Skip to content

feat: add DoH and DoT (DNS-over-HTTPS/TLS) support - #213

Open
DinonowDev wants to merge 1 commit into
DnsChanger:mainfrom
DinonowDev:feat/doh-dot-support
Open

DinonowDev wants to merge 1 commit into
DnsChanger:mainfrom
DinonowDev:feat/doh-dot-support

Conversation

@DinonowDev

@DinonowDev DinonowDev commented Jul 28, 2026

Copy link
Copy Markdown

Summary

  • Add DoH (DNS-over-HTTPS) and DoT (DNS-over-TLS) support for custom endpoints (including AdGuard Home), closing Add DOH & DOT Support #62.
  • Prefer OS-native paths when available (Windows DoH via netsh dns add encryption, Linux DoT via NetworkManager / resolvectl), with a local 127.0.0.1:53 stub proxy fallback that forwards queries to the encrypted upstream.
  • Extend the server model, validators, Add Server UI (DoH/DoT tabs), home server card, and seed list with Cloudflare/Quad9 encrypted presets.

Test plan

  • Add a custom DoH server (e.g. https://dns.google/dns-query) and connect; confirm DNS resolution works, then disconnect
  • Add a custom DoT server (hostname + optional bootstrap IP) and connect/disconnect
  • On Windows 11: connect Cloudflare DoH and verify encryption is registered (netsh dns show encryption)
  • On Linux with NetworkManager: connect Cloudflare DoT and verify dns-over-tls / resolvectl settings
  • Confirm plain IPv4 servers still connect exactly as before
  • Confirm active encrypted connection is restored in the UI after app reload while still connected

Allow connecting through DoH/DoT (including custom AdGuard-style endpoints) via OS-native APIs when available and a local stub proxy fallback, with UI and validators for encrypted servers.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant