Correct. We have agents for desktops (Windows, MacOS, Linux) as well as Mobile (Android, iOS) We basically run a service that listens for dns requests on port 53 loop back IP, and then we change system DNS to point to that loopback IP.

Now we can do a bunch of things with the traffic between your machine and us: like inject edns0 data to authenticate requests, shift traffic between our anycast networks, and encrypt you’re traffic using DNS over TLS!