I have a Minisforum that runs all of my services and website at home, the only thing I don't self-host is email and DNS. PurelyMail for email and Cloudflare for DNS. Need those to be super reliable an

Im not sure how to redirect the dns traffic through a proxy to a dns server, please give me a hint or an idea what i should look for.

The thing with these companies is marketing and support, mikrotik lack this or are bad at it. this is why you wont see it recommended in DC environments although if you research you will see them bein

When they are able to intercept dns requests, I suppose they can setup a VON.

device are connecting to the router or mesh network - router intercepts and redirect dns requests to one of 2 public hosted dns servers - public dns servers only responding to dns over tls and dns ove

Do you know that servers may employ DANE (DNS-Based Authentication of Named Entities) for enhanced security by associating digital certificates with DNS records?

Running a public DNS is really a pain.

(Quote)

Germany, Berlin (DNS:NET) 288.89 Mbit/s 436.12 Mbit/s 40.988 ms

(Quote)

Running some filters for some clients (blocking gambling sites for the children, ...). I tried to proxy the domain but dns over https isnt working then anymore. Routers are configured to intercept and

Well, as @six said Cloudflare won't proxy regular DNS protocol. It's pretty much HTTPS only but as he also said, you might be able to get away with DNS over HTTPS (might involve some extra config on t

I configured their WAF to block all continents except europe but i cant get it running. When i enable their proxy for my domain, dns requests arent reaching the server anymore.

features are usually for HTTP(S) traffic only. DNS-Over-HTTPS would probably work fine in this case, but Cloudflare Spectrum for individual port filtering is likely off-limits for personal or family

but not available;; OPT PSEUDOSECTION:; EDNS: version: 0, flags:; udp: 1232;; QUESTION SECTION:;millenial.host. IN A;; AUTHORITY SECTION:millenial.host. 3600 IN NS ns1.millenial.

Tele-Asia seems to still be routing traffic although their DNS servers seem to be down.

(Quote)

You guessed right. Bots, and if you do not set up Rate Limit on port 53 aka request/answer limit / second, they can run your cpu at 100%, as the DNS server is doing what it should, answer until he eat

Im already running a open dns resolver for my family and some wlan networks i manage. I get many automated requests from what i guess are botnets, so im searching for a cost efficient solution to bloc

If filtering for home is what you need, take a look at PI-HOLE. ( DNS based Filtering )