers since you will need it for the next step

You nailed it! I had a bunch of servers listed on the server tab...but not all of them were unique! I removed all of them... and just left 1 server and added that name to the server list section on the general tab...and bam! The service started!

Thank you so much @mpoldphone191!!!

An error message about the server names not being unique would have been helpful.