Information, configuration files and how tos about the public secure DNS resolvers operated by the Digital Society Switzerland.
The Digital Society Switzerland runs publicly available DNS-over-HTTPS (DoH), DNS-over-HTTP/3 (DoH3), DNS-over-TLS (DoT) and DNS-over-QUIC (DoQ) DNS resolver systems.
This repository contains:
- Configuration files of our production systems. Anyone interested in our setup can review our production configuration or run its own setup based on our configuration files. You may also check out our system architecture.
- How tos to configure encrypted DNS on various devices. This allows people to use our secure DNS resolvers.
Also, checkout our website and the FAQ.
Note
We deliberately do not operate unencrypted DNS service over Port 53.
To use our DNS resolvers on your DoH, DoH3, DoT or DoQ capable client simply configure:
| Protocol | Address | Port |
|---|---|---|
| DNS-over-HTTPS (DoH) | https://dns.digitale-gesellschaft.ch/dns-query |
tcp/443 |
| DNS-over-HTTP/3 (DoH3) | https://dns.digitale-gesellschaft.ch/dns-query |
udp/443 |
| DNS-over-TLS (DoT) | dns.digitale-gesellschaft.ch |
tcp/853 |
| DNS-over-QUIC (DoQ) | dns.digitale-gesellschaft.ch |
udp/853 |
For specific configuration check out our How-Tos.
Some clients let you specify the resolver's IP address directly, so they don't need another DNS resolver to look up our hostname.
| Protocol | Addresses |
|---|---|
| IPv4 | 185.95.218.42, 185.95.218.43 |
| IPv6 | 2a05:fc84::42, 2a05:fc84::43 |
You still need to configure dns.digitale-gesellschaft.ch as the hostname, otherwise certificate validation fails.
Our DNS resolvers use version 6.0 of the Intermediate recommended configuration published by tlsref.org. Ancient clients or resource restricted IoT systems may fail to connect to the server and report an SSL error. Please open an issue if that happens.
Contributions to this project are very welcome. If you like to contribute, check-out CONTRIBUTION for more information.
Some ideas where help is appreciated:
- Configuration how tos: Update existing guides, translate them in other languages and add new how tos.
- Ansible config review: If you know Ansible well you may review our configuration and suggest improvements.
- DNS config: If you know
You may also try the DNS resolvers of similar organisations and setups:
- Applied Privacy operates public DNS resolvers in Austria.
- Quad9 operates public DNS resolvers around the world.
This project is licensed under Creative Commons BY-SA