How to use Adguard DNS Over TLS with stubby?

[nivliw97]

Hi, i just installed stubby and i'm trying to add the dns over tls by adguard, which is basically an address that looks like

tls://dhsaoiudhas.d.adguard-dns.com

Where and how should i implement it? I've tried to read the guide however i didn't understand it.

Thanks to whoever will help me

[saradickinson]

What platform are you on and how did you install stubby?

To adjust the upstreams used by Stubby you need to edit the stubby.yml configuration file. On linux the default location is /etc/stubby/stubby.yml - the stubby log will show you the path of the actual file used. A sample version of this file is found at: https://github.com/getdnsapi/stubby/blob/develop/stubby.yml.example

In that file there is a section marked

upstream_recursive_servers:

with the default server configured (getdnsapi.net). You can replace this with the Adguard server config and then restart stubby. (Note that further down the file there is a section with the config for public Adguard servers but that is now out of date and you need to get the new details from the Adguard website (https://adguard-dns.io/en/public-dns.html) if you want to use those depending on what filtering option you want and if you have IPv6)

However for your specific server, you need a config like the following (the IP addresses are retrieved using dig) if you have both IPv4 and IPv6:

# Adguard server IPv4
  - address_data: 94.140.14.49
    tls_auth_name: "dhsaoiudhas.d.adguard-dns.com"
# Adguard server IPv6
  - address_data: 2a10:50c0::ded:ff
    tls_auth_name: "dhsaoiudhas.d.adguard-dns.com"

[andy-bower]

Do the AdGuard examples therefore need updating in the supplied stubby.yml.example file, please? The outdated contents are mentioned in the Ubuntu bug LP #1989104.

[saradickinson]

Just committed 7f07bde which updates the file in the develop branch of the repo.