Configuring Stubby with CleanBrowsing
How to leverage the open source Stubby DNS resolver with CleanBrowsing.
What is Stubby
'Stubby' is an application (daemon) that runs on your network and allows you to proxy local DNS requests to external DNS resolvers leveraging DNS over TLS. Stubby encrypts DNS queries sent from a client machine (desktop or laptop) to a DNS Privacy resolver increasing end user privacy.
More details is available on their website.
If you are using Stubby, we assume that you are pretty technical and know what you are doing. The default configuration is located at /etc/stubby/stubby.yml and that's the only file you need to change to make it work with CleanBrowsing.
After you open that file, you need to edit it at the bottom, within the upstream_recursive_servers section. You need to remove the entries that are configured there and use the ones for CleanBrowsing. If you are on our paid plans, you can find the DNS over TLS Auth name on this page. For example, for my account I use:
upstream_recursive_servers: - address_data: 22.214.171.124 tls_auth_name: "custom-dns154.cleanbrowsing.org"
After you make the change, you have to reload Stubby with this command: systemctl restart stubby. And that should just work.
If you are using one of our Free Filters, try one these configs:
Free Security Filter:
upstream_recursive_servers: - address_data: 126.96.36.199 tls_auth_name: "security-filter-dns.cleanbrowsing.org"
Free Adult Filter:
upstream_recursive_servers: - address_data: 188.8.131.52 tls_auth_name: "adult-filter-dns.cleanbrowsing.org"
Free Family Filter:
upstream_recursive_servers: - address_data: 184.108.40.206 tls_auth_name: "family-filter-dns.cleanbrowsing.org"
And that's it. Reach out to us at email@example.com if you have any questions.