Why setting up a DNS on a Xiaomi router is more important than you think
Domain name system (DNS) β It's like the Internet's phone book: it converts human addresses (like mi.com) into machine addresses. IP. But few people know that the standard DNS-ISPs from your ISP often work slowly, collect data about the sites visited, and can block access to certain resources. 4A flagship AX6000) replacement DNS permitting:
Speed up site loading by 20-40% by using the nearest servers (for example, 1.1.1.1 from Cloudflare or 8.8.8.8 from Google).
Bypass the blocking of Roskomnadzor or corporate restrictions without VPN.
β Protect yourself from phishing and malicious sites through DNS-filters (like 94.140.14.14 by AdGuard).
This article presents unique DNS configuration schemes for Xiaomi routers, taking into account MiWiFi firmware and alternative firmware (Padavan, OpenWRT), as well as solutions to typical problems such as βno settings are savedβ or βDNS is not applied on connected devicesβ.
What are they? DNS-Servers to choose for Xiaomi-router in 2026
The choice of DNS depends on your purpose. Here is the current list of trusted servers with their features:
| DNS-provider | IPv4-address | IPv6-address | Advantages | Deficiencies |
|---|---|---|---|---|
| Cloudflare | 1.1.1.1, 1.0.0.1 | 2606:4700:4700::1111 | Lowest latency, privacy (no logging IP) | Sometimes it blocks legal torrents. |
| Google Public DNS | 8.8.8.8, 8.8.4.4 | 2001:4860:4860::8888 | High reliability, DoH support | Collects data for analytics |
| AdGuard DNS | 94.140.14.14, 94.140.15.15 | 2a10:50c0::ad1:ff | Block ads and trackers at the DNS level | It can disrupt some websites. |
| Yandex DNS | 77.88.8.8, 77.88.8.1 | 2a02:6b8::feed:0ff | Optimized for Runet, Family Filter | Subject to the laws of the Russian Federation (censorship) |
πΉ For maximum speed: use 1.1.1.1 (Cloudflare) + 8.8.4.4 (Google) as backup.
πΉ To block ads: 94.140.14.14 (AdGuard) + 76.76.19.19 (ControlD).
πΉ To bypass the locks: combine DNS doh (DNS over HTTPS) β We'll tell you about that below.
Step-by-step: how to change the DNS on the Xiaomi router
The configuration process depends on the firmware of your router, and letβs consider two scenarios: official MiWiFi and custom firmware (Padavan/OpenWRT).
Method 1: Official MiWiFi firmware (for most users)
1. Connect to your router via Wi-Fi or cable. Open your browser and type in 192.168.31.1 (or miwifi.com). Sign in with your Xiaomi account.
2. Go to the section Additional settings β Network β LAN settings.
3. In the field "Primary DNS" enter the first address (for example, 1.1.1.1), in the field "Alternative DNS" - the second (for example, 8.8.8.8).
4. Press Save and restart the router through System Tools β Reboot.
Ping to the new DNS is lossless (in command line: ping 1.1.1.1)
Websites open faster (check on DNSPerf)
The setting is saved after the router restarts
Devices on the network use new DNS (check out the DNS Leak Test)
-->
Method 2: Castom firmware (Padavan/OpenWRT)
Alternative firmware is more complex, but more flexible.
- Go to the web interface (usually 192.168.1.1).
- Go to the LAN β DHCP Server.
- In the βDNS Serverβ field, specify the desired addresses by comma: 1.1.1.1,8.8.8.8.
- Enable the "Use user-specified DNS" option and save the settings.
π§ OpenWRT will require file editing /etc/config/dhcp through SSH. Add a line:
list dhcp_option '6,1.1.1.1,8.8.8.8'π‘
If some sites have stopped opening after the DNS change, try using DNS-over-HTTPS (DoH) through services like NextDNS or Control D. This bypasses ISP-level blocking.
Advanced schemes: DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT) on Xiaomi
The usual DNS replacement does not protect your requests from being eavesdropped by the provider.
- π DNS-over-HTTPS (DoH): Encrypts requests via HTTPS. Supported by Mi Router AX6000 newer.
- π‘οΈ DNS-over-TLS (DoT): uses a separate encrypted channel (port 853.
πΉ How to set up DoH on Xiaomi AX6000:
- Go to the Additional settings β Network β DNS.
- Enable the option "Use DNS-over-HTTPS".
- Select a provider (Cloudflare, Google) or enter your URL (e.g. https://dns.google/dns-query).
β οΈ Note: Routers with firmware older than MiWiFi R3G (2021) DoH may not work. In this case, use DoT through the terminal:
uci set dhcp.@dnsmasq[0].server='tls://1.1.1.1'
uci commit
/etc/init.d/dnsmasq restartTypical problems and their solutions
Even after you set up your DNS properly, you can have a failure, and here are the most common cases and ways to fix them:
β οΈ Attention: If after the shift DNS You can't open any of the websites of banks or government services, return the standard settings of the provider. DNS (8.8.8.8 may not work with Sberbank Online).
| Problem. | Reason. | Decision |
|---|---|---|
| DNS is not applicable to connected devices | Devices ignore router DNS and use their own (Android/iOS) | Turn off βPrivate DNSβ on Android or βLimit IP Trackingβ on iPhone |
| DNS settings reset after rebooting | MiWiFi firmware bug (especially on Mi Router 3/3G) | Update your firmware or install Padavan |
| Slow Internet operation after the DNS change | Selected DNS-servers are geographically | Check the delay via nslookup or DNS Benchmark |
π§ If nothing helps:
- Reset the router to factory settings (reset button for 10 seconds).
- Check if your provider is blocking the change in DNS (relevant for Rostelecom and Beeline).
- Install an alternative firmware (e.g., Padavan for Mi Router 4A).
How to check which DNS your device is using?
How to link different DNSs to different devices on the network
Letβs say you want kids to use a family-filtered DNS (like Yandex DNS Safe) and your work laptop to use it without restrictions. On Xiaomi routers, you can do this in two ways:
Method 1: Through the binding MAC-address (only) Padavan/OpenWRT)
1. Find it. MAC-device addresses in the section DHCP β Clients.
2.In /etc/dnsmasq.conf add the rules:
dhcp-host=AA:BB:CC:11:22:33,set:kids
dhcp-option=tag:kids,6,77.88.8.2 # Yandex Safe DNS
dhcp-option=tag:!kids,6,1.1.1.1 #CloudflareMethod 2: VLAN (for advanced users)
Create a separate network (VLAN) for devices with special DNS rules.
- π§ Router with support VLAN (for example, Xiaomi AX9000).
- π‘ Settings on the switch (if used).
- π₯οΈ Separate. DHCP-server-by-server VLAN.
β οΈ Attention: Incorrect setting VLAN This may result in loss of access to the router.Before experimenting, back up the configuration through System Tools. β Backup.
Security: How to Protect DNS Settings from Changes
If other people have access to your router (such as in an office or dorm), they can reset their DNS to standard.
- π Change the password of the admin panel to a complex one (at least 12 characters, with numbers and special characters).
- π‘οΈ Disable Remote Access to System Tools β Remote control.
- π Create a guest network with separate settings DNS (wifi β Guest network).
- π Export the configuration after setting up and store it in a safe place.
π§ For maximum protection on firmware Padavan can disable the web interface and manage the router only through SSH:
uci set uhttpd.main.enable='0'
uci commit
/etc/init.d/uhttpd stopπ‘
Using public DNSs (like Cloudflare or Google) doesnβt make you completely anonymous. For real privacy, combine DNS with VPN or Tor.