Connectivity services
DNS services
Give a network fast, controlled name lookups with the router acting as its DNS server.
What it is
The Domain Name System (DNS) turns names such as www.example.com into the addresses computers use. A MikroTik router can act as a DNS cache for the devices on a network and hand itself out as their DNS server through DHCP. RouterOS also supports DNS over HTTPS (DoH) to protect DNS requests in transit.
Type: Wired and wireless. Works over either cabled or wireless links.
Serve a local network
Let devices use the router for name lookups instead of reaching out for every request.
Name local devices
Add static entries so internal names resolve to your own addresses.
Protect lookups in transit
Use DNS over HTTPS so lookups are carried over HTTPS.
Capabilities and hardware
What RouterOS provides for this solution, as described in MikroTik's documentation. Features depend on the RouterOS version, the hardware model and its licence level.
DNS cache for clients
A router with DNS enabled can be a DNS cache for any DNS-compliant client and can be given out as the primary DNS server in its DHCP server settings.
Source: MikroTik documentation: DNS
Static and dynamic servers
Static server entries are preferred over dynamic ones learned from services such as DHCP, although a static server is not always the one used.
Source: MikroTik documentation: DNS
Care with remote requests
When remote requests are enabled the router answers TCP and UDP DNS queries on port 53; MikroTik advises limiting access to known hosts.
Source: MikroTik documentation: DNS
DNS over HTTPS (DoH)
RouterOS supports DoH, which sends and receives DNS requests over HTTPS for better data integrity and to reduce the risk of man-in-the-middle attacks.
Source: MikroTik documentation: DNS
Choosing hardware
The router you choose must handle your number of users and queries. DoH adds encryption work, so for larger networks check the model's capacity first.
Check before you buy. Features depend on the RouterOS version, the hardware model and its licence level, and not every MikroTik product supports every solution. Check the product page for the exact model before you buy.
Product recommendations for this solution are not listed yet: they are added once the product data is confirmed.
Help choosing
Who it helps
- Managed IT providersA consistent, controllable DNS setup across the sites you support.
When it is a good fit
- You want one place to control name lookups for a site
- You use internal names for local devices
- Your devices get their settings from the router's DHCP server
- You want lookups to travel over HTTPS
- You can limit who may query the router from outside
Planning your setup
- Decide who may query the router. If remote requests are allowed the router answers DNS on port 53; restrict that access to known hosts.
- Choose upstream servers. Decide which DNS servers the router asks, statically configured or learned from services such as DHCP.
- List local names. Prepare any static entries for devices on your network.
- Decide on DoH. Check that your chosen upstream provider supports DNS over HTTPS before relying on it.
Related solutions
Not sure which one fits?
Tell us about your network and we will help you choose.
Talk to MikroTik CanadaSources
- MikroTik documentation: DNS (checked 2026-10-01)
- Existing MikroTik Canada page: DNS and DoH on MikroTik RouterOS (checked 2026-10-01)
Capabilities are as described in the sources when they were checked. They depend on the RouterOS version, the hardware model and its licence level: confirm them for your model before you buy.