Stubby is an open-source application that acts as a local DNS Privacy stub resolver using DNS over TLS (DoT). Stubby encrypts DNS queries sent from a client device (desktop or laptop) to a DNS Privacy resolver increasing end user privacy.
0. Open the Terminal application, copy/pasting the following commands and hitting "enter", one at a time. You may be prompted one or more times for your password.
1. Ensure the "Universe" repository is enabled and ensure the repositories are up to date:
sudo add-apt-repository universe && sudo apt update
2. Install Stubby
sudo apt install stubby
3. Back up and replace the default stubby.yml file with the stubby.yml file attached to this support article.
sudo mv /etc/stubby/stubby.yml /etc/stubby/stubby.backup.yml && sudo wget -O /etc/stubby/stubby.yml https://support.quad9.net/hc/en-us/article_attachments/4411087149453/stubby.yml
4. Restart Stubby to recognize the new configuration.
sudo service stubby restart
5. Set your network connection's IPv4 DNS server to 127.0.0.1 - If using IPv6, also set your connection's IPv6 DNS server to ::1
Follow the instructions here, substituting 22.214.171.124 for 127.0.0.1
6. Confirm that DNS resolution is working in general by visiting a website, and confirm you're using Quad9 by going to https://on.quad9.net where you'll get a "YES" or "NO" answer.
.10 and .11 addresses
The default 126.96.36.199 service is configured in the provided stubby.yml file. If you want to use our .10 or .11 services, open the /etc/stubby/stubby.yml with your favorite text editor, commenting out the .9 entries and uncommenting the .10 or .11 entries as desired.
Questions, concerns, issues?
Contact our support team.