DNS Setup on Linux
Classic configuration or fully encrypted via DoT.
This guide covers two paths: a quick setup via resolvconf and the encrypted variant via Stubby with DNS-over-TLS.
DNS Server Credentials
This service has no IPv4 addresses yet. Use IPv6 or DNS-over-TLS.
DNS-over-TLS is being prepared on the anycast fleet and will appear here automatically once the service is live.
Classic DNS via resolvconf
Suitable for servers and desktops where /etc/resolv.conf is managed dynamically.
1sudo apt install resolvconf -y1sudo nano /etc/resolvconf/resolv.conf.d/head1nameserver 2a0c:9a40:2511:101::194b
2nameserver 2a0c:b640:10::3:248
3nameserver 2a0c:9a40:2c2c:111::198fNo IPv6 on your line? Add the three nodes' IPv4 addresses (plain DNS, always unfiltered) — or DNS-over-HTTPS, which also works over IPv4:
1nameserver 185.44.82.158
2nameserver 194.28.99.248
3nameserver 185.121.169.471sudo resolvconf --enable-updates
2sudo resolvconf -uDNS-over-TLS with Stubby
Stubby acts as a local stub resolver and tunnels all queries over TLS.
1sudo apt install stubby1sudo nano /etc/stubby/stubby.ymlIn the upstream_recursive_servers section add the Dremaxx resolvers:
1upstream_recursive_servers:
2 - address_data: 2a0c:9a40:2511:101::194b
3 tls_auth_name: "mark.dremaxx.com"
4 - address_data: 2a0c:b640:10::3:248
5 tls_auth_name: "mark.dremaxx.com"
6 - address_data: 2a0c:9a40:2c2c:111::198f
7 tls_auth_name: "mark.dremaxx.com"
8 - address_data: 185.44.82.158
9 tls_auth_name: "mark.dremaxx.com"
10 - address_data: 194.28.99.248
11 tls_auth_name: "mark.dremaxx.com"
12 - address_data: 185.121.169.47
13 tls_auth_name: "mark.dremaxx.com"1sudo systemctl restart stubbySet the local resolver in /etc/resolv.conf or in the NetworkManager:
1nameserver 127.0.0.1