Quad9 started globally disabling HTTP/1.1 support in DNS over HTTPS on December 15th, 2025. Please consider reading the article for context regarding this decision.
If your device’s or client’s DNS over HTTPS implementation does not support HTTP/2, here are some alternatives for utilizing encrypted DNS with Quad9, which can often be utilized in containers, Docker, VMs, system services, etc:
DNS Forwarders/Resolvers /w HTTP/2 DoH or DoT Support:
- dnsdist
- unbound
- pdns-recursor
- Knot Resolver
- bind
DNS Proxies /w HTTP2 DoH or DoT Support:
- dnscrypt-proxy
- AdGuard Home
Confirmed DoH-capable Devices/Libraries without HTTP/2 Support #
This is a list of devices or libraries that, to the best of our knowledge, do not support HTTP/2.0 in the DNS over HTTPS implementation.
- Mikrotik RouterOS (All versions)