hassio

Unfortunately we do not. The change will get wiped any time HA is restarted.

> I think it is configurable though? Just edit the source file you linked to on your system disk.

Unfortunately it is not :(. The change will get wiped any time HA is restarted.

> If the internet is not working (because general connectivity is lost, or someone blocked the DNS server, whatever) then of course the internet-using parts will cease to work, but local network parts should still be working.

Local network parts stop working as well. A DNS lookup for a non-existing local domain results in the query being sent to Cloudflare. This cannot be prevented.

> The config file is pretty clear that it is not supposed to use DNS servers, cloudfare or any other ones, for the local network connections. If this is not the case, you should file a bug.

Many bug reports have been filed about this: https://github.com/home-assistant/plugin-dns/issues.

If you look at the config file, SERVFAIL and NXDOMAIN responses are considered to be a "failure" and queries are sent to Cloudflare. This is a poor design decision, not a bug.

Were it configurable, I would agree. But the Cloudflare DNS servers can't be disabled nor redirected to local DNS servers because it uses DNS over TLS.

For a platform that describes itself as "puts local control and privacy first", forcing DNS queries to be sent to an external third party seems like the exact opposite of what should be done. For those running their own local DNS servers for local control and privacy, Home Assistant won't respect the DNS servers configured manually or via DHCP.

It is also worth noting that if Home Assistant loses internet connectivity or if the Cloudflare DNS servers are blocked, Home Assistant will slow to a halt because it constantly (many times a second) tries to connect to Cloudflare.

"Open source home automation that puts local control and privacy first." - https://www.home-assistant.io

Using undocumented, hard coded, third party DNS servers does not seem "privacy first". The hard coded DNS servers cannot even be disabled.