Skip to content

DNS over HTTPS ("DoH") and DNS over TLS ("DoT") configuration profiles for iOS 14 and MacOS Big Sur and newer

License

Notifications You must be signed in to change notification settings

Undercook1799/layer7-dns-profiles

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Providers

Name Filtered? Source Link Anycast? Install
Adguard - Default Yah https://adguard-dns.io/en/public-dns.html Yah HTTPS, TLS
Adguard - Family Yah https://adguard-dns.io/en/public-dns.html Yah HTTPS, TLS
Adguard - Unfiltered Nah https://adguard-dns.io/en/public-dns.html Yah HTTPS, TLS
Ahadns Blitz Nah https://blitz-setup.ahadns.com/ Yah HTTPS
Ahadns Blitz w/ lightswitch05 Yah https://blitz-setup.ahadns.com/ Yah HTTPS
Ahadns Blitz w/ OISD Full Yah https://blitz-setup.ahadns.com/ Yah HTTPS
Blahdns's Germany Yah https://blahdns.com/ Nah HTTPS, TLS
Blahdns's Japan Yah https://blahdns.com/ Nah HTTPS, TLS
Blahdns's Singapore Yah https://blahdns.com/ Nah HTTPS, TLS
Blahdns's Switzerland Yah https://blahdns.com/ Nah HTTPS, TLS
Cisco's OpenDNS - Family Shield Yah https://umbrella.cisco.com/blog/enhancing-support-dns-encryption-with-dns-over-https Yah HTTPS
Cisco's OpenDNS/Umbrella Nah https://umbrella.cisco.com/blog/enhancing-support-dns-encryption-with-dns-over-https Yah HTTPS
Cisco's OpenDNS - Sandbox Yah https://umbrella.cisco.com/blog/enhancing-support-dns-encryption-with-dns-over-https Yah HTTPS
Cloudflare's 1.1.1.1 Nah https://developers.cloudflare.com/1.1.1.1/encryption/dns-over-https/make-api-requests/ and https://developers.cloudflare.com/1.1.1.1/encryption/dns-over-tls/ Yah HTTPS, TLS
Cloudflare - Mozilla Nah https://wiki.mozilla.org/Security/DOH-resolver-policy#Conforming_Resolvers Yah HTTPS
Control D w/ Ads + Trackers filter Yah https://controld.com/free-dns Yah HTTPS, TLS
Control D w/ Hagezi's Normal Yah https://controld.com/free-dns Yah HTTPS, TLS
Control D w/ Hagezi's Pro Yah https://controld.com/free-dns Yah HTTPS, TLS
Control D w/ Hagezi's Pro Plus Yah https://controld.com/free-dns Yah HTTPS, TLS
Control D w/ Uncensoring Nah https://controld.com/free-dns Yah HTTPS, TLS
Control D - Unfiltered Nah https://controld.com/free-dns Yah HTTPS, TLS
DNS.SB Nah https://dns.sb/doh/ and https://dns.sb/dot/ Yah HTTPS, TLS
dns0.eu Nah https://dns0.eu/ Yah HTTPS, TLS
dns0.eu - Kids Yah https://www.dns0.eu/kids Yah HTTPS, TLS
dns0.eu - Zero Yah https://www.dns0.eu/zero Yah HTTPS, TLS
Dnswarden - Adblock Yah https://dnswarden.com/ Yah HTTPS, TLS
Dnswarden - Adult Yah https://dnswarden.com/ Yah HTTPS, TLS
Dnswarden - Uncensored (Unfiltered) Nah https://dnswarden.com/ Yah HTTPS, TLS
Mullvad w/ Adblock Yah https://mullvad.net/en/help/dns-over-https-and-dns-over-tls/ Yah HTTPS, TLS
Mullvad - Unfiltered Nah https://mullvad.net/en/help/dns-over-https-and-dns-over-tls/ Yah HTTPS, TLS
NextDNS Nah https://my.nextdns.io/ Yah HTTPS, TLS
NextDNS - Mozilla Nah https://wiki.mozilla.org/Security/DOH-resolver-policy#Conforming_Resolvers Yah HTTPS
Njalla Nah https://dns.njal.la/ and https://njalla.social/@njalla/109544720312978601 Nah HTTPS, TLS
Quad9 - Secured w/ ECS Yah https://www.quad9.net/service/service-addresses-and-features Yah HTTPS, TLS
Quad9 - Regular Yah https://www.quad9.net/service/service-addresses-and-features Yah HTTPS, TLS
Quad9 - Unfiltered Nah https://www.quad9.net/service/service-addresses-and-features Yah HTTPS, TLS
RethinkDNS Nah https://rethinkdns.com/configure Yah HTTPS, TLS

