Linux DNS Setup

Use the resolver manager your distribution already owns

systemd-resolved with DoT

Create or edit a local resolved configuration:

[Resolve]
DNS=51.75.96.82#ledns.eu 51.89.95.33#ledns.eu 151.115.80.165#ledns.eu
DNSOverTLS=yes

Restart systemd-resolved using the service manager for your distribution, then inspect resolvectl status.

The #ledns.eu suffix supplies the TLS server name. The earlier guide omitted it while claiming hostname validation.

NetworkManager and other managers

Use the distribution’s supported NetworkManager, netplan, systemd-networkd or resolvconf configuration. Do not make /etc/resolv.conf immutable with chattr +i; that breaks DHCP, VPN and network-manager updates.

For classic unencrypted DNS, use:

• 51.75.96.82
• 51.89.95.33
• 151.115.80.165

For encrypted DNS, use DoT, DoH or DoQ through a client your distribution actually packages.

Verify

resolvectl status
resolvectl query example.com

Confirm the active link uses the intended server. A successful dig alone proves resolution, not encryption.