Introduction

DNS over HTTPS (DoH) is a security method in which DNS queries and responses are encrypted and sent through the HTTP or HTTP/2 protocols. DoH uses port 443, which is the standard HTTPS traffic port, to wrap the DNS query in an HTTPS request. The data is camouflaged within other HTTPS traffic, making it impossible for untrusted third parties to intercept or alter it in any way.

The DoH endpoint is a multi-tenant component that resides in every point of presence (PoP). Requests to DoH are automatically routed to the closest PoP in their continent using the existing algorithm for traffic redirection to Ericom’s Secure Web Gateway (SWG).