How to Enable DoH on MikroTik Routers

5 min

The DNS over HTTPS (DoH) feature allows you to encrypt DNS requests, improving both security and privacy while browsing. Follow the steps below to enable DoH on MikroTik routers using Platform servers.

Connect to the Router

Access your MikroTik router using WinBox or the web interface.

Open the Console (New Terminal)

Once connected, open the MikroTik terminal from the main menu (New Terminal).

Download and Import the Root CA

Type the following commands to download and install the root certificate:

/tool fetch url=link /certificate import file-name=fs_rootca.pem

These commands download the Root CA and import it into the system, ensuring proper DoH certificate verification.

Enable DNS over HTTPS (DoH)

Enable DoH by specifying the server and requesting certificate verification:

/ip dns set use-doh-server=link verify-doh-cert=yes

Note: Replace 123456 with the DoH code visibile from your Dashboard (Network/DoH DoT menu).

Verify Operation

Check that the router is correctly using DoH by running:

/ip dns print

Make sure the use-doh-server field is correctly set to link

Tip

If you are using a multi-WAN configuration or a local DNS setup, ensure that your firewall or NAT rules allow HTTPS traffic (port 443) to the domain link.

Other ways to ask:

Enabling DoH on MikroTik Routers

DoH Configuration Guide for MikroTik Routers