38

DNS-over-QUIC

is viewed as a superior, faster, and more private version of the DNS protocol, even DoH and DoT

15 replies

null
    • IAAI
    • 4 yrs agoWed, February 3, 2021 at 9:16 AM UTC
    • Reported - view

    or even better ODoH 😬

    • olivier
    • 4 yrs agoTue, March 9, 2021 at 9:40 PM UTC
    • Reported - view

    DNS over HTTP/3 support has been released on servers and the CLI. 

    • IAAI
    • 4 yrs agoWed, March 10, 2021 at 5:01 AM UTC
    • Reported - view

    Can we get some documentation on how we can use it please ?

      • olivier
      • 4 yrs agoWed, March 10, 2021 at 11:10 AM UTC
      • Reported - view

      IAAI doc will follow

    • Johan_de_Jong
    • 4 yrs agoFri, March 12, 2021 at 9:56 PM UTC
    • Reported - view

    Super!

    In anticipation of release nextdns-v1.11.1 or v1.12.0 I gave the development version a spin and increased the buffer: 'sysctl -w net.core.rmem_max=2097152'.

    I notice the DNS queries falling back to HTTP/2.0 sometimes; from the logging it's not clear (to me) why that happens though. 

    Mar 12 22:32:11 openvpn nextdns[27452]: Connected 188.172.219.167:443 (con=42ms tls=2ms, h3-29, TLS13)

Mar 12 22:32:44 openvpn nextdns[27452]: Query 127.0.0.1 UDP PTR 66.136.178.203.in-addr.arpa. (qry=45/res=89) 739ms HTTP/3
Mar 12 22:32:45 openvpn nextdns[27452]: Query 127.0.0.1 UDP PTR 9.138.178.203.in-addr.arpa. (qry=44/res=79) 733ms HTTP/3

Mar 12 22:36:22 openvpn nextdns[27452]: Connected 188.172.219.167:443 (con=13ms tls=22ms, TCP, TLS13)

Mar 12 22:36:22 openvpn nextdns[27452]: Query 127.0.0.1 UDP A www.cnn.com. (qry=29/res=45) 50ms HTTP/2.0
Mar 12 22:36:22 openvpn nextdns[27452]: Query 127.0.0.1 UDP PTR 193.129.28.172.in-addr.arpa. (qry=45/res=12) 0ms
      • olivier
      • 4 yrs agoFri, March 12, 2021 at 11:18 PM UTC
      • Reported - view

      Johan de Jong That may happen when HTTP/3 is failing for some reason.

    • Michael_Smith
    • 3 yrs agoMon, March 15, 2021 at 9:57 PM UTC
    • Reported - view

    This is exciting!  So we're still waiting for docs or is it in the next version?  

      • olivier
      • 3 yrs agoMon, March 15, 2021 at 11:04 PM UTC
      • Reported - view

      Michael Smith for HTTP/3 there is no doc needed as DoH clients supporting HTTP/3 will automatically negotiate HTTP/3. We will update the setup tab for DoQ, but it is the same as DoT in terms of hostnames. The port is 8853 as defined by the very last draft.

      • Michael_Smith
      • 3 yrs agoMon, March 15, 2021 at 11:07 PM UTC
      • Reported - view

      Olivier Poitrey So just run the CLI again when it's released and it's all good.  Is the improvement measurable?

      • olivier
      • 3 yrs agoMon, March 15, 2021 at 11:13 PM UTC
      • Reported - view

      Michael Smith for HTTP/3 support in the CLI, you need to wait for the next revision. The improvement of Quic over TCP is only measurable on connections with packet loss. Healthy connections should not see any improvement over TCP.

      • Chris_Leidich
      • 3 yrs agoTue, March 16, 2021 at 12:57 AM UTC
      • Reported - view

      Olivier Poitrey This would seem to be a boon for mobile devices on changing or intermittent connections. Do you know if the iOS encrypted DNS feature will use HTTP/3 (if available)?

      • Pro subscriber ✓
      • DynamicNotSlow
      • 3 yrs agoTue, March 16, 2021 at 1:06 AM UTC
      • Reported - view

      Chris Leidich 

      in Safari it can already enabled: How to enable HTTP/3 in Safari 14 … | Apple Developer Forums

      • olivier
      • 3 yrs agoTue, March 16, 2021 at 1:08 AM UTC
      • Reported - view

      Chris Leidich we are discussing with Apple. HTTP/3 is currently disable in the DoH client but should be re-enabled in a next revision.

    • Michael_Smith
    • 3 yrs agoMon, March 15, 2021 at 11:45 PM UTC
    • Reported - view

    waseem alwisy I thought it was faster too, but Olivier said not.

    • maghuro
    • 3 yrs agoWed, April 7, 2021 at 8:39 PM UTC
    • Reported - view

    So when nextdns release? I don't know how to compile it for asuswrt

Login to reply

Content aside

  • Status Completed
  • 38 Likes
  • 3 yrs agoSun, April 25, 2021 at 4:21 PM UTCLast active
  • 15Replies
  • 1734Views
  • 11 Following