Linux · resolvconf & Stubby

DNS Setup on Linux

Classic configuration or fully encrypted via DoT.

This guide covers two paths: a quick setup via resolvconf and the encrypted variant via Stubby with DNS-over-TLS.

DNS Server Credentials

Every address and URL on this page follows the chosen service.

For your router
IPv6 · primary	2a0c:9a40:e100::53
IPv6 · secondary	2a0c:9a40:e101::53
IPv4 · Zürich	185.44.82.158
IPv4 · Düsseldorf	194.28.99.248
IPv4 · Houston	185.121.169.47
Encrypted, for individual devices
DNS-over-TLS	open.dns.dremaxx.com

01 · Quick Setup

Classic DNS via resolvconf

Suitable for servers and desktops where /etc/resolv.conf is managed dynamically.

Install package

1sudo apt install resolvconf -y

Open configuration file

1sudo nano /etc/resolvconf/resolv.conf.d/head

Add nameservers

1nameserver 2a0c:9a40:e100::53
2nameserver 2a0c:9a40:e101::53

No IPv6 on your line? Add the service's IPv4 addresses as well — or DNS-over-HTTPS, which also works over IPv4:

1nameserver 185.44.82.158
2nameserver 194.28.99.248
3nameserver 185.121.169.47

Enable & reload service

1sudo resolvconf --enable-updates
2sudo resolvconf -u

02 · Encrypted

DNS-over-TLS with Stubby

Stubby acts as a local stub resolver and tunnels all queries over TLS.

Install Stubby

1sudo apt install stubby

Adjust configuration

1sudo nano /etc/stubby/stubby.yml

In the upstream_recursive_servers section add the Dremaxx resolvers:

1upstream_recursive_servers:
2  - address_data: 2a0c:9a40:e100::53
3    tls_auth_name: "open.dns.dremaxx.com"
4  - address_data: 2a0c:9a40:e101::53
5    tls_auth_name: "open.dns.dremaxx.com"
6  - address_data: 185.44.82.158
7    tls_auth_name: "open.dns.dremaxx.com"
8  - address_data: 194.28.99.248
9    tls_auth_name: "open.dns.dremaxx.com"
10  - address_data: 185.121.169.47
11    tls_auth_name: "open.dns.dremaxx.com"

Restart Stubby

1sudo systemctl restart stubby

Switch system DNS to Stubby

Set the local resolver in /etc/resolv.conf or in the NetworkManager:

1nameserver 127.0.0.1