| Who runs it | Base URL | Comment |
|---|---|---|
| https://dns.google/dns-query | Full RFC 8484 support | |
| Cloudflare | https://cloudflare-dns.com/dns-query | Supports both -04 and -13 content-types |
| Quad9 | Recommended: https://dns.quad9.net/dns-query Secured: https://dns9.quad9.net/dns-query Unsecured: https://dns10.quad9.net/dns-query |
Secured provides: Security blocklist, DNSSEC, no EDNS Client-Subnet Unsecured provides: No security blocklist, no DNSSEC, no EDNS Client-Subnet Recommend is currently identical to secure. |
| CleanBrowsing | https://doh.cleanbrowsing.org/doh/family-filter/ | anycast DoH server with parental control (restricts access to adult content + enforces safe search) |
| @chantra | https://dns.dnsoverhttps.net/dns-query | "toy server" which runs doh-proxy |
| @jedisct1 | https://doh.crypto.sx/dns-query | a server which runs another project called doh-proxy, written in Rust. |
| PowerDNS | https://doh.powerdns.org | Based on dnsdist-doh branch |
| blahdns.com | Japan: https://doh-jp.blahdns.com/dns-query Germany: https://doh-de.blahdns.com/dns-query |
Run on Go implementation, knot-resolver with DNSSEC and ads block |
| NekomimiRouter.com | https://dns.dns-over-https.com/dns-query | Runs Go implementation. Does recursion itself with no upstream servers. Toy server may fail, please report if fails |
| SecureDNS.eu | https://doh.securedns.eu/dns-query | No Logging & DNSSEC |
| Rubyfish.cn | https://dns.rubyfish.cn/dns-query | East China Zone, Based on https://github.com/m13253/dns-over-https |
| Commons Host | https://commons.host | ~20 PoPs worldwide, Node.js/playdohover Knot Resolver. |
| DnsWarden | Adblocking DNS: https://doh.dnswarden.com/adblock Uncensored DNS: https://doh.dnswarden.com/uncensored |
No query/IP logging with DNSSEC enabled. Blocks ads and trackers in Adblocking DNS. No filtering in Uncensored DNS. |
| aaflalo.me | Server US: https://dns-gcp.aaflalo.me/dns-query Server EU: https://dns.aaflalo.me/dns-query |
Runs on Star Brilliant's dns-over-https Both servers check for DNSSEC and block advertising |
| Foundation for Applied Privacy | https://doh.appliedprivacy.net/query | No query/IP logging, no filtering, QNAME minimization, no EDNS client subnet, TLS 1.3, DNSSEC, RFC7706, RFC8198; https://appliedprivacy.net/services/dns/ |
| captnemo.in | https://doh.captnemo.in/dns-query | Runs dnss with local unbound resolver running DNSCrypt with DNSSEC support as the upstream. Privacy Policy. More details at https://captnemo.in/doh/. No logging or filtering. Runs in Bangalore, India |
| Tiarap | https://doh.tiar.app/dns-query | Based in Singapore, No logging, block Ad/Ad-tracking/Malware, No ECS, DNSSEC |
| DNS.SB | https://doh.dns.sb/dns-query | No Logging, DNSSEC enabled |
| FAELIX | https://rdns.faelix.net/ | No logging, based on dnsdist-doh RC querying our powerdns-recursor resolvers, multiple nodes in UK and CH, more info |
Supported in browsers and clients
| Name | Version | Comments |
|---|---|---|
| Firefox | 62 | temporary docs |
| Bromite | 67.0.3396.88 | How to enable DoH |
| curl | 7.62.0 | See DOH-implementation |
| OkHttp | 3.11 | See Providers |
| curl-doh | n/a | basic stand-alone DoH client that uses curl |
| Chrome | 66 | https://bugs.chromium.org/p/chromium/issues/detail?id=799753 |
