Gary_Dexter
Senior Member
No issue here. I try both tls://dns.quad9.net and https://dns.quad9.net/dns-query one at a time. Did you run it from your client device?
View attachment 47476
Another way of verification. You can install tcpdump from Entware.
Then, do a packet dump on port 853 or 443. It is easier to see with TLS port 853. With DOH (port 443), you may capture all https traffic including DOH.Code:opkg install tcpdump
Code:tcpdump -i any -p port 853 tcpdump -i any -p port 443
It looks something like this with TLS:
Code:Out IP <wan ip>.48055 > dns9.quad9.net.853: Flags [R.], seq 25, ack 25, win 769, options [nop,nop,TS val 2724917 ecr 1024403675], length 0 In IP dns9.quad9.net.853 > <wan ip>.48055: Flags [R], seq 1741341273, win 0, length 0
Edit: I think the easiest way is to look at AGH query log.
View attachment 47478
I can see it getting processed in AGH as being sent over to the DoH /DoT server, but it’s strange the CMD result says it’s going as plain dns.