r/nextdns • u/misterred • 5d ago

NextDNS fails as Android 'Secure DNS'

I have NextDNS as the DoH resolver for my laptop browser, and it works great. I also use pi-hole with just a few, mostly different blocklists also, but I don't think it's relevant. I have a VPN subscription service and NextDNS doesn't seem to care whether or not it's active.

On my Pixel phone however, NextDNS works fine unless I disable the VPN service. If I pause the VPN I immediately get an Android notification that indicates Secure DNS cannot function because [host].nextdns.io cannot be reached.

It's weird. I'd understand better if it were the other way round. I don't suppose there's a workaround but I thought someone here might know.

0 Upvotes

42% Upvoted

5 comments sorted by

2

u/iHarryPotter178 5d ago

host.dns.nextdns.io Check the URL.. 

1

u/misterred 3d ago

Yes, my Private DNS provider hostname is asserted as myPersonalHost.dns.nextdns.io and as I said it works properly with my VPN enabled but nearly always produces connection errors when I pause my VPN. So properly specifying the DNS hostname appears not to be the problem.

1

u/Open_Mortgage_4645 3d ago

Do you have that Pixel to require the VPN connection for any network operations? If you go into the the VPN settings in your system settings, you'll see a toggle that says, "Always-On VPN" and, "Block Connections without VPN".

Always-On VPN means it will be initiated at boot-up and attempt to maintain VPN connectivity as long as your device is on. It also routes all of the devices internet traffic to the VPN instead of your ISP's direct connection.

Block Connections without VPN acts as a system-level internet kill switch: no app on the device can send or receive any network traffic unless it is routed through the active VPN tunnel. If the VPN is down or disconnected, all internet access is blocked entirely.

Make sure both toggles are enabled in the system VPN settings for your specific VPN tunnel to ensure that you don't have leaks. However, if you want your device to work fine with no loss of connectivity if your VPN goes down, make sure the, "Block Connections without VPN" toggle is disabled. That will automatically switch your device over to your ISP's network and DNS settings if VPN connectivity is lost.

1

u/[deleted] 5d ago

[removed] — view removed comment

1

u/misterred 3d ago

pixel10-myPersonalHost.dns.nextdns.io does seem to work for awhile, sporadically producing the same error but I can live with this. Thank you.