DNS-over-QUIC
is viewed as a superior, faster, and more private version of the DNS protocol, even DoH and DoT
-
or even better ODoH
-
DNS over HTTP/3 support has been released on servers and the CLI.
-
Can we get some documentation on how we can use it please ?
-
IAAI doc will follow
-
-
Super!
In anticipation of release nextdns-v1.11.1 or v1.12.0 I gave the development version a spin and increased the buffer: 'sysctl -w net.core.rmem_max=2097152'.
I notice the DNS queries falling back to HTTP/2.0 sometimes; from the logging it's not clear (to me) why that happens though.
Mar 12 22:32:11 openvpn nextdns[27452]: Connected 188.172.219.167:443 (con=42ms tls=2ms, h3-29, TLS13) Mar 12 22:32:44 openvpn nextdns[27452]: Query 127.0.0.1 UDP PTR 66.136.178.203.in-addr.arpa. (qry=45/res=89) 739ms HTTP/3 Mar 12 22:32:45 openvpn nextdns[27452]: Query 127.0.0.1 UDP PTR 9.138.178.203.in-addr.arpa. (qry=44/res=79) 733ms HTTP/3 Mar 12 22:36:22 openvpn nextdns[27452]: Connected 188.172.219.167:443 (con=13ms tls=22ms, TCP, TLS13) Mar 12 22:36:22 openvpn nextdns[27452]: Query 127.0.0.1 UDP A www.cnn.com. (qry=29/res=45) 50ms HTTP/2.0 Mar 12 22:36:22 openvpn nextdns[27452]: Query 127.0.0.1 UDP PTR 193.129.28.172.in-addr.arpa. (qry=45/res=12) 0ms-
Johan de Jong That may happen when HTTP/3 is failing for some reason.
-
-
This is exciting! So we're still waiting for docs or is it in the next version?
-
Michael Smith for HTTP/3 there is no doc needed as DoH clients supporting HTTP/3 will automatically negotiate HTTP/3. We will update the setup tab for DoQ, but it is the same as DoT in terms of hostnames. The port is 8853 as defined by the very last draft.
-
Olivier Poitrey So just run the CLI again when it's released and it's all good. Is the improvement measurable?
-
Michael Smith for HTTP/3 support in the CLI, you need to wait for the next revision. The improvement of Quic over TCP is only measurable on connections with packet loss. Healthy connections should not see any improvement over TCP.
-
Olivier Poitrey This would seem to be a boon for mobile devices on changing or intermittent connections. Do you know if the iOS encrypted DNS feature will use HTTP/3 (if available)?
-
Chris Leidich
in Safari it can already enabled: How to enable HTTP/3 in Safari 14 … | Apple Developer Forums
-
Chris Leidich we are discussing with Apple. HTTP/3 is currently disable in the DoH client but should be re-enabled in a next revision.
-
-
waseem alwisy I thought it was faster too, but Olivier said not.
-
So when nextdns release? I don't know how to compile it for asuswrt
-
when will quic be released?
-
juliank it's been released about a month ago.
-
Olivier Poitrey how can we use it, nothing on setup page or doc
-
juliank same as DoT but with a client supporting DoQ (almost none exist as of today).
-
Olivier Poitrey I wonder why no news was released about
-
