remove DNS proxy; linux support depends on dnsmasq; support for SSL termination using SAN cert