Pi-hole not working after updating Cloudflared

Help
1

Hi,

Expected Behaviour:

Pi-Hole serving my dns query like usual.

I have configured Cloudflared like this at the installation of Pi-Hole : cloudflared (DoH) - Pi-hole documentation

Actual Behaviour:

Pi-Hole doesn’t serve me any dns query anymore since i updated Cloudflared, Pi-Hole and Raspbian.

I see there is something with Cloudflared. I don’t fully understand.
There is a way to uninstall Cloudflared, but with what replacing Cloudflared ?

Debug Token:

https://tricorder.pi-hole.net/wjXapgHY/

2

You might want to take a look at unbound as a recursive DNS server (further explaination on that in the Docs). Unbound also offers DoT or DoH, but there are currently no instructions for it on the Docs, but this is also a good guide for unbound (i suggest you mix and match it with the content of Pi-hole docs).
If you want to keep using DoH like with Cloudflared, there is dnscrypt-proxy.

Personally I wouldn't recommend DoH unless you explicitly need to obfuscate your DNS activity (or like Dan Schaper said: "DoH is a dirty, ugly hack that friends don't let friends use."), for just encryption DoT is preferred. I am using recursive unbound at home and unbound DoT with my travel router.

my unbound DoT

I use the config from Pi-hole docs withe the addition for DoT

forward-zone:
  name: "."
  forward-addr: 1.1.1.1@853#cloudflare-dns.com
  forward-addr: 1.0.0.1@853#cloudflare-dns.com
  forward-addr: 9.9.9.9@853#dns.quad9.net
  forward-addr: 149.112.112.112@853#dns.quad9.net
  forward-tls-upstream: yes
3

So if I understand well, I can’t use Cloudflared anymore and I need to use another way to do DoH, that’s it ?

I think I will use dnscrypt-proxy.

4

Likely so.

That's likely due to cloudflare, see cloudflared proxy-dns command will be removed starting February 2, 2026 · Changelog:

Starting February 2, 2026, the cloudflared proxy-dns command will be removed from all new cloudflared releases.
(…)
Versions of cloudflared released before this date will not be affected and will continue to operate. However, note that our official support policy for any cloudflared release is one year from its release date.

5

Ok, thank you.

Another problem with dnscrypt-proxy, it is not available in Raspbian Bookworm version.
Only in Trixie I think.

I think i need a fresh install of Trixie … or an update in place …

6

Moving forward is there any kind of upgrade or drop in replacement for cloudflare doh? They mention something about a cloudflare WARP client - anything in the works?

7

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.