Make API requests to 1.1.1.1 over DoH

Cloudflare offers a DNS over HTTPS resolver at:

https://cloudflare-dns.com/dns-query

​​ HTTP method

Cloudflare’s DNS-over-HTTPS (DOH) endpoint supports POST and GET for DNS wireformat, and GET for JSON format.

When making requests using POST, the DNS query is included as the message body of the HTTP request, and the MIME type (application/dns-message) is sent in the Content-Type request header. Cloudflare will use the message body of the HTTP request as sent by the client, so the message body should not be encoded.

When making requests using GET, the DNS query is encoded into the URL.

​​ Valid MIME types

If you use JSON format, set application/dns-json, and if you use DNS wireformat, use application/dns-message.

Refer to DNS wireformat and JSON for cURL examples.

​​ Send multiple questions in a query

Sending more than one question when making requests depends on the HTTP version used, as each DNS query maps to exactly one HTTP request. HTTP/2 and HTTP/3 have multiplexing, and you can start multiple requests concurrently. HTTP/2 is, in fact, the minimum recommended version of HTTP for use with DNS over HTTPS (DoH). This is not specific to 1.1.1.1, but rather how DoH works.

You can learn more about how DoH works in RFC 8484, more specifically the HTTP layer requirements Open external link .

Example request:

$ curl --http2 --header "accept: application/dns-json" "https://1.1.1.1/dns-query?name=cloudflare.com" --next --http2 --header "accept: application/dns-json" "https://1.1.1.1/dns-query?name=example.com"

​​ Authentication

No authentication is required to send requests to this API.

​​ Supported TLS versions

Cloudflare’s DNS over HTTPS resolver supports TLS 1.2 and TLS 1.3.

​​ Return codes