Win 10 has integrated this function in the development channel at present, and 20H2 has not included this function, but it can be completed by third-party software, such as DNSCrypt/dnscrypt-proxy. At present, on IOS, you need to use third-party software settings.

The full name of DNS is domain name system. In today's Internet protocol, it is a system in which domain names correspond to IP. When we access an address through a domain name, we need to get the real IP address of the domain name through DNS query. For example, when visiting our website, the browser will send a request to the DNS server designated by the system, and let the DNS server return the real IP address of the domain name.

The traditional DNS method is to send clear request information to DNS server through port 53. If interested, ISP can easily hijack this request between users and DNS servers. Because the traditional DNS request is based on connectionless UDP protocol, users only accept the fastest query results.

Therefore, ISP can return the wrong IP to users by preemptive response, which is called domain name hijacking, which is a typical defect of DNS protocol.