A DoH client is a software that runs on your device and sends DNS queries to a resolver like 1.1.1.1 over an encrypted HTTPS connection. Once configured, the client handles DNS resolution for your device or network.
Refer to WARP client for guidance on WARP modes and get-started information for different operating systems.
DNSCrypt-Proxy ↗ 2.0+ supports DoH out of the box. It supports both 1.1.1.1 and other services. It also includes more advanced features, such as load balancing and local filtering.
-
Verify that
dnscrypt-proxyis installed and the version is 2.0 or later:dnscrypt-proxy -version2.0.8 -
Set up the configuration file using the official instructions ↗, and add
cloudflareandcloudflare-ipv6to the server list indnscrypt-proxy.toml:server_names = ['cloudflare', 'cloudflare-ipv6'] -
Make sure that nothing else is running on
localhost:53(port53is the standard DNS port on your local machine), and check that everything works as expected:dnscrypt-proxy -resolve cloudflare-dns.comResolving [cloudflare-dns.com] Domain exists: yes, 3 name servers found Canonical name: cloudflare-dns.com. IP addresses: 2400:cb00:2048:1::6810:6f19, 2400:cb00:2048:1::6810:7019, 104.16.111.25, 104.16.112.25 TXT records: - Resolver IP: 172.68.140.217 -
Register it as a system service so that it starts automatically when your device boots. Follow the DNSCrypt-Proxy installation instructions ↗.