Encrypted DNS
If encrypted DNS is configured, the traditional DNS will only be used to test the connectivity and resolve the domain in the encrypted DNS URL.
Supported Protocol:
- DNS over HTTPS:
https://example.com
- DNS over HTTP/3:
h3://example.com
- DNS over QUIC:
quic://example.com
Use Encrypted DNS for All Domains
[General]
encrypted-dns-server = https://8.8.8.8/dns-query
You may specify multiple encrypted servers here, separated by commas.
Use Encrypted DNS for Specified Domains
[Host]
example.com = server:https://cloudflare-dns.com/dns-query
Use Encrypted DNS with Proxy
If you want to query DoH servers through a proxy, you can set encrypted-dns-follow-outbound-mode
to true.
[General]
encrypted-dns-follow-outbound-mode=true
All the encrypted DNS connections will follow the outbound mode settings. Then configure a rule for the DoH hostname to use a proxy.
Or, use PROTOCOL,DOH
, PROTOCOL,DOH3
or PROTOCOL,DOQ
rule to match all encrypted DNS connections.