Andrey Meshkov

Note that one client can have multiple identifiers, this would partly solve the issue.

I'd prefer to extend `$dnsrewrite` with an option to specify TTL

We can simply use ripe API directly: https://stat.ripe.net/data/announced-prefixes/data.json?resource=AS3333 The lookup should be done periodically for all AS numbers from the blocklist/allowlist, and the result should be cached.

> Another option could be is Maxmind's GeoLite2 ASN database Yeah, this is the easiest option and I should've mentioned it here right away.

Here's the concept of prefetch: 1. Scan cached records that are about to expire 2. Asynchronously query them and update the cache This feature makes perfect sense for a DNS...

No, and tbh I prefer #2145

> socks5 will not? or will this be for the future? > Transparent Proxy for routers with iptables？just need to listen the port，i will do the iptables config in my...

@ArchiveBase yeah, I guess we can use either this one or #391

@mrbluecoat it's not yet integrated into AGH so the only way to experiment with the proxy is to follow the instruction there: https://github.com/AdguardTeam/urlfilter/tree/master/cmd I.e. you'd need to build it yourself.

Nope, not yet integrated. I'll be really-really happy if we do that until the end of the year.