Bezmezhau DNS Setup
Set up DNS on any device
Pick your platform below. On phones, prefer encrypted DNS: DoT or DoH. For routers and TVs, plain IPv4 DNS is usually enough.
DNS Check
The check uses a one-time check-host under *.check.bezmezhau.com. If your device resolves through Bezmezhau DNS, the request returns to this site.
Press the button to check whether this device uses Bezmezhau DNS.
Server addresses
Plain DNS
143.20.64.55For Windows, routers, Smart TVs, consoles and devices without DoT/DoH. Primary IPv4: 143.20.64.55, backup: 91.108.243.78.
DNS-over-TLS
dns.bezmezhau.comFor Android Private DNS, iOS/macOS profiles and routers with DoT.
DNS-over-HTTPS
https://dns.bezmezhau.com/dns-queryFor browsers, OpenWrt, MikroTik, local AdGuard or Pi-hole.
Step-by-step guides
Android 9+
Private DNS / DoT
- 1Open Settings → Network & Internet → Private DNS.
- 2Select "Private DNS provider hostname".
- 3Enter dns.bezmezhau.com and save.
- 4Return to this page and run the DNS check in the check block.
On some Samsung devices the path is Settings → Connections → More connection settings → Private DNS.
iPhone / iPad
DoT or DoH profile
- 1Open this setup page on your iPhone or iPad.
- 2Tap "Download iOS profile". If the network blocks port 853, download the DoH profile next to it.
- 3Open Settings → General → VPN, DNS & Device Management.
- 4Select the Bezmezhau Smart DNS profile and tap Install.
- 5Make sure only one DNS profile is active.
- 6Fully close Safari, return to this page, and run the DNS check in the check block.
After installing the profile, check DNS in this same setup section.
The DoT profile is the primary option for iPhone and iPad. Use the DoH profile if port 853 is blocked or DoT does not connect.
Windows 10 / 11
Plain IPv4 DNS
- 1Open Settings → Network & Internet.
- 2Select Wi-Fi or Ethernet and open the connection properties.
- 3Find "DNS server assignment" and click "Edit".
- 4Choose "Manual" and enable IPv4.
- 5In the "Preferred DNS" field, enter the primary 143.20.64.55, and in "Alternate DNS" enter our second server 91.108.243.78.
- 6Important: Press Win+R → ncpa.cpl → Network Adapter Properties → Uncheck "Internet Protocol Version 6 (TCP/IPv6)" to prevent ISP leaks.
- 7Save settings and flush DNS cache by running ipconfig /flushdns.
For the second (alternate) DNS, enter our backup server 91.108.243.78. Make sure to disable IPv6 in your adapter properties!
macOS
Plain DNS or profile
- 1Open System Settings → Network.
- 2Select the active Wi-Fi or Ethernet.
- 3Open Details → DNS.
- 4Add the DNS server 143.20.64.55.
- 5Remove any public DNS entries next to it.
- 6Reconnect the network and run the DNS check on this page.
For encrypted DNS you can use the mobileconfig profiles from this setup page.
Router
DNS for the whole network
- 1Open your router admin panel.
- 2Find the Internet, WAN, DHCP or DNS section.
- 3Set Primary DNS to the primary 143.20.64.55.
- 4Leave Secondary DNS empty or set the backup 91.108.243.78.
- 5Save the settings and reconnect your devices.
If the router supports DoT — server dns.bezmezhau.com, port 853, SNI dns.bezmezhau.com.
Smart TV / consoles
Manual DNS
- 1Open the network settings on your TV or console.
- 2Select the active Wi-Fi or Ethernet connection.
- 3Switch DNS from Auto to Manual.
- 4Set the DNS server to 143.20.64.55.
- 5Restart the app or the device.
If the device does not allow changing DNS, set it on your router instead.
Good to know
What should respond
Domains on the bypass list may respond with Bezmezhau IPs. Regular domains should resolve to their real IPs.
Do not add a public DNS second
If 1.1.1.1 or 8.8.8.8 sits next to it, some queries may bypass Bezmezhau DNS.
After setup
Run the DNS check in this section from the same device and network where Bezmezhau DNS is enabled.