So my ISP was hijacking my DNS

On a mundane Saturday afternoon, the author decided to tackle some issues within their homelab. One of the problems they encountered was an external site within their Podman container failing to function, resulting in the error "Site cannot be reached" almost immediately. This prompted the author to investigate their DNS setup. They tested various DNS providers, such as Google DNS and Cloudflare, but all returned the same IP address.

However, when they utilized Cloudflare's DoH (DNS over HTTPS) endpoint, they received a different IP address. Intrigued, the author traced the IP back to their ISP, realizing that their ISP was tampering with their DNS queries and providing a manipulated IP address. This revelation led the author to explore potential solutions like DNS over TLS (DoT) or DNS over HTTPS (DoH).

The author shared their findings on Twitter, which garnered attention and sparked questions from others regarding the matter. To shed light on the subject, the author wrote this article, addressing common misconceptions and providing explanations along the way.