Skip to content

Commit 2d4a900

Browse files
committed
Add DoH procedure
1 parent 0ab041e commit 2d4a900

File tree

2 files changed

+13
-2
lines changed

2 files changed

+13
-2
lines changed

src/content/docs/cloudflare-one/connections/connect-devices/agentless/dns/dns-over-https.mdx

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ Location-based policies require that you send DNS requests to a [location-specif
1313

1414
## Filter DoH requests by location
1515

16-
Location-based policies require that you send DNS requests to a unique <GlossaryTooltip term="DoH subdomain">DoH endpoint</GlossaryTooltip> assigned to the location:
16+
Location-based policies require that you send DNS queries to a unique <GlossaryTooltip term="DoH subdomain">DoH endpoint</GlossaryTooltip> assigned to the location:
1717

1818
```txt
1919
https://<YOUR_DOH_SUBDOMAIN>.cloudflare-gateway.com/dns-query
@@ -105,6 +105,17 @@ For more information, refer to [Microsoft's DoH guide](https://learn.microsoft.c
105105

106106
</Details>
107107

108+
### Use generic DoH endpoint
109+
110+
You can send DoH requests to the generic Cloudflare DoH endpoint. To specify a location in your DoH query, include a header named `cf-dns-location` with a value of your location's DoH subdomain. For example:
111+
112+
```http
113+
GET /dns-query?name=example.com&type=A HTTP/2
114+
Host: dns.cloudflare-gateway.com
115+
cf-dns-location: 9y65g5srsm
116+
Accept: application/dns-message
117+
```
118+
108119
## Filter DoH requests by user
109120

110121
In order to filter DoH queries based on user identity, each query must include a user-specific authentication token. If you have several devices per user and want to apply device-specific policies, you will need to map each device to a different email.

src/content/docs/cloudflare-one/connections/connect-devices/agentless/dns/dns-over-tls.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ Hostname: 9y65g5srsm.cloudflare-gateway.com
3030
IP address: 162.159.36.5
3131
```
3232

33-
Alternatively, you can use the generic DoT endpoint (`dns.cloudflare-gateway.com`) and include an `OPT` record with code `65011` and value of your location name. For example:
33+
Alternatively, you can use the generic DoT endpoint (`dns.cloudflare-gateway.com`) and include an `OPT` record with code `65011`. You can select a specific location for the value of the `OPT` record. For example:
3434

3535
```txt
3636
Hostname: dns.cloudflare-gateway.com

0 commit comments

Comments
 (0)