DNS Settings for Home Internet?

GemStater

I've been pondering a good strategy for privacy and security regarding my home DNS settings. Initially I was using Mullvad DNS with ad-blocking on all my devices. But when I set Mullvad on my router and access point, it would kill my Netflix service. So then after some research, I went with Quad9. It worked fine for Netflix. The only issue with Quad9 is no ad-blocking function that I like. But then when using the Mullvad DNS leak test online, Quad9 has apparent leaks, at least according to Mullvad. And so right now, I have Quad9 set on my router and access point while all my mobile devices and web browsers are set to Mullvad. This set-up does not appear to affect internet speed but I wonder if it's okay to have multiple DNS services running on the same home network and if there are any draw backs to it? Thanks in advance for the help.

[deleted]

GemStater But then when using the Mullvad DNS leak test online, Quad9 has apparent leaks, at least according to Mullvad.

Expected behavior since they're checking for their DNS servers, hence the 'leak'. In any case, Mullvad VPN should override your router DNS unless you have Quad9 configured in your browser as DoH or as your Private DNS on GrapheneOS. In both cases Mullvad would report that there's a 'leak'. Your router in not causing this message if you're using a VPN.

GemStater This set-up does not appear to affect internet speed but I wonder if it's okay to have multiple DNS services running on the same home network and if there are any draw backs to it?

Apps and web sites can detect the configured DNS servers by generating random subdomains resolved by querying their authoritative DNS server. This can be used as part of fingerprinting users. If you're using a VPN, you should consider using the standard DNS service provided by the VPN service to avoid standing out from other users.

https://grapheneos.org/faq#custom-dns

GemStater

[deleted] I'm not currently using Mullvad VPN or any VPN for that matter. Just the above stated DNS services as configured. So will the DNS setting on my web browsers override the setting on my router?

[deleted]

GemStater I'm not currently using Mullvad VPN or any VPN for that matter.

Ok, then if you have no DNS configured on the OS level, router DNS servers are used and the page would say that you're 'not using Mullvad VPN' and that there's a 'DNS leak'.

GemStater So will the DNS setting on my web browsers override the setting on my router?

Not only your router but also your VPN.

lcalamar

highly recommend nextdns... put it into your home router but i wlso put it in my Android settings for when I'm not on my home network

GemStater

[deleted] So to clarify, if I set my phone and web browser to automatic DNS, it will fall back to the DNS setting on my router. In this case Quad9.

[deleted]

GemStater If you have not specified DNS your OS should use and you're not running a VPN, it will use your router defined DNS.

GemStater

[deleted] okay, thanks. Sounds like my setup as stated is serving my needs well. Mullvad on the devices, with the fall back protection of Quad9 on the router. Guess I'll leave it alone and not overthink it.