How to configure DoH/DoT on TP-Link Wireless router

Archer BE550( V1 V1.60 ) , Archer C59( V4 V4.6 V4.80 ) , Archer AX55( V1 ) , Archer C80( V1 V2.20 ) , Archer BE800( V1 V1.60 ) , Archer A6( V4 ) , Archer A64( V1 ) , Archer C6( V4 ) , Archer A8( V1 V2.20 ) , Archer C64( V1 ) , Archer C86( V1 )
Pembaruan terkini mungkin telah memperluas akses ke fitur yang dibahas dalam Tanya Jawab Umum ini. Kunjungi halaman dukungan produk Anda, pilih versi perangkat keras yang tepat untuk perangkat Anda, dan periksa bagian Lembar Data atau firmware untuk mengetahui penyempurnaan terbaru yang ditambahkan ke produk Anda. Harap perhatikan bahwa ketersediaan produk bervariasi menurut wilayah, dan model tertentu mungkin tidak tersedia di wilayah Anda.
DoH (DNS over HTTPS) and DoT (DNS over TLS) are two methods that enhance the security and privacy of DNS queries in network communications. DoH encrypts DNS queries within HTTPS traffic, making them indistinguishable from regular web traffic and difficult to monitor. DoT uses a dedicated TLS connection for DNS messages, ensuring they are secure from eavesdropping and tampering.
Please be aware that support for DoH and DoT varies across different router models. The AX series routers, such as the AX55, support both protocols, while the AC series routers currently only support DoH.
For configuring DoH/ DoT on an AX router
1. Log in to the web-based interface of the router. If you don’t know how to do that, please refer to How do I log into the web-based Utility (Management Page) of TP-Link wireless router?
2. Navigate to Advanced > Network > Internet in the router settings. If you choose "None" for "DNS Privacy" the router will not encrypt DNS traffic.
3. Upon selecting DoT or DoH, you'll find the "DNS Mode" option. It's generally recommended to use the "Default Mode."
In Default Mode, if the router detects that the chosen DNS servers are unreachable, it will automatically switch to unencrypted DNS to maintain network connectivity.
Conversely, in Ultra Secure Mode, if the chosen servers become unavailable, DNS resolution will be disrupted.
4. Below the "DNS Mode" option, you'll find the "DNS Server" section. We've provided a list of commonly used DoH/DoT servers, from which you can select up to three servers simultaneously.
After setting your preferred DNS servers, click the "DETECT DNS SERVER" button. The router will then automatically verify the availability of these servers.
For configuring DoH on an AC router
1. Log in to the web-based interface of the router. If you don’t know how to do that, please refer to How do I log into the web-based Utility (Management Page) of TP-Link wireless router?
2. Navigate to Advanced > Network > Internet in the router settings. Here, you can see the switch for DoH and the server selection field.
When the status is displayed as "connected," it indicates a successful connection to the DoH server.
Is this faq useful?
Your feedback helps improve this site.
What’s your concern with this article?
- Dissatisfied with product
- Too Complicated
- Confusing Title
- Does not apply to me
- Too Vague
- Other
Thank you
We appreciate your feedback.
Click here to contact TP-Link technical support.
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy . Don’t show again
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy . Don’t show again
Basic Cookies
These cookies are necessary for the website to function and cannot be deactivated in your systems.
TP-Link
accepted_local_switcher, tp_privacy_base, tp_privacy_marketing, tp_smb-select-product_scence, tp_smb-select-product_scenceSimple, tp_smb-select-product_userChoice, tp_smb-select-product_userChoiceSimple, tp_smb-select-product_userInfo, tp_smb-select-product_userInfoSimple, tp_top-banner, tp_popup-bottom, tp_popup-center, tp_popup-right-middle, tp_popup-right-bottom, tp_productCategoryType
Livechat
__livechat, __lc2_cid, __lc2_cst, __lc_cid, __lc_cst, CASID
Youtube
id, VISITOR_INFO1_LIVE, LOGIN_INFO, SIDCC, SAPISID, APISID, SSID, SID, YSC, __Secure-1PSID, __Secure-1PAPISID, __Secure-1PSIDCC, __Secure-3PSID, __Secure-3PAPISID, __Secure-3PSIDCC, 1P_JAR, AEC, NID, OTZ
Analysis and Marketing Cookies
Analysis cookies enable us to analyze your activities on our website in order to improve and adapt the functionality of our website.
The marketing cookies can be set through our website by our advertising partners in order to create a profile of your interests and to show you relevant advertisements on other websites.
Google Analytics & Google Tag Manager
_gid, _ga_<container-id>, _ga, _gat_gtag_<container-id>
Google Ads & DoubleClick
test_cookie, _gcl_au
Meta Pixel
_fbp
Crazy Egg
cebsp_, _ce.s, _ce.clock_data, _ce.clock_event, cebs
lidc, AnalyticsSyncHistory, UserMatchHistory, bcookie, li_sugr, ln_or