dohproxy.com

What It Is

DoHProxy.com is not a typical SaaS cybersecurity product, but rather a self-hosted DNS-over-HTTPS proxy setup and configuration guide. Its core goal is to wrap normally unencrypted DNS queries in HTTPS to prevent direct ISP snooping, while forwarding requests in rotation to multiple DoH resolvers such as Google, Cloudflare, and OpenDNS. This reduces the likelihood that any single DNS provider can see the complete query history.

Core Capabilities and Deployment

The setup is based on a self-hosted VPS, a domain name, nginx, and Let's Encrypt certificates. The page provides full examples for Ubuntu 18.04, AWS Lightsail, Certbot, and nginx upstream configuration, including /dns-query and /.well-known/dns-query endpoints. Its protection focuses on DNS privacy and encrypted transport; it does not cover broader security capabilities such as malicious domain blocking, endpoint protection, SIEM integration, or similar features.

Pricing and Compliance

The text does not provide commercial pricing, plans, or paid support information, so it can be viewed as a free, open-source/self-hosted approach. Actual costs come from the VPS, domain name, and operations time, while certificates can be issued for free via Let's Encrypt. The page does not mention SOC 2, ISO 27001, GDPR, MLPS, or other compliance certifications, nor does it provide an SLA or enterprise contract support.

Management, Alerts, and Integrations

Management is essentially manual nginx configuration maintenance. You can add new upstream DoH resolvers and use nginx upstream features such as round-robin, weights, and connection limits. The article recommends disabling nginx access logs for anonymity, but that also reduces auditing and troubleshooting capabilities. There is no mention of a console, alerts, reports, user management, or API integrations.

Pros, Cons, and Who It’s For

Its strengths are strong control, mature components, and transparent configuration, making it suitable for individuals with Linux operations skills, privacy-conscious users, and small technical teams. The drawbacks are a relatively high barrier to entry: you need to harden the VPS yourself, renew certificates, and maintain resolver availability. Its anonymity benefits still depend on server log policies and the trustworthiness of upstream providers, so it cannot replace a full DNS security gateway.

Access from China

The page does not provide information about access from mainland China, payments, or node locations, so china_access can only be assessed as unknown. If used in China, the region of the self-hosted VPS, reachability of upstream DoH providers, and network policies will all affect the experience. Alternatives may include Cloudflare/Google/OpenDNS DoH, or self-hosting AdGuard Home, Unbound, Technitium DNS Server, and similar tools.