Skip to main content
← back to home FR

DNS over TLS

Encrypted DNS on TCP port 853

Endpoint

Clients that accept an address and a separate TLS name must use ledns.eu for certificate authentication.

Android

Use Android Private DNS and enter ledns.eu. See the Android guide.

systemd-resolved

Add the server addresses with the TLS authentication name:

[Resolve]
DNS=51.75.96.82#ledns.eu 51.89.95.33#ledns.eu 151.115.80.165#ledns.eu
DNSOverTLS=yes

Restart systemd-resolved using the service manager for your distribution. Do not omit #ledns.eu; without it, the example does not express the intended server identity.

Firewalls

Networks can identify and block TCP port 853. Use DoH on restrictive networks. DoH uses HTTPS, but known resolver endpoints can still be blocked.