Encrypted DNS
If encrypted DNS is configured, the traditional DNS will only be used to test the connectivity and resolve the domain in the encrypted DNS URL.
Supported protocols:
- DNS over HTTPS:
https://example.com - DNS over HTTP/3:
h3://example.com - DNS over QUIC:
quic://example.com
Use Encrypted DNS for All Domains
[General]
encrypted-dns-server = https://8.8.8.8/dns-query
You may specify multiple encrypted servers, separated by commas.
Use Encrypted DNS for Specified Domains
[Host]
example.com = server:https://cloudflare-dns.com/dns-query
Use Encrypted DNS with Proxy
If you want to query DoH servers through a proxy, you can set encrypted-dns-follow-outbound-mode to true.
[General]
encrypted-dns-follow-outbound-mode=true
All encrypted DNS connections will follow the outbound mode settings. Then configure a rule for the DoH hostname to use a proxy.
Alternatively, use PROTOCOL,DOH, PROTOCOL,DOH3, or PROTOCOL,DOQ rules to match encrypted DNS connections.