DNS over TLS - Ubuntu 18.04 / 20.04 (Stubby)

Overview

Stubby is an open-source application that acts as a local DNS Privacy stub resolver using DNS over TLS (DoT). Stubby encrypts DNS queries sent from a client device (desktop or laptop) to a DNS Privacy resolver increasing end user privacy.

Instructions

0. Open the Terminal application, copy/pasting the following commands and hitting "enter", one at a time. You may be prompted one or more times for your password.

1. Ensure the "Universe" repository is enabled and ensure the repositories are up to date:

sudo add-apt-repository universe && sudo apt update

2. Install Stubby

sudo apt install stubby

3.  Back up and replace the default stubby.yml file with the stubby.yml file attached to this support article.

sudo mv /etc/stubby/stubby.yml /etc/stubby/stubby.backup.yml && sudo wget -O /etc/stubby/stubby.yml https://support.quad9.net/hc/en-us/article_attachments/4411087149453/stubby.yml

4. Restart Stubby to recognize the new configuration.

sudo service stubby restart

5. Set your network connection's IPv4 DNS server to 127.0.0.1 - If using IPv6, also set your connection's IPv6 DNS server to ::1
Follow the instructions here, substituting 9.9.9.9 for 127.0.0.1

6. Confirm that DNS resolution is working in general by visiting a website, and confirm you're using Quad9 by going to https://on.quad9.net where you'll get a "YES" or "NO" answer.

.10 and .11 addresses

The default 9.9.9.9 service is configured in the provided stubby.yml file. If you want to use our .10 or .11 services, open the /etc/stubby/stubby.yml with your favorite text editor, commenting out the .9 entries and uncommenting the .10 or .11 entries as desired.

Questions, concerns, issues?

Contact our support team.