2

Is it possible to configure DNS Forwarding of Windows Server 2019 AD DNS servers using DNS-over-HTTPS, or do I need to use an intermediary server internally to resolve using DoH and return regular clear test DNS results to the Windows DNS servers?

At the moment they just use Cloudflares servers without encryption.

The network is a fairly elaborate home/lab network with Windows and Linux servers, and Mikrotik routers. Mix of Windows, mobile, and console device clients Typical of a normal family home, not all of which use the windows AD servers for DNS.

Thanks

Regards

Braedon

Braedon King
  • 33
  • 1
  • 4
  • I can't answer specifically for Windows, but if you end up needing a proxying service I have one that can go both ways DNS-> DoH and DoH -> DNS https://github.com/hardillb/dns-over-https – hardillb Feb 11 '20 at 13:17

2 Answers2

0

It's not supported in Windows DNS (yet - apparently MSFT has plans, but it looks like DoH for clients rather than server first).

If you've got Linux, you might want to look at using a solution there for a DoT stub resolver or caching forwarder (your DCs can use that as a forwarder). This page has some examples for Cloudflare

LeeM
  • 1,388
  • 9
  • 14
0

You may setup another internal DNS server (Linux?) that supports encrypted queries, and point the Windows DNS server forwarder to it, it's an extra hop but wort if you are concern about security.

cata81
  • 1