Microsoft introduces DNR: a feature designed to simplify the use of encrypted DNS protocols

Carding 4 Carders

Professional
Messages
2,731
Reputation
13
Reaction score
1,367
Points
113
Insiders will be the first to appreciate the new feature, but it will soon be deployed to regular builds as well.

Microsoft actively testing support for the Discovery of Network-designed Resolvers (DNR) standard in the latest insider builds of Windows 11. This Internet standard allows you to automatically find encrypted DNS servers in local networks.

Before the introduction of DNR, users had to manually enter information about encrypted DNS servers in their local network settings. Now DNR automatically configures devices to work with encrypted DNS resolvers using the DNS over TLS (DoT), DNS over HTTPS (DoH), and DNS over QUIC (DoQ) protocols.

When connecting to a new network, a device with DNR enabled requests an IP address and specific DNR options from the local DHCP server. In response, the server provides details of the encrypted DNS, including the server's IP address, supported protocols, port numbers, and authentication data.

Microsoft employees, Amanda Langowski and Brandon LeBlanc, said: : "Until now, Windows Insider users had to find out the IP address of the encrypted DNS server they needed and manually enter it." However, " DNR will allow users to use encrypted DNS protocols such as DoH and DoT without the need for manual configuration."

Client-side DNR support is already available for Insider Preview members with build 25982 or higher.

To activate the DNR function on the device, you must create a new registry key "EnableDnr" using the following command in the PowerShell terminal with administrator rights:
Code:
reg add HKLM\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters /v EnableDnr /t REG_DWORD /d 1

And to disable it, you can use the same command, but with a zero at the end:
Code:
reg add HKLM\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters /v EnableDnr /t REG_DWORD /d 0

Currently, Microsoft's DNR client implementation supports only the following configuration modes:
  • DHCPv4, without ADN-only mode support;
  • DHCPv6, without ADN-only mode support, without IPv6 RA support, accepts only one instance of OPTION_V6_DNR.

In addition to implementing DNR, starting with today's build of Windows 11 Insider Preview, Microsoft provides administrators with the ability to require SMB client encryption for all outgoing connections to protect them from interception.

The company also added support for cloning ReFS file system blocks in Windows Copy, which improves performance when copying large files on ReFS volumes.
 
Top