DNSTube Privacy & Security Features Explained

Setting Up DNSTube: Step-by-Step for Home and Small Business

Assumptions

• You have a DNSTube account or service endpoint and credentials (if required).
• You have access to your home or small-business router and at least one client device (PC or phone) for testing.
• Basic networking familiarity (login to router, change DNS settings).

1. Prepare

1. Gather info: DNSTube DNS server IPs or hostname, any account tokens, and recommended ports (usually 53 for DNS, or 853 for DoT, 443 for DoH).
2. Backup current settings: Note your current DNS server addresses and router configuration.

2. Choose deployment method

• Router-level (preferred): Changes apply to all devices on the network.
• Per-device: Useful if you can’t access router or want to test first.
• Local resolver (advanced): Run a small DNS proxy or caching resolver on a local machine (Raspberry Pi/VM) that forwards to DNSTube.

3. Configure router (router admin UI)

1. Log in to router admin panel (commonly 192.168.0.1 or 192.168.1.1).
2. Find DNS settings (WAN or DHCP/DNS section).
3. Replace existing DNS servers with DNSTube primary and secondary IPs (or the DNSTube DoH/DoT endpoint if router supports).
4. Save and reboot router if necessary.
5. Confirm DHCP clients receive new DNS via ipconfig/ifconfig or device network settings.

4. Configure per-device (Windows, macOS, iOS, Android)

• Windows: Settings → Network & internet → Change adapter options → Right-click adapter → Properties → IPv4 → Use the following DNS server addresses → Enter DNSTube IPs → OK.
• macOS: System Settings → Network → Advanced → DNS → + to add DNSTube IPs → Apply.
• iOS: Settings → Wi‑Fi → Tap network → Configure DNS → Manual → Add Server → Enter DNSTube IPs → Save.
• Android: Settings → Network & internet → Wi‑Fi → Tap network → Advanced → IP settings → Static or Private DNS → Enter DNSTube hostname (for DoT/DoH) → Save.

5. Optional: Enable encrypted DNS (DoT/DoH)

• If DNSTube provides DoT (TLS) or DoH (HTTPS) endpoints, prefer those for privacy and integrity.
• On routers: enable DoT/DoH client if supported and enter DNSTube endpoint.
• On devices: use system Private DNS (Android) or DNS-over-HTTPS apps/clients (Windows with system DoH support, macOS via resolver apps).

6. Test and verify

1. Clear DNS cache:
   • Windows: ipconfig /flushdns
   • macOS: sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder
2. Run DNS lookup:
   • nslookup example.com or dig example.com — confirm the server is DNSTube IP/hostname.
3. Test resolution speed and correctness; visit websites and streaming services.
4. Use online DNS leak tests to ensure queries go to DNSTube and (if using DoT/DoH) are encrypted.

7. Troubleshoot common issues

• No internet after change: revert to previous DNS, confirm DNSTube IPs are correct.
• Some sites blocked or fail to resolve: check DNSTube filtering settings (if any) or add exceptions.
• Mixed results across devices: ensure DHCP lease renewed or reboot devices.

8. Maintain

• Keep DNSTube credentials updated if rotated.
• Monitor performance for a week; compare latency with previous DNS using tools like namebench or simple dig timings.
• Update router firmware to keep DoT/DoH compatibility and security.

Quick checklist

• Gather DNSTube server/endpoint and credentials
• Backup current DNS settings
• Apply at router (preferred) or per-device
• Enable DoT/DoH if available
• Flush caches and verify with nslookup/dig
• Monitor and troubleshoot

If you want, I can produce router-specific step instructions (e.g., for TP-Link, Asus, Netgear) or a one-page printable checklist.