Live today · not a roadmap item

Native DNS-over-QUIC, Available Now

Most resolvers list DNS-over-QUIC as "coming soon." AEU DNS runs it today — native DoQ and DoH3, side by side with DoH, DoT and classic DNS53. QUIC's 0-RTT handshake and UDP-based streams cut connection latency and remove the TCP head-of-line blocking that slows DoH and DoT under packet loss, while every query stays encrypted end to end and unlogged.

Why DoQ

Lower latency

QUIC's 0-RTT resumption lets repeat connections skip a full round trip, so lookups start faster than over TCP-based DoH or DoT.

No head-of-line blocking

Each QUIC stream is independent. A single lost packet only stalls its own query, not every other lookup sharing the connection like it does on TCP.

Encrypted transport

Every DoQ session is encrypted end to end, so your DNS lookups are sealed against on-path snooping the same way DoH and DoT are.

No-log by design

AEU DNS keeps no query logs on any transport, DoQ included — nothing to retain, nothing to hand over, nothing to leak.

Resistant to blocking

QUIC runs over UDP/443, the same port as HTTP/3 traffic, making DoQ harder to fingerprint and block than protocols tied to a dedicated port.

Post-quantum key exchange

The transport uses X25519MLKEM768 key exchange, so DoQ sessions stay private even against future quantum computers.

How to enable it

DoQ is already live on every AEU DNS edge node — there is nothing to wait for. Create a free account, open Setup and pick DNS-over-QUIC for your device; you get your DNS profile and a personal certificate on first login, and most people finish in about two minutes.

Go to Setup

DoQ vs DoH vs DoT — how they compare

Metric DoQ DoH DoT
Latency Lowest (0-RTT) Good Good
Encrypted Yes Yes Yes
Head-of-line blocking No Yes Yes
Transport UDP (QUIC) TCP TCP

Switch to DoQ in about two minutes

Create a free account, get your DNS profile and a personal certificate, and enable DNS-over-QUIC on any device.

Create your account

Frequently asked questions

What is DNS over QUIC?

DNS-over-QUIC (DoQ) carries DNS queries over the QUIC transport protocol instead of plain UDP/53 or TCP. QUIC is encrypted by default, supports 0-RTT connection resumption, and multiplexes independent streams so one lost packet does not stall every query on the connection.

Does AEU DNS support DoQ today?

Yes. DoQ is live on every AEU DNS edge node right now, alongside native DoH3, DoH, DoT and classic DNS53 — it is not a future feature. Enable it from the Setup page after creating a free account.

Is DoQ faster than DoH/DoT?

DoQ typically starts lookups faster thanks to QUIC's 0-RTT handshake, and it avoids the TCP head-of-line blocking that can slow DoH and DoT when packets are lost, especially on unstable networks.

Is it no-log?

Yes. AEU DNS keeps no query logs on any transport, DoQ included, and the transport itself uses post-quantum key exchange (X25519MLKEM768) so lookups stay private today and against future quantum computers.

Do I need special software to use DoQ?

You need a DNS client or operating system that supports DoQ. AEU DNS gives you a ready-to-use configuration on the Setup page for supported devices, with your personal certificate generated automatically.