# "Celo" Open VPN and "DNS over TLS from Cloudflare" **URL:** \ **Category:** Router\ **Created:** [June 27, 2019, 7:56pm UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402 "2019-06-27T19:56:45Z")\ **Posts on this page:** 17\ **Page:** 1
**Author:** ![micaelo](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/b2d939/32.png) [@micaelo](https://forum.gl-inet.com/u/micaelo)\ **Post date:** [June 27, 2019, 7:56pm UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/1 "2019-06-27T19:56:45Z")
Hello Together, i have a GL-AR150, on this device i have configured “Celo” OpenVPN as OpenVPN Client. When i am using this OpenVPN with manuell DNS → “1.1.1.1” and “1.0.0.1” it works. All works fine. Manual DNS Server Settings (1.1.1.1 und 1.0.0.1) [https://ipx.ac/results/MwGFxEzdKpZMLrtG](https://ipx.ac/results/MwGFxEzdKpZMLrtG) When i am using this OpenVPN with “DNS over TLS from Cloudflare” it does not work. I get an connection to the VPN-Server. There is some upload and download. But when i open a site in my browser, i have errors: ERR\_NAME\_RESOLUTION\_FAILED DNS\_PROBE\_FINISHED\_NO\_INTERNET Some sites are working. DNS over TLS from Cloudflare [https://ipx.ac/results/Pk3bebGwsVdydSYy](https://ipx.ac/results/Pk3bebGwsVdydSYy) Do you have some tipps. Bye the way, the setup with “DNS over TLS from Cloudflare” was working. I think since 3 days not more. Greet and thanks Michael ---
**Author:** ![kyson-lok](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/kyson-lok/32/185_2.png) [@kyson-lok](https://forum.gl-inet.com/u/kyson-lok)\ **Post date:** [June 28, 2019, 3:20am UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/2 "2019-06-28T03:20:51Z")
Do you mean some websites with DNS over TLS can work, but some websites can’t work? Could you please stop the OpenVPN, and try it again? ---
**Author:** ![micaelo](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/b2d939/32.png) [@micaelo](https://forum.gl-inet.com/u/micaelo)\ **Post date:** [June 28, 2019, 3:52am UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/3 "2019-06-28T03:52:08Z")
Hi, only (without VPN) “DNS over TLS from Cloudflare” it works fine. and only (without VPN) DNS “1.1.1.1” / “1.0.0.1” it works fine. In both cases i have no problem open websites. Manuell DNS with “1.1.1.1/1.0.0.1” and “Celo” VPN it works. No Problem to open websites. But with “DNS over TLS from Cloudflare” and with “Celo” VPN it does not work, i can not open websites. DNS\_PROBE\_FINISHED\_NO\_INTERNET I have restart the OpenVPN Client and i was trying a reboot, nothing changes, i have same problem to open websites. Greet and thanks Michael ---
**Author:** ![micaelo](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/b2d939/32.png) [@micaelo](https://forum.gl-inet.com/u/micaelo)\ **Post date:** [June 28, 2019, 11:41am UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/4 "2019-06-28T11:41:13Z")
Hello, any tipps for me ? or do you need more Information ? Greets and Thanks ---
**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\ **Post date:** [June 28, 2019, 12:02pm UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/5 "2019-06-28T12:02:19Z")
If you manually set up dns the dns is not encrypted. So it is different from use dns tls. So one explaination could be that your vpn blocks dns encryption to cloudflare. But I need to verify. Anyway you could share with me your vpn profile ? ---
**Author:** ![micaelo](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/b2d939/32.png) [@micaelo](https://forum.gl-inet.com/u/micaelo)\ **Post date:** [June 28, 2019, 10:15pm UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/6 "2019-06-28T22:15:50Z")
I have this found i my logs: Could this that the reason ? _Thu Jun 27 22:05:16 2019 daemon.warn odhcpd[1521]: A default route is present but there is no public prefix on br-lan thus we don’t announce a default route!_ _Thu Jun 27 22:09:18 2019 daemon.info dnsmasq[1263]: DNS service limited to local subnets_ _Thu Jun 27 22:09:28 2019 authpriv.info dropbear[1574]: Not backgrounding Thu Jun 27 22:09:35 2019 daemon.err stubby[1678]: [20:09:35.418318] STUBBY: Read config from file /etc/stubby/stubby.yml Thu Jun 27 22:09:35 2019 daemon.err stubby[1678]: error: Could not bind on given addresses: Address not available_ _Thu Jun 27 22:10:02 2019 daemon.err openvpn[2817]: TLS Error: local/remote TLS keys are out of sync: [AF\_INET]199.233.235.205:1194 [0]_ **/etc/openvpn/update-resolv-conf tun0 1500 1560 172.16.0.6 255.255.255.0 init Thu Jun 27 22:10:05 2019 daemon.warn odhcpd[1521]: A default route is present but there is no public prefix on br-lan thus we don’t announce a default route! Thu Jun 27 22:10:05 2019 daemon.info odhcpd[1521]: Using a RA lifetime of 0 seconds on br-lan** ---
**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\ **Post date:** [June 29, 2019, 7:12am UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/7 "2019-06-29T07:12:31Z")
@kyson-lok pls have a look. ---
**Author:** ![micaelo](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/b2d939/32.png) [@micaelo](https://forum.gl-inet.com/u/micaelo)\ **Post date:** [June 30, 2019, 7:52pm UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/8 "2019-06-30T19:52:13Z")
any news or infor for me ? ---
