DNS over VPN

Robby

January 07, 2023 10:36

I'm trying out the new DNS over VPN feature in 1.972 on my FWP, and I need the functionality clarifying. So, my config right now is:

1. I have a NordVPN client with the 'Force DNS over VPN' feature set. Currently ALL devices are set to use the VPN client.

2. I've enabled the new Unbound feature 'DNS over VPN' for all devices.

Those configs appear to conflict because the release notes for 1.972 (for the DNS over VPN feature) say 'you can now send DNS requests over VPN to further protect you're privacy' which is what would appear to happen anyway with 'Force DNS over VPN' set. Maybe one feature takes precedence over the other? Maybe the DNS over VPN feature is for clients that aren't set to route via the VPN? I think that the UI needs to clarify what happens here.

Thanks!

Comments

4 comments

Support Team

January 08, 2023 03:16
Sorry for the confusion. I'll make a note and see if we can clarify these two concepts on the UI.

If your devices are connected to VPN using the VPN client feature, and the option "Force DNS over VPN" is enabled, all the Firewalla-managed DNS services will be bypassed. So it's just like you said, the Unbound DNS over VPN feature is only for the devices that are not using VPN. This document explains the relationship between the Firewalla DNS services and the VPN client feature: Firewalla DNS Services Introduction.
0

Comment actions Permalink
Rich T.

January 08, 2023 03:20
Yes, I think DNS over VPN is for devices not going through the VPN. If you have "Force DNS over VPN" it will use the VPN provider's DNS servers, but I think if you turn that off, and turn on Unbound over VPN you may get what you want (unbound DNS using the VPN connection)?
0

Comment actions Permalink
Support Team

January 09, 2023 12:27
@Rich T. Yes. You are right.
0

Comment actions Permalink
Robby

January 18, 2023 08:39
Brilliant - Thanks guys!
0

Comment actions Permalink

Please sign in to leave a comment.

Comments

Didn't find what you were looking for?