RFC 9250 - DNS over Dedicated QUIC Connections

Published: May 2022
Status: Proposed Standard
Authors:

• C. Huitema (Private Octopus Inc.)
• S. Dickinson (Sinodun IT)
• A. Mankin (Salesforce)

---

Abstract

This document describes the use of QUIC to provide transport confidentiality for DNS. The encryption provided by QUIC has similar properties to those provided by TLS, while QUIC transport eliminates the head-of-line blocking issues inherent with TCP and provides more efficient packet-loss recovery than UDP. DNS over QUIC (DoQ) has privacy properties similar to DNS over TLS (DoT) specified in RFC 7858, and latency characteristics similar to classic DNS over UDP.

---

Table of Contents

• 1. Introduction
• 2. Key Words
• 3. Design Considerations
• 4. Specifications
• 5. Implementation Requirements
• 6. Security Considerations
• 7. Privacy Considerations
• 8. IANA Considerations
• 9. References
• Appendix A. The NOTIFY Service

---

Key Features

• Default Port: UDP 853
• ALPN Identifier: "doq"
• Privacy: Same level as DoT
• Latency: 0-RTT support
• No Head-of-Line Blocking: QUIC streams
• Connection Migration: Seamless network switching

---

Resources

• Official RFC: RFC 9250
• DataTracker: RFC 9250

---