Luke Scammell's Personal Blog

I like Quad9’s public DNS 9.9.9.9 for all the safety and privacy features it provides.

I’d also like my browsing to be private on Brave Browser when moving between networks that I don’t control.

This can be implemented at both my own private network level through my UniFi Dream Machine Pro and also at my device level with Brave Browser.

https://quad9.net/service/service-addresses-and-features

Enabled DoH (DNS-over-HTTPS) in Brave Browser

1. ⌘ + , then navigate to “Privacy and security > Security”
   • or brave://settings/security
2. Enable the “Advanced > Use secure DNS” toggle.
3. “Select DNS provider > Add custom DNS service provider”
4. Paste in
   https://dns.quad9.net/dns-query
5. Test here: https://on.quad9.net/

Enabled DoH in UniFi Network

1. Open UniFi Network (in this example version 10.4)
2. Go to Settings cog (towards the bottom of the left nav)
3. CyberSecure
4. Protection
5. Change “Encrypted DNS” to “Predefined”
6. Delete “CloudFlare” and “Google”
7. Use the “Select” link
8. Type “quad9” into the filter field labelled “Search”
9. Scroll all the way to the bottom
10. Check these entires:
    • Quad9-doh-ip4-port443-filter-pri
    • Quad9-doh-ip6-port443-filter-pri
      • Only required if you run a dual stack IPv4 and IPv6 setup, like I do with Starlink.
11. Save
12. Apply Changes