Lolsrslybro We're running circles here. I asked what OP is trying to achieve. My guess OP doesn't know why they're using both. FYI, I love NextDNS and I've been a paid subscriber for many years, but it's not always the right tool for the job.
nrt I don't want to hijack this thread with what Michael Bazzell does or doesn't do (I also haven't listened to the man in what feels like several years) other than just say there's no substitute for educating oneself.
So is using both neccesssry or not? I guess my goal is to hide my IP, encrypt my traffic, and make sure my ISP isn't constantly seeing what I'm doing :)
@E24 if you're looking to block most ads and 'trackers' on Android, then generic DNS endpoints from AdGuard, Mullvad etc should do the trick.
If you want above but with more comprehensive blocking and control, you can't go wrong with NextDNS.
If you're looking to hide your IP address from websites and your ISP you need a VPN.
If you're looking to do both (hide your traffic and block ads), you will be well served by a VPN that does content filtering (Proton, IVPN, Mullvad etc). It's both what's recommended by the project and what will give you least headache.
If for some reason you want both VPN and Encrypted DNS (such as NextDNS) you can do that too.
E24 So is using both neccesssry or not? I guess my goal is to hide my IP, encrypt my traffic, and make sure my ISP isn't constantly seeing what I'm doing :)
Just using a respectable VPN takes care of that, no need to mess with encrypted DNS.
OK. I'm still new to Graphene and all so what is the big difference between the two? Also is proton or mullvad better and would I have to upgrade to a paid version to do some of the things encrypted DNS would do?
E24 They're both recommended and have similar features. Proton's NetShield is for paid subscribers only and Mullvad doesn't have a free plan but makes its Ad-blocking available to all of its subscribers.
[deleted] It's worth noting that just using Encrypted DNS (Private DNS) can mitigate some tracking by the ISP, but it's not an alternative to using Tor or a VPN.
Based on your stated goal, a VPN alone without custom DNS will be fine (IMO). The perk of custom DNS is to stop telemetry of things like apps. When you open an app there is a high probability that its connecting to the internet in multiple ways, some of those is because it has to to work, others are because its sending off telemetry about usage and other things. Some people don't want telemetry sent off, those people use something like nextDNS to really tighten down. It doesn't sound like you are concerned about this, which is no big deal.
Your VPN will put your traffic through an encrypted tunnel, it will handle your DNS requests, and will hide your IP. If that's all you're looking for (which that seems to be the case) then just stick with the VPN only.
Lolsrslybro I don't want the telemetry either so
E24 then use nextDNS.
I will tell you you have to research domains, because you won't know what you're looking at. Its a game of wtf is that and what does it do when you see random domain request popping up.
The best way to check is close all apps, run DNS logs, open one app at a time, analyze the logs and figure out what is and isn't necessary for the app to function. Block everything else. You'll do this by searching the domain online and seeing if theyre analytics or whatever unnecessary garbletigoop.
Lolsrslybro does next DNS still encrypt traffic and stuff like a VPN?
E24 Only your DNS queries.
So I should use both then
E24 A VPN already prevents your ISP from tracking your online activities. If you can splurge on a paid plan many will often block ads system-wide too.
If you want to both hide your online activities and block ads without upgrading to a paid ProtonVPN plan, you can use both the free VPN and NextDNS, but you will be standing out from other users and they won't work well together (your particular issue is related to something else but you nevertheless are having troubles right out of the gate).
Why is standing out bad? Also what is the issue with mine I still can't figure it out.
I'm using ProtonVPN with NextDNS without any issues.
How did u set up the DNS like I don't understand what I'm doing wrong
E24 It says " network has no access, private DNS server could not he accessed"
I did observe something like this, both on GrapheneOS and on stock, with other Private DNS (AdGuard's public DoT, Control-D...). All works well, and at some point I would receive a system notification about having lost Internet connectivity, and the Private DNS provider could not be reached. It would not happen outside of my home/when I was only using mobile data. I did not use a VPN.
I found out that on my home router, I had set up all DNS queries to be redirected to another provider (can't remember if it was AdGuard or else). Once I removed that from my setup, I ceased having connectivity issues. Maybe there is some kind of race condition when hopping with 2 different providers? I don't know...
