Stubby is an open-source application that acts as a local DNS Privacy stub resolver using DNS over TLS (DoT). Stubby encrypts DNS queries sent from a client device (desktop or laptop) to a DNS Privacy resolver increasing end user privacy.
0. Open the Terminal application, copy/pasting the following commands and hitting "enter", one at a time. You may be prompted one or more times for your password.
1. Ensure the "Universe" repository is enabled and ensure the repositories are up to date:
sudo add-apt-repository universe && sudo apt update
2. Install Stubby
sudo apt install stubby
3. Back up and replace the default stubby.yml file with the stubby.yml file attached to this support article.
sudo mv /etc/stubby/stubby.yml /etc/stubby/stubby.backup.yml && sudo wget -O /etc/stubby/stubby.yml https://support.quad9.net/hc/en-us/article_attachments/4409221931021/stubby.yml
4. Restart Stubby to recognize the new configuration.
service stubby restart
5. Set your network connection's IPv4 DNS server to 127.0.0.1 - If using IPv6, set your connection's IPv6 DNS server to ::1
Follow the instructions here, substituting 184.108.40.206 for 127.0.0.1
6. Confirm that DNS resolution is working in general by visiting a website, and confirm you're using Quad9.
.10 and .11 addresses
The default 220.127.116.11 service is configured in the provided stubby.yml file. If you want to use our .10 or .11 services, open the /etc/stubby/stubby.yml with your favorite text editor, commenting out the .9 entries and uncommenting the .10 or .11 entries as desired.
Questions, concerns, issues?
Contact our support team.