DoH not working with Windows 11 system settings

Zero Trust Gateway
1

When I set IPv4 and IPv6 DNS addresses in Windows 11 system settings, and set DoH to On(Manual template) and provide the DoH address as my personal Cloudflare foer teams account’s DoH Address, internet stops working.

2

This appears to be a active issue with Cloudflare Gateway.
DoH doesn’t work in Windows, only of you enable the Fallback to insecure connection.

3

i would start by checking the system itself.
also, i would ferther check rather the DNS resolver on your computer is working or not.
but please describe in detail.
please, no images, i’m a blind person.
AdisonVerlice

4

o really? ok thats something i didn’t know, as i use the warp client

5

in that case, have you at all managed to get the warp client, or DNS over TLS working?

6

Bumping this thread because it is still an issue. The following powershell can be used to replicate this issue (for me).

$DOHDefaultSplat = @{
  AllowFallbackToUdp = $False
  AutoUpgrade = $True
}
$DOHUrl = @{
  DohTemplate = 'https://LOC-ID-GOES-HERE.cloudflare-gateway.com/dns-query'
}
Add-DnsClientDohServerAddress -ServerAddress '172.64.36.1' @DOHDefaultSplat @DOHUrl
Add-DnsClientDohServerAddress -ServerAddress '172.64.36.2' @DOHDefaultSplat @DOHUrl
Add-DnsClientDohServerAddress -ServerAddress '2a06:98c1:54::1:xxxx' @DOHDefaultSplat @DOHUrl

Once this is configured, you can go to the adapter settings in Windows 11 and set the DNS to Manual. Set the IPs appropriately and for DNS over HTTPS you can choose Automatic Template.

Repeating the same steps with a custom NextDNS (for comparison) does work correctly.

Edit: It is also documented here as old as 1 year ago.