Secure and fast DoH Servers for Intra App to protect your privacy online

1. Go to Settings → Network & internet → Advanced → Private DNS.
2. Select the Private DNS provider hostname option.
3. Enter puredns.org and click Save.

1. Install Intra app from the Play Store.
2. Go to Settings → DNS over HTTPS Server → Custom server URL.
3. Enter https://puredns.org/dns-query and click Accept.

1. Download our Apple Configuration Profile to enable Encrypted DNS feature.
2. You can download configuration for DoH and/or DoT.
3. Go to Settings → General → VPN & Device Mangement
4. Tap the Downloaded Profile.
5. Tap Install in the upper-right corner, then follow the onscreen instructions.

1. Install Knot Resolver.
2. Use the following in /etc/knot-resolver/kresd.conf:

policy.add(policy.all(policy.TLS_FORWARD({
  {'3.0.86.126', hostname='puredns.org'},
  {'3.1.94.218', hostname='puredns.org'},
  {'2406:da18:ce3:9803:7106:3bbb:f9df:c955', hostname='puredns.org'},
  {'2406:da18:ce3:9801:6aa2:5634:9873:71fe', hostname='puredns.org'}
})))

1. Install Stubby.
2. Use the following in stubby.yml:

round_robin_upstreams: 1
  upstream_recursive_servers:
  - address_data: 3.0.86.126
  tls_auth_name: "puredns.org"
  - address_data: 3.1.94.218
  tls_auth_name: "puredns.org"
  - address_data: 2406:da18:ce3:9803:7106:3bbb:f9df:c955
  tls_auth_name: "puredns.org"
  - address_data: 2406:da18:ce3:9801:6aa2:5634:9873:71fe
  tls_auth_name: "puredns.org"

1. Install Unbound.
2. Use the following in unbound.conf:

forward-zone:
  name: "."
  forward-tls-upstream: yes
  forward-addr: 3.0.86.126#puredns.org
  forward-addr: 3.1.94.218#puredns.org
  forward-addr: 2406:da18:ce3:9803:7106:3bbb:f9df:c955#puredns.org
  forward-addr: 2406:da18:ce3:9801:6aa2:5634:9873:71fe#puredns.org

1. Install DNSCrypt.
2. Use the following in dnscrypt-proxy.toml:

server_names = ['PureDNS']

[static]
  [static.'PureDNS']
  stamp = 'sdns://AgcAAAAAAAAAAAALcHVyZWRucy5vcmcKL2Rucy1xdWVyeQ'

1. Install cloudflared.
2. Use the following in /usr/local/etc/cloudflared/config.yml:

proxy-dns: true
proxy-dns-upstream:
  - https://puredns.org/dns-query

1. Open the Settings app.
2. Go to Network & internet.
3. Click on Wi-Fi (or Ethernet).
4. Click on Hardware properties, or ignore this step if you clicked on Ethernet.
5. Click the Edit button next to DNS server assignment.
6. Select Manual.
7. Enable IPv4.
8. Enter 3.0.86.126 as Preferred DNS, then select On (manual template) and enter https://puredns.org/dns-query
9. Enter 3.1.94.218 as Alternate DNS, then select On (manual template) and enter https://puredns.org/dns-query
10. Click Save.

1. Install YogaDNS.
2. Go to Configuration → DNS Servers → Add.
3. Enter PureDNS in the User friendly name.
4. For Protocol you can select DNS over HTTPS.
5. Specify the URL with https://puredns.org/dns-query.
6. Click Check to quickly test the server and click OK.

See more details on how to configure YogaDNS.

1. Download our Apple Configuration Profile to enable Encrypted DNS feature.
2. You can download configuration for DoH and/or DoT.
3. Open the downloaded .mobileconfig file.
4. Open System Preferences.
5. Go to Profiles.
6. Click Install.

1. Go to Settings.
2. In the Privacy and security section, click on Security.
3. In the Advanced section, enable Use secure DNS.
4. Select With: Custom, then enter https://puredns.org/dns-query.

1. Open Preferences.
2. Scroll down to the Network Settings section and click on Settings.
3. Scroll down and check Enable DNS over HTTPS.
4. Select Custom, enter https://puredns.org/dns-query and click OK.

1. Open Settings.
2. Go to the Privacy, search, and services section.
3. Under Security, enable Use secure DNS to specify how to lookup the network address for websites.
4. Select Choose a service provider, then enter https://puredns.org/dns-query.

1. Open Settings.
2. In the Privacy and security section (under Additional settings), go to Security.
3. In the Advanced section, enable Use secure DNS.
4. Select With: Custom, then enter https://puredns.org/dns-query.

1. Sign in to your router's web-based administration, usually at the following address: http://192.168.1.1.
2. Find the DNS settings inside the interface.

3. Change addresses (if any), with IPv4:

   3.0.86.126
   3.1.94.218

   or with IPv6 use addresses below:

   2406:da18:ce3:9803:7106:3bbb:f9df:c955
   2406:da18:ce3:9801:6aa2:5634:9873:71fe

4. Click Save (or similar).

1. Navigate to Services → DNS Resolver and on the tab General Settings scroll down to the Custom Options box.
2. Enter the following lines:

forward-zone:
  name: "."
  forward-tls-upstream: yes
  forward-addr: 3.0.86.126#puredns.org
  forward-addr: 3.1.94.218#puredns.org
  forward-addr: 2406:da18:ce3:9803:7106:3bbb:f9df:c955#puredns.org
  forward-addr: 2406:da18:ce3:9801:6aa2:5634:9873:71fe#puredns.org

Run the following:

/tool fetch url=https://curl.se/ca/cacert.pem
/certificate import file-name=cacert.pem
/ip dns set servers=
/ip dns static add name=puredns.org address=3.0.86.126 type=A
/ip dns static add name=puredns.org address=3.1.94.218 type=A
/ip dns static add name=puredns.org address=2406:da18:ce3:9803:7106:3bbb:f9df:c955 type=AAAA
/ip dns static add name=puredns.org address=2406:da18:ce3:9801:6aa2:5634:9873:71fe type=AAAA
/ip dns set use-doh-server="https://puredns.org/dns-query" verify-doh-cert=yes

Tor usually runs on port 9050 by default. To use our hidden resolver, we recommend using the socat command.

PORT=853; socat TCP4-LISTEN:${PORT},reuseaddr,fork SOCKS4A:127.0.0.1:purednsxr4shjkobosrqf7qebwzch3e4ignfr4beq34ngr4nkp2z32id.onion:${PORT},socksport=9050

Now you can try to test it by sending a query using the kdig command.

kdig -d +tls +tls-hostname=puredns.org @127.0.0.1 -p 853 puredns.org