I have been running BIND9 on my home network, both as an authoritative name server for my local zone, and as a recursive resolver, for more than ten years. ;-)
But for DoH to make sense, the server must be outside of my private network and my ISP's network.
Comments
This is probably kind of a dumb question, but can I run my own DoH server? If so, where can I find a tutorial?
Install rust-doh: https://github.com/jedisct1/rust-doh
There are also tutorials on how to set up your own DNSCrypt server: https://github.com/jedisct1/dnscrypt-proxy/wiki/How-to-setup...
Thank you!
That is not a dumb question at all. Running your own servers gives you control over your DNS, your cache and where it is directed upstream.
I have been running BIND9 on my home network, both as an authoritative name server for my local zone, and as a recursive resolver, for more than ten years. ;-)
But for DoH to make sense, the server must be outside of my private network and my ISP's network.
Exactly. You can forward traffic from DoH to TLS upstream servers, or servers sitting in tier-1 networks that are well outside of your ISP.