Does GT-AXE11000 support DNS-over-TLS (DoT) and DNS-0ver-HTTPS (DoH)?

[stroper]

I configured GT-AXE11000 and set DNS servers to Cloudflare. However, visiting https://1.1.1.1/help from a browser (tested on both laptop and mobile phone) indicated that both DoH and DoT are "No".
I heard about https://pi-hole.net/ and I am going to try it.

Any guidance/advise would be appreciated.

Thanks!

 

[SomeWhereOverTheRainBow]

I configured GT-AXE11000 and set DNS servers to Cloudflare. However, visiting https://1.1.1.1/help from a browser (tested on both laptop and mobile phone) indicated that both DoH and DoT are "No".
I heard about https://pi-hole.net/ and I am going to try it.

Any guidance/advise would be appreciated.

Thanks!

View attachment 34321
View attachment 34322

Nope, but RMerlin version supports DoT. That is the GT-AX11000, not the GT-AXE11000.

.

You may need to buy a RPI3+ or 4 for using Pi-hole, but you would have to install stubby for DoT or install dnscrypt-proxy 2 for DoH.


here is the full guide for pihole https://docs.pi-hole.net/

 

[stroper]

Nope, but RMerlin version supports DoT. That is the GT-AX11000, not the GT-AXE11000.

. View attachment 34323

View attachment 34324

You may need to buy a RPI3+ or 4 for using Pi-hole, but you would have to install stubby for DoT or install dnscrypt-proxy 2 for DoH.


here is the full guide for pihole https://docs.pi-hole.net/

Thank you for the information. I do have raspberry pi 4 but setting up pihole with DoH and DoT is complicated. I will wait for to see merlin firmware adds support for AXE11000 model.

 

[New2This]

On you rpi4 if you want to install dietpi. Then you can one click install any software you’d like. I currently run pihole &Unbound.Then you become your own DNS server.

Lightweight justice for your SBC!

Optimised | Simplified | For everyone - Backed by community, DietPi is a minimal OS image for SBCs - Raspberry Pi, Odroid, PINE64 etc. Install software optimised for you!

dietpi.com

 

[SomeWhereOverTheRainBow]

On you rpi4 if you want to install dietpi. Then you can one click install any software you’d like. I currently run pihole &Unbound.Then you become your own DNS server.

Lightweight justice for your SBC!

Optimised | Simplified | For everyone - Backed by community, DietPi is a minimal OS image for SBCs - Raspberry Pi, Odroid, PINE64 etc. Install software optimised for you!

dietpi.com

Diet pi is pretty cool, it is definitely the path of least resistance if setting up a pihole. I use a more traditional Debian approach. I have unbound compiled with my favorite custom flags.

 

[Starrbuck]

I'm running Pihole and Cloudflared on my RPI4. Easy to install and works great, providing DoH, ad blocking, and caching.

 

[stroper]

I am going through pihole docs now. Have you setup with two dns servers with two raspberry pi devices or just single is enough?

 

[Starrbuck]

I have run two Pihole instances on VMs before, but it's not really necessary for a home network. One server should be fine for 99% of people.

 

[SomeWhereOverTheRainBow]

I have run two Pihole instances on VMs before, but it's not really necessary for a home network. One server should be fine for 99% of people.

I would only recommend more than 1 server if running your own DoH, DoT, or DNSCRYPT server. In this case client management is not as important, but in a local network it is important to see what devices did what, and why.

 

[stroper]

I was able to setup AdGuard Home with encryption on Raspberry Pi device. I went with 16gb micro SD card and Raspberry Pi OS Lite.

I added adgaurd home IP under WAN DNS servers and also on Lan DNS server field. I also added local domain name and configured adgaurd home to honor the router domain name to keep track of individual clients.

So far everything is working fine.

 

[stroper]