0

I am using OpenWrt 22.03.3 with OpenVPN. I was getting DNS leaks (ipleak.net was showing my country DNS), but after setting custom DNS (CloudFlare) for WAN and WAN6 in OpenWRT, ipleak.net shows CloudFlare DNS in the country of the VPN server. So for example, if I choose Netherlands server in OpenVPN, ipleak.net shows Netherlands CloudFlare DNS servers instead of my own country servers (I live far away from Netherlands).

So I am assuming, even though the custom DNS in WAN is 1.1.1.1 and 1.0.0.1, the DNS requests are going through the VPN. And so, as far as privacy goes, is there any need to setup DNS over HTTPS using a package like https-dns-proxy? I ran out of storage in the router, so could not install that package. Is it necessary (assuming that I trust the VPN provider)?

2
  • Yes; You should use https dns proxy.
    – Ramhound
    Commented Apr 19, 2023 at 18:36
  • 1
    @Ramhound Can you please elaborate a little bit why I should use it? Isn't the DNS traffic already being encrypted if it is going through the VPN? Commented Apr 19, 2023 at 18:37

1 Answer 1

1

There's no point in using DoH if you're already using a trusted and functioning VPN. All traffic will go through the VPN, including DNS queries. If you use DoH, your VPN provider still can see what IP you're visiting, and in most cases, unless the site supports ECH, will still see what domain you're visiting through SNI. So all that extra effort and you're merely adding a yet-another party to get your internet activity.

2
  • So if I understand it correctly, since ipleak.net is not showing a DNS server in my own country and only shows DNS servers in the VPN country, it is safe to assume that the DNS queries are indeed going through the VPN, and there is no need for DoH, is that correct? Commented Apr 28, 2023 at 12:21
  • 1
    Yep, that's correct.
    – Martheen
    Commented Apr 28, 2023 at 21:16

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .