DoH Still Requires PPPOE DNS Servers to be Active

RouterOS General
1

I enabled CloudFlare DoH and verified it works via https://1.1.1.1/help. It works whether I verify the certificates or not.

If I now go to the PPPOE settings for my ISP connection and disable Use Peer DNS in Dial Out settings any new DNS lookups fail. I do not understand how the DoH route for DNS can be working yet still require my Peer’s DNS servers.

Any clue?

2

Try this

/ip dns static add address=1.1.1.1 name=cloudflare-dns.com
/ip dns static add address=1.0.0.1 name=cloudflare-dns.com
3

Well, you might want to share your config. In general, this is how it works.
2022-07-08_16-32-31.jpg

4

@kjas898
1.1.1.1/1.0.0.1 are not responding to Cloudflare-dns.com.
2022-07-08_17-18-15.jpg

5

Thanks. I didn’t realise you still had to specify a DNS server IP address(es) if you used the URL. That seems to be a superfluous step(?), but it worked.

Thank you.

6

One more question. I didn’t add static DNS routes but it works anyway. Why do I need to set the cloudflare DNS routes?

7

First, the Cloudflare-dns.com record must be resolved, after which the DoH server will answer your query. You could achieve it in both ways. If you set the regular DNS server and DoH together, DoH has a higher priority than the other one.

/ip dns set server=1.1.1.1,1.0.0.1

\
<br>
* ```text
/ip dns static
add address=104.16.249.249 name=cloudflare-dns.com
add address=104.16.248.249 name=cloudflare-dns.com