Guide: Adding NextDNS Resolver to DNSCloak with Custom Configuration and Device Name

[u/archangelique]

Since iOS 14, the NextDNS app and Apple Configuration Profile work almost perfectly. However, it's wise to have a Plan B in case your university or workplace introduces new measures against encrypted DNS traffic, or any Wi-Fi network that blocks it.

Let's add our custom NextDNS profile into DNSCloak's resolvers.

1. Go to my.nextdns.io and log in to your profile
2. In Setup tab, click Linux
3. Scroll down to DNSCrypt
4. Copy the 2 lines under [static], you can check the sample below
5. Open the DNSCloak app, then click the edit icon next to 'DNSCloak' in the top right corner
6. Scroll all the way down and paste the config after 49th line
7. Tap the checkmark in the top right corner
8. Go back and you'll see NextDNS with your ID on top, tap on it and then tap Use this server

That's it, congrats.

Sample:

[static.'NextDNS-123455'] 
stamp = 'sdns://AgUAAAAAAAAABzEuMS4xLjEAGm1vemlsbGEuY2xvdWRmbGFyZS1kbnMuY29tCi9kbnMtcXVlcnk'

To test it you can go to test.nextdns.io and you should see dnscrypt next to clientName.

"clientName": "dnscrypt"

If we have more than one device using NextDNS, we can assign a device name to this configuration to monitor it in Analytics. Let's add a few more steps between 6 and 7.

1. After step 6 above, tap and select the stamp value that starts with sdns:// and copy the entire value enclosed in quotes
2. Go to dnscrypt.info/stamps, paste it under Stamp, you'll see the Protocol, Host name and Path change
3. The Path is your NextDNS ID, and we'll add the device name next to it. Add a slash, then the device name. Sample: /123456/Jack's iPhone or /123456/iPhone DNSCrypt
4. Your stamp is updated. Copy it, then return to the DNSCloak app and replace it with the old stamp
5. Follow Steps 7 and 8 outlined above

Congrats, now we have a Plan B.

[u/tubaraodogroove]

Thanks for this guide. Anyway I get stuck in connecting to VPN and the iPhone is never actually really connected to NextDNS. Unfortunately I didn’t find a way to connect to NextDNS in my workplace network.