Installation Guide

For iOS, seek a DNS provider from the list and click either HTTPS or TLS using Safari and click Install when given a prompt that states "XXXX." The profile will now install. Now, go to Settings and click on "Profile Downloaded." Follow the instructions. Your DNS configuration will now be changed to the one that you've installed. To manage your DNS configuration, go to Settings => General => VPN, DNS, and Device Management => DNS to change your DNS providers.

To remove DNS profiles from your device, go to Settings => click General => VPN, DNS, and Device Management => click on the profile that you've like to delete => click "Remove Profile."

For macOS Big Sur & Monterey, double click on the downloaded file and approve installation in System Preferences => Security & Privacy => Profiles

For macOS Ventura & newer, double click on the downloaded file and approve installation in System settings => Privacy & Security => Profiles.


I've downloaded the profile but why is it not working????!?!?!

Yeaaaaah. There may be problems with the DNS profile or the DNS resolver itself. Open up an issue request and I or others will take a look within the end of the next decade.


Contributing a new profile

These DNS profiles are pretty much text files. To create a new profile,

  1. Copy the DoH-3-template.mobileconfig and/or DoT-3-template.mobileconfig. DoH contains DNS over HTTPS specifics, while DoT contains DNS over TLS specifics.
  2. Once you copied the content from either or both of these profiles, you can start anywhere you like. I recommend the following:
    • Replace all @@@@Adguard@@@@ with the DNS resolver's name and filter.
    • For DoH, add the HTTPS link; for DoT, add the TLS authenticater.
    • Use uuidgenerator.net to generate a batch of 4 random UUIDs (Version 4).
    • Replace all 4 @@@@RANDOM-UUID-CODE-HERE@@@@ with the ones generated. Do. Not. Reuse UUIDs.
    • Add the profile to the README.md

README.md Table setup is the following: | DNSNAME | Filtered? (Yah/Nah) | source link | Anycast? (Yah/Nah) | HTTPS, TLS |

HTTPS link setup should be https://github.com/Undercook1799/layer7-dns-profiles/raw/master/profiles/WHATEVER-PROFILE-NAME-HERE-https.mobileconfig

TLS link setup should be https://github.com/Undercook1799/layer7-dns-profiles/raw/master/profiles/WHATEVER-PROFILE-NAME-HERE-tls.mobileconfig

Apple's documentation for DNS code is https://developer.apple.com/documentation/devicemanagement/dnssettings/ or Here

Or, if you just want a profile but don't want to create one, you can open up a issue request with the resolver of your choice. Include the source link please (the link to where you got the HTTPS/TLS link from).


GitHub Repository

https://github.com/Undercook1799/layer7-dns-profiles


Notes:

  • This was forked from Paul Miller's repo: https://github.com/paulmillr/encrypted-dns
  • DoH ("DNS over HTTPS) will run your queries over port 443; DoT ("DNS over TLS") will run your queries over port 853. Note that DNS runs over port 53 by default.
  • None of these profiles are signed xoxo
  • Not going to lie, but I have minimal idea of how to operate Github

Disclaimer:

  • I don't operate any of the DNS servers within these profiles. If there are any issues with the resolvers, it may not be my fault. Pretty much anything after the installation process of the profile is not on me. I am not liable if something goes wrong or for any illegal activities.
  • If you want me to remove any of these profiles, put in an issue request.

About

DNS over HTTPS ("DoH") and DNS over TLS ("DoT") configuration profiles for iOS 14 and MacOS Big Sur and newer

Topics

Resources

License

Stars

Watchers

Forks