Steps
- Record the current core, proxy mode and default DNS behavior, then confirm that a normal hostname resolves.
- Separate local and remote resolution. LAN and direct destinations often need local DNS; proxied targets can use remote resolution according to your privacy model.
- A DoH hostname needs a working bootstrap path, or the core may need DNS in order to resolve the DNS server itself.
- Change one item, restart the core and inspect the DNS server, matched rule and first error before keeping it.
Why this matters
DNS and routing depend on one another. Small changes with a known baseline prevent the classic case where IP works but names fail for unclear reasons.
How to verify
Common names resolve consistently, direct and proxied domains use the intended resolvers, and startup logs contain no timeout or loop.
Things to watch
FakeIP is for compatible TUN scenarios. Enterprise discovery, LAN services and some games require real addresses.