Blog · 2026-10-01
Your first connection: a practical checklist
Set up a new device, import your subscription and check the route your apps actually use.
Read article →Zerkalo-Pro · Updated
Separate a connection address from a name lookup
Opening a website usually requires finding a network address for its domain name. DNS handles that lookup. A public IP describes a connection; a DNS resolver handles name requests. Different organisations in those results do not, on their own, explain the route taken by each request.
Know what the test observes
A DNS test generally creates special names and identifies the resolvers that requested their records. It reports observations about those test queries. It does not reveal every route on the device, test every app or establish that passwords and page contents are protected.
Account for browser settings
A browser may use DNS over HTTPS with a chosen DNS provider instead of system settings. DoH encrypts communication with that resolver; it does not replace a Secure connection for all traffic. Whether that exchange uses the Secure connection depends on routing. An unfamiliar resolver name alone does not prove tunnel bypass.
Keep comparisons consistent
Record the network, browser, client version and connection mode. On a trusted connection, compare the same test before and after enabling the Secure connection, avoiding sensitive activity while it is off. Change one setting at a time. The external test service also receives your test requests.
Investigate a mismatch with the expected setup
If you expected the client’s DNS but see another operator, check the browser’s secure DNS and application rules first. A resolver’s name or country does not establish its route. Do not disable encryption or system protection at random. Save the result and discuss the difference with support.
Keep our website tools in perspective
The website’s IP check sends a request to ipify.org; the local WebRTC check gathers candidates without external STUN. Neither is a DNS test. For support, state expected and actual results and relevant settings, hiding subscription links, QR codes and personal information.
Sources
Compatibility depends on your operating system and client version. System proxy mode may not cover every app; choose a connection mode using the guide.
← Blog