Skip to content

Commit 844d652

Browse files
committed
Add generic DoT procedure
1 parent 9bd00ab commit 844d652

File tree

1 file changed

+13
-10
lines changed
  • src/content/docs/cloudflare-one/connections/connect-devices/agentless/dns

1 file changed

+13
-10
lines changed

src/content/docs/cloudflare-one/connections/connect-devices/agentless/dns/dns-over-tls.mdx

Lines changed: 13 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -23,16 +23,24 @@ The DoT hostname contains your unique location name. For example, if the DoT hos
2323

2424
### 2. Configure your DoT client
2525

26-
Depending on your operating system, you can choose from a variety of standalone DoT clients.
26+
To configure a DoT client such as `dig`, specify the IP address and the DoT hostname for your location in your query. For example:
2727

28-
To configure your DoT client, enter the following IP address and the DoT hostname for your location (for example, `9y65g5srsm.cloudflare-gateway.com`):
28+
```txt
29+
Hostname: 9y65g5srsm.cloudflare-gateway.com
30+
IP address: 162.159.36.5
31+
```
32+
33+
Alternatively, you can use the generic DoT endpoint (`dns.cloudflare-gateway.com`) and include an OPT record (code 65011) and your location name (`9y65g5srsm`). For example:
2934

3035
```txt
31-
Hostname: <DoT hostname>
36+
Hostname: dns.cloudflare-gateway.com
3237
IP address: 162.159.36.5
38+
OPT Record:
39+
- Code: 65011
40+
- Value: 9y65g5srsm
3341
```
3442

35-
Alternatively, stub resolvers (e.g., Unbound) support DoT natively. An example configuration is shown below.
43+
Some stub resolvers support DoT natively. For example, you can configure Unbound to send a DoT query:
3644

3745
```txt
3846
# Unbound TLS Config
@@ -42,10 +50,5 @@ forward-zone:
4250
name: "."
4351
forward-tls-upstream: yes
4452
forward-addr: 172.64.36.1@853#9y65g5srsm.cloudflare-gateway.com
45-
forward-addr: <IPv6 address>#<DoT hostname>
53+
forward-addr: 2001:db8:abcd::1234#9y65g5srsm
4654
```
47-
48-
:::note
49-
50-
Each DNS location has a unique DoT hostname and IPv6 address. Remember to substitute your location's values into the `<IPv6 address>` and `<DoT hostname>` fields.
51-
:::

0 commit comments

Comments
 (0)