Operation Modes#

DoHzel Proxy supports three operation modes:

  • DNS2eDOH: Default mode. Requests are filtered and resolved by Hafnova over DoH (TLS). Recommended for most use cases.
  • DNS2iDOH: Requests are filtered by DoHzel but resolved through a configured fallback DoH server (for example Quad9).
  • DNS2DNS: Requests are filtered locally and forwarded over plain DNS to a bootstrap resolver (initier), sacrificing encryption for simpler integration with existing DNS infrastructure.

Change mode#

You can change the operation mode at any time without restarting the service:

dohzel-proxy mode DNS2eDOH
dohzel-proxy mode DNS2iDOH
dohzel-proxy mode DNS2DNS

Check the active mode with:

dohzel-proxy status

Mode-specific settings#

DNS2iDOH — fallback DoH#

Set the external DoH resolver used after filtering:

dohzel-proxy mode DNS2iDOH
dohzel-proxy fallback https://dns9.quad9.net/dns-query

DNS2DNS — initier DNS#

Set the bootstrap DNS server(s) that receive forwarded queries:

dohzel-proxy mode DNS2DNS
dohzel-proxy initier 10.0.0.1
dohzel-proxy initier 10.0.0.1,10.0.0.2

See the CLI reference for all mode-related commands.