bluepoint
Very Senior Member
I guess I'm just pointing out that mobile phones also roam outside of your home network and it's inconvenient to turn on/off private relay whenever you leave/arrive in your home. I and my family feels safer outside of our home with Private relay enabled than none. Desktop Mac, iPad or Gadgets that stays home all the time I agree private relay should not be needed as it's a controlled environment. That's all it is convenience.Disable the Private Relay feature then. The router is doing what it's intended to do when that router setting is enabled: ensure that client devices cannot work around the router-provided DNS server. You have to decide if you want to continue blocking that DNS bypass (in which case disable the feature on your phone), or to allow it (in which case disable the setting on the router).
It's also a DNS encryption technology that uses a DNS server that is NOT your router's. That`s why it`s part of the DoH block feature of the router.
The reason behind the existence of the router setting is not to prevent DoH itself, it`s to prevent a device from bypassing what you configure on the router. If you configure a parental control DNS server on your router, you would obviously not want your kid's iPhone to just bypass it by using either a DoH server or some Apple-approved DoQ server (Private Relay uses QUIC, which also introduce its own set of potential issues). That's when you`ll need to also enable the Prevent DoH setting on the router.
If that does not fit your personal scenario, then just disable the router setting. The option is entirely yours.