Windows DNS的固定和加密

今天在老家,台式电脑用的是win11 enterprise版本,许久没有开机,想起前阵子在笔记本上遭遇的网络问题,这次再次搜索了一下,做一下记录。找到了一篇如题的文章进行操作,回头打算在笔记本上也追加操作,把IP6的也设定好。

详细见附件,全英文,但是靠谱。五一快乐。

Enable DNS over HTTPS (DoH) on Windows 11

To configure DNS over HTTPS (DoH) on Windows 11, use these steps:

  1. Open Start on Windows 11.
  2. Search for Settings and click the top result to open the app.
  3. Click on Network & internet.
  4. Click the Ethernet or Wi-Fi tab (depending on the active connection).Quick note: If you have a wireless connection, you need to click on the connection properties setting to access the settings.
  5. Click the Edit button in the “DNS server assignment” setting.Open DNS settings on Windows 11
  6. Select the Manual option from the drop-down menu.
  7. Turn on the IPv4 toggle switch.
  8. Under the “Preferred DNS” and “Alternate DNS” sections, specify the primary and secondary DoH IP address from one of the supported services:
    • Cloudflare:
    • 1.1.1.1 
    • 1.0.0.1 
    • Google:
    • 8.8.8.8
    • 8.8.4.4 
    • Quad9:
    • 9.9.9.9
    • 149.112.112.112
    Enable DoH for IPv4
  9. Use the “DNS over HTTPS” drop-down menu and select the On (automatic template) option, but you can also choose other encryption preferences, including:
    • Off: Transmits all DNS traffic without encryption.
    • On (automatic template): Sends all DNS traffic with encryption (recommended).
    • On (manual template): This option allows you to specify a specific template. It is only required if the DNS service doesn’t work automatically or has a template that works as expected.
  10. Turn off the “Fallback to plaintext” toggle switch.Quick tip: If you enable this feature, the system will encrypt DNS traffic, but it allows queries to be sent without encryption.
  11. (Optional) Turn on the IPv6 toggle switch.
  12. Under the “Preferred DNS” and “Alternate DNS” sections, specify the primary and secondary DoH IP address from one of the supported services:
    • Cloudflare:
    • 2606:4700:4700::1111
    • 2606:4700:4700::1001
    • Google:
    • 2001:4860:4860::8888
    • 2001:4860:4860::8844
    • Quad9:
    • 2620:fe::fe
    • 2620:fe::fe:9
    Enable DoH for IPv6
  13. Select the On (automatic template) option in the “Preferred DNS encryption” setting.
  14. Turn off the “Fallback to plaintext” toggle switch unless you want to allow traffic to be sent unencrypted when encryption isn’t available.
  15. Click the Save button.

Once you complete the steps, Windows 11 will encrypt DNS traffic over the HTTPS protocol.

评论

发表回复

您的邮箱地址不会被公开。 必填项已用 * 标注