If you use CloudFlare's 1.1.1.1 public DNS, the DoH, you can use the dedicated service to query DNS records from CloudFlare using DNS Over HTTPs.
Cloudflare is known for its extensive global network, which can help reduce latency in DNS resolutions. By using cloudflared to handle DNS queries, users might experience faster response times from DNS lookups, which can contribute to overall quicker internet access.This feature is available with Artiva v4.50 Service Pack 1 or Artica v4.50 Hotfix 20240508-19
Using Cloudflare's DNS over HTTPS (DoH) proxy client, provides several key benefits focused on enhancing both security and privacy when browsing the internet. Here are some of the main advantages:
- Improved Privacy:
DoH encrypts DNS queries, which prevents third parties from eavesdropping on DNS lookups.
Traditional DNS queries are sent in plaintext, making them susceptible to interception by anyone with access to the network path.
By using DoH, Cloudflare's client ensures that your DNS queries remain private and only readable by the DNS resolver, in this case, Cloudflare. - Enhanced Security:
Encrypted DNS queries help protect against DNS spoofing attacks, where an attacker could redirect a DNS request to a malicious site.
Since the DNS information is encrypted, it's more difficult for attackers to manipulate DNS responses. - Bypassing Censorship:
DoH can circumvent DNS-based censorship and filtering that some ISPs implement, as they can no longer read or modify the DNS data in transit.
This is particularly beneficial in regions where access to certain websites is restricted through DNS manipulation.
¶ Enable the Cloudflare's DNS over HTTPs Proxy Client
- On the left menu, choose
DNS > DNS Forwarders - Select on the of the Primary, secondary DNS server record.
- Set the value
“1.1.1.1”, ( Entering this value enables the Cloudflare's DNS over HTTPs Proxy Client service )
The web interface will change its behavior and display "Cloudflare DoH Proxy client" where you have set the value 1.1.1.1 and show you the status of the local service
All services: DNS local cache, DNS Firewall, Web proxy will be automatically reconfigured to use your settings.