Firefox 启用 DNS over HTTPS 的方法

[Livid]

首先，需要 Firefox Nightly 版本，也就是 60.0 或更新的版本：

https://www.mozilla.org/en-US/firefox/channel/desktop/

然后打开 about:config 修改以下三处：

network.trr.mode

• 如果你想只用 DNS over HTTPS 做所有的 DNS 查询，那么修改为 3
• 如果想用传统 DNS 作为 fallback，那么修改为 2

作为实验的目的，这里推荐你修改为 3 试试。

network.trr.uri

修改为 https://1.1.1.1/dns-query

network.trr.bootstrapAddress

修改为 1.1.1.1

---

然后重启 Firefox。如何测试是否生效呢？首先试试能不能正常访问你平常去的那些网站，然后打开下面这个网站：

https://ipleak.net/

其中有一个 DNS Address 泄漏检测功能，如果你之前把 network.trr.mode 设置为 3 的话，那么恭喜你，你在这里会看到 0 servers。

[leido]

@feng0vx 用 1.0.0.1

[leido]

楼主最后写错了, 是 https://ipleak.net/

[PP]

研究了一个多小时，最后决定等 Firefox62 出来再说。

[PP]

Mozilla 的 DoH 试验结果出来啦，慢 6ms，影响甚微。估计 62 能够正式推出，不清楚是否会默认启用。

Results
Using HTTPS with a cloud service provider had only a minor performance impact on the majority of non-cached DNS queries as compared to traditional DNS. Most queries were around 6 milliseconds slower, which is an acceptable cost for the benefits of securing the data. However, the slowest DNS transactions performed much better with the new DoH based system than the traditional one – sometimes hundreds of milliseconds better.
https://blog.nightly.mozilla.org/files/2018/08/DNS-over-HTTPS-Performance-Improvement.png

https://blog.nightly.mozilla.org/2018/08/28/firefox-nightly-secure-dns-experimental-results/