undefined | Better HN

0 pointsbaobabKoodaa10mo ago0 comments

Windows 11 does not allow using this combination

0 comments

You can use it, you just need to set the DNS over HTTPS templates correctly, since there's an issue with the defaults it tries to use when mixing providers.

The templates you need are:

1.1.1.1: https://cloudflare-dns.com/dns-query

9.9.9.9: https://dns.quad9.net/dns-query

8.8.8.8: https://dns.google/dns-query

See https://learn.microsoft.com/en-us/windows-server/networking/... for info on how to set the templates.

baobabKoodaaOP10mo ago

Awesome! Thank you!

antonvs10mo ago

You're welcome. btw I came across a description of doing it via the GUI here: https://github.com/Curious4Tech/DNS-over-HTTPS-Set-Up

snickerdoodle1210mo ago

Huh? Did they break the primary/secondary DNS server setup that has been present in all operating systems for decades?

antonvs10mo ago

DNS over HTTPS adds a requirement for an additional field - a URL template - and Windows doesn't handle defaulting that correctly in all cases. If you set them manually it works fine.

snickerdoodle1210mo ago

What does that have to do with plain old dns?

antonvs10mo ago

Nothing, but Windows can automatically use DNS over HTTPS if it recognizes the server, which is the source of the issue the other commenter mentioned.

lxgr10mo ago

How so? Does it reject a secondary DNS server that’s not in the same subnet or something similar?

antonvs10mo ago

It's using DNS over HTTPS, and it doesn't default the URL templates correctly when mixing (some) providers. You can set them manually though, and it works.

lxgr10mo ago

Ah, this is for DoH, gotcha!

This "URL template" thing seems odd – is Windows doing something like creating a URL out of the DNS IP and a pattern, e.g. 1.1.1.1 + "https://<ip>/foo" would yield https://1.1.1.1/foo?

If so, why not just allow providing an actual URL for each server?

antonvs10mo ago

It does allow you to provide a URL for each server. The issue is just that its default behavior doesn't work for all providers. I have another comment in this thread telling the original commenter how to configure it.

1 more reply

j / k navigate · click thread line to collapse

0 comments

antonvs10mo ago

You can use it, you just need to set the DNS over HTTPS templates correctly, since there's an issue with the defaults it tries to use when mixing providers.

The templates you need are:

1.1.1.1: https://cloudflare-dns.com/dns-query

9.9.9.9: https://dns.quad9.net/dns-query

8.8.8.8: https://dns.google/dns-query

See https://learn.microsoft.com/en-us/windows-server/networking/... for info on how to set the templates.

baobabKoodaaOP10mo ago

Awesome! Thank you!

antonvs10mo ago

You're welcome. btw I came across a description of doing it via the GUI here: https://github.com/Curious4Tech/DNS-over-HTTPS-Set-Up

snickerdoodle1210mo ago

Huh? Did they break the primary/secondary DNS server setup that has been present in all operating systems for decades?

antonvs10mo ago

DNS over HTTPS adds a requirement for an additional field - a URL template - and Windows doesn't handle defaulting that correctly in all cases. If you set them manually it works fine.

snickerdoodle1210mo ago

What does that have to do with plain old dns?

antonvs10mo ago

Nothing, but Windows can automatically use DNS over HTTPS if it recognizes the server, which is the source of the issue the other commenter mentioned.

lxgr10mo ago

How so? Does it reject a secondary DNS server that’s not in the same subnet or something similar?

antonvs10mo ago

It's using DNS over HTTPS, and it doesn't default the URL templates correctly when mixing (some) providers. You can set them manually though, and it works.

lxgr10mo ago

Ah, this is for DoH, gotcha!

This "URL template" thing seems odd – is Windows doing something like creating a URL out of the DNS IP and a pattern, e.g. 1.1.1.1 + "https://<ip>/foo" would yield https://1.1.1.1/foo?

If so, why not just allow providing an actual URL for each server?

antonvs10mo ago

1 more reply

j / k navigate · click thread line to collapse