Re:Ask HN: What's the best setup for ad blocking and tracker...
by ignoramous on Saturday August 24, 2019 @04:05AM
(#20785931)
I understand where you come from, but I'd say they've made a good job of simplfying as much as they could at this early stage.
Use DNS over HTTPS for:
1. Firefox.
2. Intra app on Android phones below version 9.
3. Clouflared on Linux.
4. Their official iOS app.
Use DNS over TLS for:
1. Android 9 and above.
2. Knot or Stubby or unbound clients on Linux.
IPv6 and IPv4 are for DHCP provided DNS:
1. With IPv4, you'd need to link your client-ip (public IP of your router) with your nextdns setup.
2. IPv6 doesn't require any such linked-ip acrobatics.
Re: VPN:
If you use DNS over HTTPS on Android or iOS, you won't be able to use a VPN, and that's because the DNS traffic is itself routed through a VPN and one can't chain VPNs on Android just yet. Other than that, VPN should work with rest of the setup mechanisms.
What is the difference between IPv4, unbound, stubby, knot, and cloudfared - do you set one, or all of them? Do I want DNS over HTTPS, DNS over TLS, or both? Is it compatible with a VPN?
For the trouble, it looks like it wouldn't be any harder to just set up your own Pi-Hole. Am I wrong?