If your Viscosity setup has the IPv6 endpoints as in the screenshot, Viscosity should work on its own with NextDNS ( option 2), I would make sure this is the case before using both apps. This is the best option overall when using Passepartout. ( Mac only) Another advantage (compared to Viscosity's option 3) is that even when your NextDNS app / profile connection drops, the device identifier will still work, because DoH / DoT is integrated here (whereas Viscosity would fall back to the IPv6 DNS). The advantage to Passepartout's option 3 is that after a VPN disconnect, the NextDNS app / profile will still be the backup.
![viscosity vpn client for ipad viscosity vpn client for ipad](https://www.ovpn.com/images/viscosity/tWvtSLv.png)
In this case (and in contrast to Viscosity's option 3) the VPN DNS settings from Passpartout will override the NextDNS app / profile. Option 4 is a combination of 1 and 3, i.e., using Passepartout with DoH / DoT and the NextDNS app / profile active.Make sure to also enter your NextDNS IPv6 endpoints from your NextDNS setup page and to URL encode your device name in case that is needed (as described at the bottom of your NextDNS setup page). ( Mac & iOS) So, using only Passepartout with DoH / DoT is an easy option. The third option is a bit different to Viscosity's, since Passepartout supports DoH and DoT.The same limitation for device identification applies. In the Passepartout DNS tab, just choose Manual and Cleartext and enter your IPv6 details. As with the second Viscosity option, it's possible to use Passepartout without the NextDNS app or profile active, by setting custom DNS.As with the first Viscosity option, it's possible to use Passepartout together with the NextDNS app or profile without conflict.The Passepartout app is another OpenVPN client that can be used with OpenVPN config files (or some select VPN providers without using config files). This is the best option overall when using Viscosity.
![viscosity vpn client for ipad viscosity vpn client for ipad](https://www.artistapirata.com/wp-content/uploads/backup/2018/02/viscosity-1.7.6-vpn-para-mac-osx-saltarse-limite-mega-en-mac-osx.jpg)
If the Viscosity VPN connection drops, the NextDNS app / profile will be the backup. If the NextDNS / profile connection drops, you still have the custom DNS in Viscosity active, just like in option 2. The NextDNS / profile connection overrides the custom DNS in Viscosity. This is the same setting as in option 2, but adds an active NextDNS app or profile connection. The third option is to use Viscosity's custom DNS settings with the NextDNS app or profile active.Make sure to consider the correct other settings (framed in red in the attached image). DoH and DoT seemingly aren't supported for Viscosity's DNS settings. In the Viscosity networking tab, just enter your IPv6 NextDNS endpoint as shown on your NextDNS setup page. A disadvantage here is that you can't identify your device in the logs, because that's not possible with IPv6. The second option is to use Viscosity's custom DNS settings without the NextDNS app or profile active.So no matter which side drops the connection, there is no sequence to consider, it just works together. If the NextDNS or profile become active again, they will override the pushed VPN DNS. If the NextDNS app or profile become inactive, the pushed VPN DNS will be used in Viscosity. The active NextDNS app or profile will work without switching it off and on again. Here, compared to the provider app option mentioned above, VPN connection drops and reconnects won't result in issues.
![viscosity vpn client for ipad viscosity vpn client for ipad](https://docs.netgate.com/pfsense/en/latest/_images/openvpn-viscosity-details3.png)