Encrypted DNS Server

Private, encrypted DNS resolution — no logs sent off-server.

Operational DNS-over-HTTPS (DoH) DNS-over-TLS (DoT) RFC 8484

Endpoints

DNS over HTTPS DoH · RFC 8484

Use in browsers, Windows, or any RFC 8484 client. Supports both GET and POST.

https://dns.autarch.us/dns-query
DNS over TLS DoT · RFC 7858

Use with system resolvers on Windows 11, Android, Linux, or a router.

dns.autarch.us  port 853

Configure Windows 11

  1. Open Settings → Network & Internet and click your active connection.
  2. Scroll to DNS server assignment and click Edit.
  3. Switch from Automatic to Manual.
  4. Enable IPv4, set Preferred DNS to the server IP, then expand DNS over HTTPS and set the template to https://dns.autarch.us/dns-query.
  5. Click Save. Windows will show a lock icon next to your connection.

Configure Firefox

  1. Open Settings → Privacy & Security.
  2. Scroll to DNS over HTTPS and choose Max Protection.
  3. Select Custom and paste: https://dns.autarch.us/dns-query

Features

🔒
Encrypted Transport
All queries travel over TLS 1.2+ — no plaintext DNS.
⚡
Response Cache
TTL-respecting cache cuts latency for repeat queries.
🌐
Full Recursion
Resolves from root servers — no third-party forwarder.
🛡️
Amplification Guard
ANY queries refused; rate-limited per source IP.