🍎 Configure iOS for Secure DNSaaS

Step-by-step guide to configure iPhone and iPad to use our secure, token-gated DNS service.

🍎 iOS • Mobile ✅ Verified • Working 🔒 DoH/DoT • Token Auth

📋 Overview

iOS does not have native GUI support for custom DNS-over-HTTPS (DoH) or DNS-over-TLS (DoT) with token authentication. This guide provides two methods to configure your iPhone or iPad to use our secure DNSaaS service.


Service Endpoint Authentication
Primary DNS https://dns1.oss.co.za/xxxxx/dns-query Token in URL path
Protocol DNS-over-HTTPS (DoH) • Port 443 • TLS 1.3
iOS Version iOS 14+ (supports DNS configuration profiles)
⚠️ Important iOS does not have a built-in DoH configuration in Settings. You must use either a Configuration Profile or a Third-Party App.

✅ Prerequisites

💡 Token Format Your token is provided by the DNSaaS administrator. It looks like: token_xxxxxxxxxx

⭐ Method 1: Configuration Profile Recommended

This method creates a DNS configuration profile that you install on your iOS device. It's persistent, secure, and works system-wide.

✅ Why This Is Recommended
  • System-wide DNS resolution (all apps use it)
  • Persists across reboots
  • No third-party app required
  • Supports DoH with token authentication
  • Works with all network connections (Wi-Fi and cellular)

1 Create the Configuration Profile

Use an online profile generator or create a .mobileconfig file manually.

Option A: Use a Profile Generator

  • Visit dns.notjakob.com or similar profile generators
  • Select DNS-over-HTTPS (DoH)
  • Enter the following URL:
https://dns1.oss.co.za/testclient123/dns-query

Option B: Create a .mobileconfig File Manually

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>DNSSettings</key> <dict> <key>DNSProtocol</key> <string>HTTPS</string> <key>ServerURL</key> <string>https://dns1.oss.co.za/testclient123/dns-query</string> <key>ServerAddresses</key> <array> <string>102.220.218.218</string> <string>102.220.218.219</string> </array> </dict> <key>PayloadIdentifier</key> <string>com.apple.dnsSettings.managed.9B6F2C3D-5A8E-4F1C-9D7E-8B2A6C4F1E3D</string> <key>PayloadType</key> <string>com.apple.dnsSettings.managed</string> <key>PayloadUUID</key> <string>9B6F2C3D-5A8E-4F1C-9D7E-8B2A6C4F1E3D</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </array> <key>PayloadDescription</key> <string>DNSaaS Secure DNS Configuration</string> <key>PayloadDisplayName</key> <string>DNSaaS Secure DNS</string> <key>PayloadIdentifier</key> <string>com.example.dnsaas.profile</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>A1B2C3D4-E5F6-7890-ABCD-EF1234567890</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </plist>
⚠️ Important Replace token_testclient123 with your actual token in the URL above.

2 Save as .mobileconfig File

Save the file as dnsaas.mobileconfig on your computer.

3 Transfer the Profile to Your iOS Device

Option A: Email - Email the .mobileconfig file to yourself and open it on your iPhone.

Option B: AirDrop - AirDrop the file to your iOS device.

Option C: Web Server - Host the file on a web server and download it via Safari.

4 Install the Profile

On your iOS device, open the .mobileconfig file.

Tap Allow when prompted.

Go to Settings → General → VPN & Device Management.

Tap Install for the DNS profile.

Enter your device passcode if prompted.

Tap Install again and then Done.

💡 Profile Location After installation, the profile appears under Settings → General → VPN & Device Management → Configuration Profiles.

5 Verify the Profile is Active

Go to Settings → Wi-Fi → tap the (i) next to your connected network.

Scroll to DNS - it should show your DNSaaS server IPs.

✅ Success Indicator The DNS section in Wi-Fi settings should show your DNSaaS IP addresses.

📱 Method 2: Third-Party App Alternative

If you prefer a graphical interface or don't want to create a profile, several third-party apps support DoH with custom providers.

Option A: AdGuard DNS

Installation

Download AdGuard DNS from the App Store.

Configure with your DoH endpoint:

https://dns1.oss.co.za/testclient123/dns-query

Option B: DNS Cloak

Installation

Download DNS Cloak from the App Store.

Add a custom DNS server with your DoH endpoint.

Option C: NextDNS

Installation

Download NextDNS from the App Store.

Configure with your DoH endpoint and token.

💡 Why Use a Third-Party App?
  • Easier to configure than creating a profile
  • Provides additional filtering and logging features
  • Allows quick switching between DNS providers
  • Works on older iOS versions

🧪 Test Your Configuration

Use these test sites to verify your iOS configuration is working correctly.

Browser Tests

Test Domain Expected Result
https://example.com ✅ Should load normally
http://zycdjz.com ❌ Should show "This site can't be reached"
http://adult.filterdns.net ❌ Should show "This site can't be reached"

DNS Leak Test

Test Domain Expected Result
https://dnsleaktest.com Should show dns1.oss.co.za or 102.220.218.218

Profile Status Check

Test Expected Result
Settings → General → VPN & Device Management → Configuration Profiles Should show DNSaaS Secure DNS profile
Settings → Wi-Fi → (i) → DNS Should show 102.220.218.218 and 102.220.218.219

🔧 Troubleshooting

❌ Profile not installing
  • Make sure the file has the .mobileconfig extension
  • Check that the XML is valid and properly formatted
  • Try opening the file in Safari instead of the Files app
  • Ensure your device has iOS 14 or newer
❌ DNS not working after profile installation
  • Check that the profile is active: Settings → General → VPN & Device Management
  • Verify the DNS settings: Settings → Wi-Fi → (i) → DNS
  • Restart your device
  • Check network connectivity to dns1.oss.co.za
❌ Token not working with the profile
  • Make sure the token is included in the ServerURL field
  • Check that the token is valid and active
  • Verify the URL format: https://dns1.oss.co.za/xxxxx/dns-query
✅ Verify It's Working
  • Check DNS settings in Wi-Fi → should show your DNS servers
  • Visit http://adult.filterdns.net - should show "This site can't be reached"
  • Visit https://dnsleaktest.com - should show your DNS server
  • Check profile status: Settings → General → VPN & Device Management

↩️ How to Roll Back

To revert to your previous DNS settings:

Step 1: Remove the Configuration Profile

Go to Settings → General → VPN & Device Management → Configuration Profiles.

Tap the DNSaaS Secure DNS profile → tap Remove.

Enter your device passcode if prompted.

Step 2: Restart Your Device

Restart your iPhone or iPad to clear the DNS cache.

Step 3: Verify DNS Settings

Go to Settings → Wi-Fi → tap the (i) next to your network.

DNS should now be set to Automatic (your ISP's DNS).

🎯 Summary


🚀 Quick Reference:
https://dns1.oss.co.za/testclient123/dns-query

🍎 iOS Navigation Path:
Profile Installation: Settings → General → VPN & Device Management
Wi-Fi DNS Check: Settings → Wi-Fi → (i) → DNS

DNSaaS • Secure DNS-over-HTTPS with Token Authentication
Endpoint: https://dns1.oss.co.za/xxxxx/dns-query • Port: 443

🍎 iOS • 📅 Last updated: August 2026 • 📧 Support: support@oss.co.za