**Author:** ![kyson-lok](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/kyson-lok/32/185_2.png) [@kyson-lok](https://forum.gl-inet.com/u/kyson-lok)\ **Post date:** [July 1, 2019, 1:21am UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/9 "2019-07-01T01:21:44Z")
Could you please ssh to the router, and execute this command? Please show me the result. ```auto cat /etc/config/dhcp ``` ---
**Author:** ![micaelo](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/b2d939/32.png) [@micaelo](https://forum.gl-inet.com/u/micaelo)\ **Post date:** [July 1, 2019, 4:58pm UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/10 "2019-07-01T16:58:50Z")
with manuell DNS (1.1.1.1/1.0.0.1): root@GL-AR300M:~# cat /etc/config/dhcp config dnsmasq option domainneeded ‘1’ option boguspriv ‘1’ option filterwin2k ‘0’ option localise\_queries ‘1’ option rebind\_localhost ‘1’ option local ‘/lan/’ option domain ‘lan’ option expandhosts ‘1’ option nonegcache ‘0’ option authoritative ‘1’ option readethers ‘1’ option leasefile ‘/tmp/dhcp.leases’ option nonwildcard ‘1’ option localservice ‘1’ option rebind\_protection ‘0’ list server ‘1.1.1.1’ list server ‘1.0.0.1’ option noresolv ‘1’ option resolvfile ‘/tmp/resolv.conf.vpn’ config dhcp ‘lan’ option interface ‘lan’ option start ‘100’ option limit ‘150’ option leasetime ‘12h’ option force ‘1’ option dhcpv6 ‘server’ option ra ‘server’ config dhcp ‘wan’ option interface ‘wan’ option ignore ‘1’ config odhcpd ‘odhcpd’ option maindhcp ‘0’ option leasefile ‘/tmp/hosts/odhcpd’ option leasetrigger ‘/usr/sbin/odhcpd-update’ option loglevel ‘4’ config dhcp ‘guest’ option interface ‘guest’ option start ‘100’ option leasetime ‘12h’ option limit ‘150’ option dhcpv6 ‘server’ option ra ‘server’ config domain ‘localhost’ option name ‘[console.gl-inet.com](http://console.gl-inet.com)’ option ip ‘192.168.8.1’ * * * with ‘DNS over TLS from Cloudflare’ root@GL-AR300M:~# cat /etc/config/dhcp config dnsmasq option domainneeded ‘1’ option boguspriv ‘1’ option filterwin2k ‘0’ option localise\_queries ‘1’ option rebind\_localhost ‘1’ option local ‘/lan/’ option domain ‘lan’ option expandhosts ‘1’ option nonegcache ‘0’ option authoritative ‘1’ option readethers ‘1’ option leasefile ‘/tmp/dhcp.leases’ option nonwildcard ‘1’ option localservice ‘1’ option rebind\_protection ‘0’ option noresolv ‘1’ list server ‘127.0.0.1#53535’ option resolvfile ‘/tmp/resolv.conf.vpn’ config dhcp ‘lan’ option interface ‘lan’ option start ‘100’ option limit ‘150’ option leasetime ‘12h’ option force ‘1’ option dhcpv6 ‘server’ option ra ‘server’ config dhcp ‘wan’ option interface ‘wan’ option ignore ‘1’ config odhcpd ‘odhcpd’ option maindhcp ‘0’ option leasefile ‘/tmp/hosts/odhcpd’ option leasetrigger ‘/usr/sbin/odhcpd-update’ option loglevel ‘4’ config dhcp ‘guest’ option interface ‘guest’ option start ‘100’ option leasetime ‘12h’ option limit ‘150’ option dhcpv6 ‘server’ option ra ‘server’ config domain ‘localhost’ option name ‘[console.gl-inet.com](http://console.gl-inet.com)’ option ip ‘192.168.8.1’ root@GL-AR300M:~# ---
**Author:** ![micaelo](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/b2d939/32.png) [@micaelo](https://forum.gl-inet.com/u/micaelo)\ **Post date:** [July 3, 2019, 5:55am UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/11 "2019-07-03T05:55:06Z")
Hi, any news or infos ? Greet and Thanks ---
**Author:** ![kyson-lok](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/kyson-lok/32/185_2.png) [@kyson-lok](https://forum.gl-inet.com/u/kyson-lok)\ **Post date:** [July 8, 2019, 1:54am UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/12 "2019-07-08T01:54:44Z")
Thanks for your information. The configuration file is fine. Would it caused by your VPN provider block DNS over TLS? ---
**Author:** ![micaelo](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/b2d939/32.png) [@micaelo](https://forum.gl-inet.com/u/micaelo)\ **Post date:** [July 8, 2019, 7:33pm UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/13 "2019-07-08T19:33:26Z")
Thanks a lot. I will ask my VPN - Provider. ---
**Author:** ![micaelo](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/b2d939/32.png) [@micaelo](https://forum.gl-inet.com/u/micaelo)\ **Post date:** [July 9, 2019, 6:56pm UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/14 "2019-07-09T18:56:20Z")
Hey kyson-lok, i got an answer from the VPN-Provider. “DNS over TLS” do not work with this server, that i am using. Thanks for the support. ---
**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\ **Post date:** [July 10, 2019, 9:02am UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/15 "2019-07-10T09:02:47Z")
I suggest that you change the service provider. Because this means that they may use your DNS data. Otherwise they may allow DNS encryption. ---
**Author:** ![micaelo](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/b2d939/32.png) [@micaelo](https://forum.gl-inet.com/u/micaelo)\ **Post date:** [July 10, 2019, 9:44am UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/16 "2019-07-10T09:44:26Z")
The Provider told me: The Server that I am use, is a special only for Streaming, and it has multi-hop vpn-connections. Because of that multi-hop, i should not use “DNS over TLS” . ---
**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\ **Post date:** [October 29, 2025, 4:08am UTC](https://forum.gl-inet.com/t/celo-open-vpn-and-dns-over-tls-from-cloudflare/7402/17 "2025-10-29T04:08:35Z")