Skip to content

Enable SNI Rule for DoT in order PrivateDNS in android to work

ebal requested to merge PrivateDNS into main

With this change (SNI Rule) we can have additional domain names for DNS over TLS (DoT), that can listen on the same TCP Port: 853, as the default LibreDNS DoT service: dot.libredns.gr.

We can forward DNS requests based on the SNI Rule and block ads & malware. This also works with the Android Private DNS setting.

Current URI is : noads.libredns.gr

It is also related to this DNS change in Gandi

dig noads.libredns.gr +noall +answer +additional
noads.libredns.gr.	539	IN	CNAME	libredns.gr.
libredns.gr.		539	IN	A	116.202.176.26
dig noads.libredns.gr +noall +answer +additional  aaaa
noads.libredns.gr.	10560	IN	CNAME	libredns.gr.
libredns.gr.		538	IN	AAAA	2a01:4f8:1c0c:8274::1

So it would work for both IPv4 & IPv6

Screenshot_2022-12-24_18-21-15

Screenshot_2022-12-24_18-21-53

Screenshot_2022-12-24_18-22-09

Screenshot_2022-12-24_18-23-32

Merge request reports