MikroTik no longer supports encrypted DNS through DoH (DNS-over-HTTPS)

[aand18]

Documentation page at [1] should be updated to reflect the current MikroTik lack of support for DoH with Quad9, since starting today Quad9 discontinued support for DoH over HTTP/1.1, the only protocol Mikrotik curently supports for DoH.

If I may suggest, maybe leave the page as is but add a huge banner to warn of current lack of support for encrypted requests, and add a second MikroTik_RouterOS_(non-encrypted) page describing only the IP address configuration (9.9.9.9 etc.) .

[1] https://github.com/Quad9DNS/documentation/blob/main/docs/en/Setup_Guides/Open-Source_Routers/MikroTik_RouterOS_(Encrypted).md

PS: For anybody coming from Google because of Quad9 DNS stopped working today :

Blog post: https://quad9.net/news/blog/doh-http-1-1-retirement/
MikroTik forum post: https://forum.mikrotik.com/t/quad9-to-drop-support-for-http-1-1/264174/27

Some MikroTik log messages you might have seen:

DoH server connection error: ERROR parsing http: there was no content-length or transfer-encoding
DoH server connection error: SSL: ssl: close notify received (6) 

[ztheory]

Apologies for the delay here.

Mikrotik will soon be supporting HTTP2 in DoH, but only in x86, CHR, and ARM64 builds for now:

dns - added HTTP/2 support to DoH on ARM64 and x86/CHR devices;

Ref: https://forum.mikrotik.com/t/v7-23beta-development-is-released/269224

We've tested, albeit, minimally, with the 7.23beta2 build, and it does work.

Once 7.23 is released to the Stable branch, probably in the coming days or weeks, we will significantly update our Mikrotik setup guide to reflect the "current" status and compatibility.