Implementing DNS-over-HTTPS (DoH) with Google DNS on MikroTik

As internet privacy and security concerns grow, the use of DNS-over-HTTPS (DoH) has gained popularity as a means of encrypting DNS queries and protecting user data. MikroTik routers, known for their versatility and powerful networking capabilities, allow users to implement DoH with popular DNS providers like Google DNS. In this article, we’ll guide you through the process of setting up DNS-over-HTTPS using Google DNS on your MikroTik router.

What is DNS-over-HTTPS (DoH)?

DNS-over-HTTPS is a protocol that encrypts DNS queries and responses, ensuring that they are not intercepted or manipulated by malicious actors. Traditional DNS queries are sent in plaintext, making them vulnerable to surveillance or tampering. DoH encrypts these queries, providing an additional layer of security and privacy.

Setting Up DNS-over-HTTPS with Google DNS on MikroTik

Here’s a step-by-step guide to implementing DNS-over-HTTPS with Google DNS on your MikroTik router:

1. Access MikroTik RouterOS:
   • Open a web browser and enter the IP address of your MikroTik router (typically 192.168.88.1) into the address bar.
   • Log in with your router’s credentials.
2. Configure DNS Settings:
   • In the router’s web interface, navigate to “IP” on the left-hand menu, and then click on “DNS.”
   • Here, you’ll see the “Servers” tab. Click on it.
3. Add Google DNS Servers:
   • Under the “Servers” tab, click the “+” sign to add a new DNS server.
   • Enter the IP addresses of Google’s DoH servers:
     • 8.8.8.8
     • 8.8.4.4
   • You can also use alternative DoH servers if preferred.
4. Enable DNS-over-HTTPS:
   • After adding Google’s DoH servers, go to the “Settings” tab.
   • Check the “Allow Remote Requests” option.
   • Enable “Use DNS” and select “cache” from the dropdown menu.
5. Apply Changes:
   • Click “Apply” to save your DNS configuration.
6. Test the Configuration:
   • To ensure that DNS-over-HTTPS is working, open a terminal on your computer and use a command like nslookup or dig to check DNS resolution. You should see Google’s DNS servers listed.

Conclusion

Implementing DNS-over-HTTPS (DoH) with Google DNS on your MikroTik router is a relatively straightforward process that significantly enhances your network’s privacy and security. By encrypting DNS queries and responses, you protect your data from eavesdropping and potential manipulation. MikroTik’s flexible networking features make it a great choice for implementing DoH, and with Google DNS, you can be assured of reliable and secure DNS resolution for your network.