Issue with 1.1.1.1 DNS

[karmic helm]

I changed my DNS to 1.1.1.1 , 1.0.0.1 (alt) in both control panel and windows 11 settings. But webpages don't load up unless I enable DoH (DNS over HTTPS) in windows network settings. Here in the image I have doh on automatic template for 1.1.1.1 .

[karmic helm]

hmmmmmmmmmmmmmmmmmmm

[karmic helm]

hmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm

no one welp

[proven crest]

your dns configuration has doh enabled and fallback to plaintext exolicitly disabled

not quite sure what the problem is here

[karmic helm]

ok look

its simple

after enabling doh for 1.1.1.1

I am able to acces internet

and it dhows encrypted

now i disable doh and the ss below 1.1.1.1 is now unencrypted

it doesnt work

i had to switch dns

[misty gyro]

like you can't resolve anything? Show the results of these:
nslookup cloudflare.com 1.1.1.1
nslookup cloudflare.com 8.8.8.8
nslookup cloudflare.com 9.9.9.9

[karmic helm]

i did windowss troubleshoot for network, it said net is there but tooo low

[karmic helm]

ok lemme do it

same result in both configs

[karmic helm]

.

[misty gyro]

your config doesn't matter, when you do that test you're overriding the dns server to use

anyway looks like you can't reach 1.1.1.1 plaintext I'd guess ISP hijacking or country ban, etc. Are you in a restricted environment, country likely to do such blocks (Iran, Turkey, Russia, China, etc), etc?

[karmic helm]

no

India

So probably its my ISP?

Or is it due to Antivirus being used is Kaspersky?

ok disabling antivirus doesn't change the result

[misty gyro]

could tracert 1.1.1.1 and see if you see anything interesting

Your ISP doesn't have IPv6?

[karmic helm]

yes

But i dont get ipv6

[karmic helm]

.

@proven crest

any idea?

[proven crest]

since I misunderstood your problem the first time I have to go with chaika, it's probably your ISP

or you have something else in your network that is refusing to route plaintext dns queries? not quite sure how that would work though

[misty gyro]

theoretically anything it passes through could, including router & such, it's just plain text so

[misty gyro]

you have connectivity just something else messing with it

Same issue if you do nslookup cloudflare.com 1.1.1.2?

[karmic helm]

yes

[karmic helm]

so what do we do now

[misty gyro]

use encrypted dns. It's exactly what it was made for: Secure DNS in hostile environments

[karmic helm]

but It will increase latency as my main idea of using this dns is decreasing my ping latency in games(valorant)

[misty gyro]

It shouldn't increase query latency by much. Queries are cached anyway. Latency in games has nothing to do with dns.

[stable pebble]

dns is very fast, rtt to game servers will be longer then general compute time, etc.

[karmic helm]

hm yes

[karmic helm]

but shouldn't i be able to use 1.1.1.1 unencrypted

[karmic helm]

@misty gyro

but shouldn't i be able to use 1.1.1.1 unencrypted

@stable pebble

[stable pebble]

yes of course

?pings

[hollow crater]

Please do not ping community members for non-moderation reasons. Doing so will not solve your issue faster and will make people less likely to want to help you.

[stable pebble]

you could have looked at the docs or tested that though rather than pinged people

[stable pebble]

but it looks like your ISP is blocking that

so either use encrypted or use a different DNS or complain to the government

[karmic helm]

👍