DNS over TLS (DoT)

Get the DoT/DoH endpoint

1. Go to Alibaba Cloud DNS - HTTPDNS.

2. On the access configuration tab, select Method 3: DoT/DoH-based access.

3. DoT/DoH supports two access methods: short URL and custom encrypted URL.

   Important

   For higher security, we recommend that you use encrypted address.

4. Click add an encrypted URL. In the dialog box, enter a custom string to generate a unique endpoint. Select the use encrypted address (Recommended) checkbox and click add an encrypted URL to create the endpoint.

5. Turn on the switch to enable the encrypted endpoint.

   Warning

   • To stop using DoH to access HTTPDNS, turn off the switch.

   • Use the service suspension feature with caution. After the service is suspended, your account is downgraded to a free user. Billing stops, and console reports and other features become unavailable. Your HTTPDNS service will no longer be covered by an SLA and will be subject to throttling and query rejection.

   • If you restart a suspended service, your original configuration is restored and billing resumes.

Configure DoT

Android phone users can use the DNS DoT secure transmission service by configuring the domain name and address of Public DNS in their phone settings. The following example uses MIUI 14:

1. Go to the Settings page, click Connection & sharing.

2. Click Private DNS.

3. Select Private DNS provider hostname and enter the Public DNS server name.