IPv6 Native settings Quad9 on Asus RT-AX86U

[Diablo99]

Hi,

I use a Asus RT-AX86U Router .
With Merlin software RT-AX86U_386.7_2.
I live in the Netherlands.
They support IPv6.
I use ustom DNS servers on IPv4, has Quad9 enabled.

How can I successfully enable Quad9 on IPv6?

Are my screenshots correct?


Kindly regards

D.

 

[Crimliar]

You are kind of overthinking this!

The above is all you really need to be doing to get IPv6 (and IPv4) DNS working - using DoT because its IMHO the least effort way to do this!
You don't have to use DNS Director, or the LAN DHCP settings at all.
**There are more complex ways of doing it, and some of those ways will have some advantages for some uses!**

 

[Diablo99]

Thank you for these settings.

D.

 

[Tech9]

Remove LAN side DNS servers.

 

[Gar]

Are you saying DNS Director is not needed because DoT replaces it here? Or is there still a use for DNS D with DoT sometimes?

Thought I had a clear understanding of much of this stuff, but some of you get me wondering...dang it!

 

[Tech9]

Who is your question directed to?

DoT is encryption method in WAN DNS settings. DNS Director is DNS queries interception and redirection in LAN settings. It can redirect to Router (whatever you have set for WAN DNS, with or without DoT) or something else. They do different things and can work together.

 

[heysoundude]

I live in the Netherlands.
They support IPv6.
I use ustom DNS servers on IPv4, has Quad9 enabled.

How can I successfully enable Quad9 on IPv6?

Have you heard about unbound? Have you considered running it on your router? It's pretty awesome, and it is IPv6 friendly.

 

[Diablo99]

Have you heard about unbound? Have you considered running it on your router? It's pretty awesome, and it is IPv6 friendly.

Never heard about it, gonna check it.

 

[heysoundude]

Never heard about it, gonna check it.

I suspect you will prefer it to Quad9 in certain respects

 

[Tech9]

Have you considered running it on your router?

An available option, but not needed complication on a home router.

 

[heysoundude]

An available option, but not needed complication on a home router.

That's for them to decide, wouldn't you agree? They seem to be halfway there already, and potentially need (or want) some of the functionality/features it offers

 

[Tech9]

That's for them to decide, wouldn't you agree?

Built-in Dnsmasq works perfectly fine. No need for replacement. Unbound as forwarder does exactly the same thing. Unbound as resolver has pros and cons. Even though I use Unbound (default in pfSense), I don't agree it's needed on Asus home router. Extra complication for no reason with USB stick involved and potential lower overall reliability.