diff --git a/d.config b/d.config
index 747e69de83c..1b4d760455d 100644
--- a/d.config
+++ b/d.config
@@ -4,9 +4,12 @@ CONFIG_TARGET_mediatek_filogic_DEVICE_bananapi_bpi-r3=y
 CONFIG_BUSYBOX_CUSTOM=y
 CONFIG_BIND_ENABLE_DOH=y
 CONFIG_BIND_LIBJSON=y
+# CONFIG_BUSYBOX_CONFIG_ASH_RANDOM_SUPPORT is not set
 CONFIG_BUSYBOX_CONFIG_FEATURE_PS_LONG=y
+# CONFIG_BUSYBOX_CONFIG_RESIZE is not set
 # CONFIG_BUSYBOX_CONFIG_TASKSET is not set
 CONFIG_DBUS_VERBOSE=y
+CONFIG_DNSCRYPT_ENABLE_PLUGINS=y
 CONFIG_GNUTLS_ALPN=y
 CONFIG_GNUTLS_ANON=y
 CONFIG_GNUTLS_DTLS_SRTP=y
@@ -24,6 +27,7 @@ CONFIG_LIBCURL_NGHTTP2=y
 CONFIG_LIBCURL_NO_SMB="!"
 CONFIG_LIBCURL_PROXY=y
 CONFIG_LIBCURL_UNIX_SOCKETS=y
+CONFIG_LIBSODIUM_MINIMAL=y
 CONFIG_LUCI_SRCDIET=y
 CONFIG_NGINX_HEADERS_MORE=y
 CONFIG_NGINX_HTTP_ACCESS=y
@@ -193,6 +197,8 @@ CONFIG_PACKAGE_ddns-scripts-one=y
 CONFIG_PACKAGE_ddns-scripts-pdns=y
 CONFIG_PACKAGE_ddns-scripts-route53=y
 CONFIG_PACKAGE_ddns-scripts-services=y
+CONFIG_PACKAGE_dnscrypt-proxy=y
+CONFIG_PACKAGE_dnscrypt-proxy-resolvers=y
 # CONFIG_PACKAGE_dnsmasq is not set
 CONFIG_PACKAGE_dnsmasq-full=y
 CONFIG_PACKAGE_dnsmasq_full_auth=y
@@ -372,6 +378,7 @@ CONFIG_PACKAGE_libpjsua2=y
 CONFIG_PACKAGE_libpopt=y
 CONFIG_PACKAGE_libreadline=y
 CONFIG_PACKAGE_libsasl2=y
+CONFIG_PACKAGE_libsodium=y
 CONFIG_PACKAGE_libspeex=y
 CONFIG_PACKAGE_libspeexdsp=y
 CONFIG_PACKAGE_libsqlite3=y
@@ -397,6 +404,7 @@ CONFIG_PACKAGE_libxtables=y
 CONFIG_PACKAGE_lua=y
 CONFIG_PACKAGE_luajit=m
 CONFIG_PACKAGE_luci-app-ddns=y
+CONFIG_PACKAGE_luci-app-dnscrypt-proxy=y
 CONFIG_PACKAGE_luci-app-firewall=y
 CONFIG_PACKAGE_luci-app-https-dns-proxy=y
 CONFIG_PACKAGE_luci-app-mwan3=y
@@ -409,6 +417,7 @@ CONFIG_PACKAGE_luci-app-upnp=y
 CONFIG_PACKAGE_luci-base=y
 CONFIG_PACKAGE_luci-compat=y
 CONFIG_PACKAGE_luci-lib-base=y
+CONFIG_PACKAGE_luci-lib-httpprotoutils=y
 CONFIG_PACKAGE_luci-lib-ip=y
 CONFIG_PACKAGE_luci-lib-json=y
 CONFIG_PACKAGE_luci-lib-jsonc=y
@@ -517,7 +526,6 @@ CONFIG_PACKAGE_strongswan-mod-md4=y
 CONFIG_PACKAGE_strongswan-mod-md5=y
 CONFIG_PACKAGE_strongswan-mod-mgf1=y
 CONFIG_PACKAGE_strongswan-mod-newhope=y
-CONFIG_PACKAGE_strongswan-mod-nonce=y
 CONFIG_PACKAGE_strongswan-mod-ntru=y
 CONFIG_PACKAGE_strongswan-mod-openssl=y
 CONFIG_PACKAGE_strongswan-mod-pem=y