AdguardTeam / AdGuardHome

Network-wide ads & trackers blocking DNS server
https://adguard.com/adguard-home.html
GNU General Public License v3.0
25.19k stars 1.81k forks source link

iOS MobileConfig - instructions for DoH without bootstrap #5545

Open ghost opened 1 year ago

ghost commented 1 year ago

Prerequisites

Description

It would be nice if MobileConfig generation instructions stated how to create MobileConfig for iOS that doesn't use UDP port 53 to resolve domain and uses encrypted queries over TCP port 443 without boostrapping.

ghost commented 1 year ago

Additionally, I noticed that AdGuard official MobileConfig (https://cdn.adtidy.org/public/Dns/adguard-dns.mobileconfig) makes my Apple devices send queries over TCP port 443 (DoH) and TCP port 853 (DoT). Is DoT supposed to be a fallback for DoH? Does that mean one MobileConfig can include both protocols - DoH and DoT? The XML file specifies only DoH.

Please update documentation on how to create profiles: