Service Addresses & Features
Quad9 has several different service offerings for recursive DNS features. Each is represented by a different IP address (or, in some cases, hostname), which you use to configure your systems. See our Set Up Guides for how to configure the most commonly used devices.
- Recommended Settings
- Secured w/ECS
- Unsecured
- Android Configuration Options
- DNSCrypt Configuration Options
Recursive DNS Server Addresses and Features - Service based configuration:
Recommended: Malware Blocking, DNSSEC Validation (this is the most typical configuration)
IPv4
9.9.9.9 149.112.112.112
IPv6
2620:fe::fe 2620:fe::9
HTTPS
https://dns.quad9.net/dns-query
TLS
tls://dns.quad9.net
Secured w/ECS: Malware blocking, DNSSEC Validation, ECS enabled
IPv4
9.9.9.11 149.112.112.11
IPv6
2620:fe::11 2620:fe::fe:11
HTTPS
https://dns11.quad9.net/dns-query
TLS
tls://dns11.quad9.net
Unsecured: No Malware blocking, no DNSSEC validation (for experts only!)
IPv4
9.9.9.10 149.112.112.10
IPv6
2620:fe::10 2620:fe::fe:10
HTTPS
https://dns10.quad9.net/dns-query
TLS
tls://dns10.quad9.net
Hints: If you have devices that need to be configured by IP address, make sure to put ALL the IP addresses listed for your selected service into any configuration areas. Putting in just one of the three will leave you vulnerable to single-path failures if they should occur. Even if you do not yet have IPv6, please add those addresses from the list so you don’t have to remember later – most systems will ignore IPv6 addresses if they cannot be used.
Android Configuration Options
Quad9 provides an app for Android users, which greatly simplifies configuration of Quad9 DNS for those devices. The app includes other features such as a full log of DNS queries, notification on block events, and encryption (using DNS-over-TLS) of all queries to the Quad9 systems.
Find the “Quad9 Connect” app on the F-Droid Store:
It is also possible to use Quad9 services using the Private DNS feature of Android, click here to find out how to do it.