Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Does DNS over TLS negate the need to block DNS leaks?

    DHCP and DNS
    2
    3
    374
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • NeoDude
      NeoDude last edited by

      I currently use an alias for all my VPN hosts that allows me to force any DNS requests from them out via the VPN gateway preventing DNS leaks. Would I be right in assuming that this is no longer required when using DNS over TLS? And while my DNS requests would leak, the packets would be encrypted so largely useless to an ISP hoping to snoop on their customers?

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        It depends on which part of "leaks" you don't like.

        Some people don't want requests going outside of the VPN because the queries are sent in the clear – DNS over TLS helps here

        Some people don't want requests going outside of the VPN because the target DNS server(s) see the client's real address -- DNS over TLS does nothing for this, only sending the query across the VPN will obscure the original client address.

        1 Reply Last reply Reply Quote 0
        • NeoDude
          NeoDude last edited by

          Makes sense, thanks.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense Plus
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy