在 iOS 或 macOS 使用上 DoT 或 DoH 解析 DNS

前言

在蘋果的 iOS 及 macOS 上，其實算是原生支援 DNS over TLS (DoT) 或是 DNS over HTTPS (DoH) 解析的，但他不是有一個選項可以讓你直接改，而是要使用描述檔直接下去更改。

描述檔內容

以 DNS over TLS (DoT) 來說，這是 Google DNS 的設定方式。（下載）

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
      <key>PayloadContent</key>
      <array>
        <dict>
          <key>DNSSettings</key>
          <dict>
            <key>DNSProtocol</key>
            <string>TLS</string>
            <key>ServerAddresses</key>
            <array>
              <string>2001:4860:4860::8888</string>
              <string>2001:4860:4860::8844</string>
              <string>8.8.8.8</string>
              <string>8.8.4.4</string>
            </array>
            <key>ServerName</key>
            <string>dns.google</string>
          </dict>
          <key>PayloadDescription</key>
          <string>Configures device to use Google DNS Encrypted DNS over TLS</string>
          <key>PayloadDisplayName</key>
          <string>Google DNS</string>
          <key>PayloadIdentifier</key>
          <string>com.apple.dnsSettings.managed.4310d094-ebae-47db-8125-86d944d760c0</string>
          <key>PayloadType</key>
          <string>com.apple.dnsSettings.managed</string>
          <key>PayloadUUID</key>
          <string>b3eef5ea-6620-4b9f-b2c4-81a6b9a234c9</string>
          <key>PayloadVersion</key>
          <integer>1</integer>
          <key>ProhibitDisablement</key>
          <false/>
        </dict>
      </array>
      <key>PayloadDescription</key>
      <string>Adds the Google DNS to Big Sur and iOS 14 based systems</string>
      <key>PayloadDisplayName</key>
      <string>Google DNS</string>
      <key>PayloadIdentifier</key>
      <string>plus.simpledns.apple-dns</string>
      <key>PayloadRemovalDisallowed</key>
      <false/>
      <key>PayloadType</key>
      <string>Configuration</string>
      <key>PayloadUUID</key>
      <string>09e49303-9033-4609-873b-28ffd3e53dc3</string>
      <key>PayloadVersion</key>
      <integer>1</integer>
</dict>
</plist>

以 DNS over HTTPS (DoH) 來說，這是 Google DNS 的設定方式。（下載）

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
      <key>PayloadContent</key>
      <array>
        <dict>
          <key>DNSSettings</key>
          <dict>
            <key>DNSProtocol</key>
            <string>HTTPS</string>
            <key>ServerAddresses</key>
            <array>
              <string>2001:4860:4860::8888</string>
              <string>2001:4860:4860::8844</string>
              <string>8.8.8.8</string>
              <string>8.8.4.4</string>
            </array>
            <key>ServerURL</key>
            <string>https://dns.google/dns-query</string>
          </dict>
          <key>PayloadDescription</key>
          <string>Configures device to use Google DNS Encrypted DNS over HTTPS</string>
          <key>PayloadDisplayName</key>
          <string>Google DNS</string>
          <key>PayloadIdentifier</key>
          <string>com.apple.dnsSettings.managed.2c75ef84-a233-4585-82c2-f7853b46789b</string>
          <key>PayloadType</key>
          <string>com.apple.dnsSettings.managed</string>
          <key>PayloadUUID</key>
          <string>ecb7b396-09f6-4604-a918-573556f5223c</string>
          <key>PayloadVersion</key>
          <integer>1</integer>
          <key>ProhibitDisablement</key>
          <false/>
        </dict>
      </array>
      <key>PayloadDescription</key>
      <string>Adds the Google DNS to Big Sur and iOS 14 based systems</string>
      <key>PayloadDisplayName</key>
      <string>Google DNS</string>
      <key>PayloadIdentifier</key>
      <string>plus.simpledns.apple-dns</string>
      <key>PayloadRemovalDisallowed</key>
      <false/>
      <key>PayloadType</key>
      <string>Configuration</string>
      <key>PayloadUUID</key>
      <string>d1cc2eb2-e8bc-4615-bc9e-02ef586fdea5</string>
      <key>PayloadVersion</key>
      <integer>1</integer>
</dict>
</plist>

安裝描述檔

將上面的檔案下載到你的裝置上並點擊他，他就會出現在你的設定頁面。

點擊右上角的 安裝。

在設定中的 VPN 與裝置管理，你就可以選擇到剛剛安裝的 DNS 描述檔，並開始使用他囉。