Configure Google’s DNS over HTTPS resolver The resolver url for Cloudflare is as show in the screenshot above. Configure Cloudflare DNS over HTTPS resolver Add providers url to “Use DoH Server” and check the box “Verify DoH Certificate”Ĭloudflare has provided a simple web status page at to verify that you have configured DNS over HTTPS properly.

If you plan on using Google add dns.google pointing to 8.8.8.8 and 8.8.4.4. IP | DNS | Static | + Add 2 Static DNS Entries for to Address: 104.16.248.

Add a static DNS entry for the DoH hostname.

In winbox open IP | DNS, remove existing Servers tool fetch url= /certificate import file-name=cacert.pem passphrase=””

Upgrade to RouterOS v6.47 available in the stable channel.

You will see 6.47beta60 referenced in the screenshot below but I recommend using the stable channel. I used a RB4011 router running RouterOS v6.47beta60 during testing.

UPDATE: RouterOS v6.47 was released to the stable channel on June 2nd 2020 with DNS over HTTPS support. A goal of the method is to increase user privacy and security by preventing eavesdropping and manipulation of DNS data by man-in-the-middle attacks by using the HTTPS protocol to encrypt the data between the DoH client and the DoH-based DNS resolver. It is similar to DoT (DNS over TLS) but not exactly the same.ĭNS Queries over HTTPS (DoH) is an accept IETF standard RFC8484.ĭNS over HTTPS (DoH) is a protocol for performing remote Domain Name System (DNS) resolution via the HTTPS protocol. DoH is a protocol for performing remote DNS over HTTPS protocol. The latest stable version of RouterOS 6.47 adds support for DNS over HTTPS or DoH. In this MikroTik Tutorial I will show you how to configure DNS over HTTPS on your MikroTik router using either Cloudflare DNS servers or Google DNS servers.

Update routeros mikrotik