NextDNS CLI vs. native DOT?

[treeskygrass]

What’s the advantage one way or the other of using the next DNS CLO client versus the native DoT support?

 

[RMerlin]

One is a third party app that may break at any time (it has happened in the past), while the other is built-in in the firmware and removes one extra layer of complexity.

 

[treeskygrass]

I meant from a FEATURE standpoint.

 

[iJorgen]

I left the CLI a few months ago since it stopped doing DNS-requests for 30 seconds exactly every 30 mins. Not a clue why and the NextDNS-team couldn't understand it either. Just like @RMerlin wrote, third party apps may break and adds complexity.

Now I'm using the native DoT support with NextDNS instead and it has delivered rock solid DNS-performance for months. All settings the CLI have can be made using DNSmasq/Stubby configs instead and has even more tweaks than the CLI offers. The only thing I don't get is client names in the log-files, but not a big issues for me. If something is blocked I will see it in the first 10 entries on the log-page. Don't need to see exactly which of my Google speakers did the DNS-request. If you really need client-names in logs for some devices you can always use their app or install the Apple Configuration Profile.

 

[treeskygrass]

The only thing I don't get is client names in the log-files, but not a big issues for me. If something is blocked I will see it in the first 10 entries on the log-page. Don't need to see exactly which of my Google speakers did the DNS-request. If you really need client-names in logs for some devices you can always use their app or install the Apple Configuration Profile.

Their app or Apple Configuration profile will show you which speaker does an inquiry? How?

 

[iJorgen]

No, the opposite... Devices that can install the app /profile will report it's name otherwise it will look like the router made the request.

 

[XIII]

If you really need client-names in logs for some devices you can always use their app or install the Apple Configuration Profile.

How would you do that on non-iOS/macOS devices like a speaker?

 

[iJorgen]

How would you do that on non-iOS/macOS devices like a speaker?

Their app or Apple Configuration profile will show you which speaker does an inquiry? How?

No, like I wrote in post #6... Devices that support installation of the app/profile (PC, Mac, iOS/iPadOS etc.) will report their names, but the other bulk of devices on the network won't.
There is an integration with Dnsmasq to get client reporting, but haven't looked into it and don't know if it works together with DoT. I like to "keep it simple" with zero issues, so I'm satisfied with my current setup.

 

[treeskygrass]

I like to "keep it simple" with zero issues, so I'm satisfied with my current setup.

Simple is good, but client identification is really handy in troubleshooting issues. I've used NextDNS CLI for a long time and I never had an issue either... and I cannsee what devices make quarries which is great for troubleshooting.

RMerlin do you know if DNSFilter set to "router" will work with the NextDNS CLI?

 

[RMerlin]

RMerlin do you know if DNSFilter set to "router" will work with the NextDNS CLI?

I don't know how their implementation works, sorry. If they interface with dnsmasq then it should be fine, otherwise no.

 

[SomeWhereOverTheRainBow]

Simple is good, but client identification is really handy in troubleshooting issues. I've used NextDNS CLI for a long time and I never had an issue either... and I cannsee what devices make quarries which is great for troubleshooting.

RMerlin do you know if DNSFilter set to "router" will work with the NextDNS CLI?

you should try adguardhome, and get the best of all worlds and have full setup control at your finger tips. otherwise use @RMerlin internal implementation of stubby. As for NextDNS CLI , I think they did a good job for how far they got, but I also feel for a paid for service, they had a lot of hiccups along the way-i.e. hiccups they should have gotten rid of while they were still free.

 

[treeskygrass]

On a side note,

you should try adguardhome, and get the best of all worlds and have full setup control at your finger tips. otherwise use @RMerlin internal implementation of stubby. As for NextDNS CLI , I think they did a good job for how far they got, but I also feel for a paid for service, they had a lot of hiccups along the way-i.e. hiccups they should have gotten rid of while they were still free.

Thanks but it's Russian. Go !

 

[SomeWhereOverTheRainBow]

On a side note,

Thanks but it's Russian. Go !

So are some of the developers of nextdns cli , and you trust their online API with your privacy go figure. FYI , nextdns cli is GO as well. Also some of their servers are based in russia, especially the secondary ones.

 

[treeskygrass]

So are some of the developers of nextdns cli , and you trust their online API with your privacy go figure.

A "few" of the two?

I think you're confusing "Russian heritage" with living and operating IN Russia?

 

[SomeWhereOverTheRainBow]

A "few" of the two?

I think you're confusing "Russian heritage" with living and operating IN Russia?

FYI their secondary servers are in Russia. So some of your information is passing to Russia before it hits home on their main servers.

 

[treeskygrass]

As are all their employees and owners.

FYI their secondary servers are in Russia.

 

[SomeWhereOverTheRainBow]

As are all their employees and owners.

I would assume so. Some. Similar to adguardhome.

 

[SomeWhereOverTheRainBow]

As are all their employees and owners.

BTW we are talking about nextdns secondary servers. Hope you enjoy that fact.

 

[SomeWhereOverTheRainBow]

On a side note,

Thanks but it's Russian. Go !

Here is another option.

DNScrypt - Dnscrypt Proxy Installer For Asuswrt-Merlin(Nov.)

For those wanting quick access for the thread that has been discontinued. Dnscrypt Installer for Asuswrt (DI_VERSION="v2.1.7") There are installation instructions on the page or users can simply use option di courtesy of our favorite AMTM provided by @thelonelycoder . This installer evolved...

www.snbforums.com

 

[SomeWhereOverTheRainBow]

A "few" of the two?

I think you're confusing "Russian heritage" with living and operating IN Russia?

And by this statement I wasn't talking about the two faces you see on the outside of the box. However, I was talking about the team of developers they rely on to supplement their incomes.