Skip to main content

Linux

To connect a Linux device to AdGuard DNS, first add it to Dashboard:

  1. Go to Dashboard and click Connect new device.
  2. In the drop-down menu Device type, select Linux.
  3. Name the device. Connecting device *mobile_border

Use AdGuard DNS Client​

AdGuard DNS Client is a cross-platform console utility that allows you to use encrypted DNS protocols to access AdGuard DNS.

You can learn more about this in the related article.

Use AdGuard VPN CLI​

You can set up Private AdGuard DNS using the AdGuard VPN CLI (command-line interface). To get started with AdGuard VPN CLI, you’ll need to use Terminal.

  1. Install AdGuard VPN CLI by following these instructions.
  2. Go to Settings.
  3. To set a specific DNS server, use the command: adguardvpn-cli config set-dns <server_address>, where <server_address> is your private server’s address.
  4. Activate the DNS settings by entering adguardvpn-cli config set-system-dns on.

Configure manually on Ubuntu (linked IP or dedicated IP required)​

  1. Click System → Preferences → Network Connections.
  2. Select the Wireless tab, then choose the network you’re connected to.
  3. Click Edit → IPv4.
  4. Change the listed DNS addresses to the following addresses:
    • 94.140.14.49
    • 94.140.14.59
  5. Turn off Auto mode.
  6. Click Apply.
  7. Go to IPv6.
  8. Change the listed DNS addresses to the following addresses:
    • 2a10:50c0:0:0:0:0:ded:ff
    • 2a10:50c0:0:0:0:0:dad:ff
  9. Turn off Auto mode.
  10. Click Apply.
  11. Link your IP address (or your dedicated IP if you have a Team subscription):

Configure manually on Debian (linked IP or dedicated IP required)​

  1. Open the Terminal.
  2. In the command line, type: su.
  3. Enter your admin password.
  4. In the command line, type: nano /etc/resolv.conf.
  5. Change the listed DNS addresses to the following:
    • IPv4: 94.140.14.49 and 94.140.14.59
    • IPv6: 2a10:50c0:0:0:0:0:ded:ff and 2a10:50c0:0:0:0:0:dad:ff
  6. Press Ctrl + O to save the document.
  7. Press Enter.
  8. Press Ctrl + X to save the document.
  9. In the command line, type: /etc/init.d/networking restart.
  10. Press Enter.
  11. Close the Terminal.
  12. Link your IP address (or your dedicated IP if you have a Team subscription):

Use dnsmasq​

  1. Install dnsmasq using the following commands:

    sudo apt updatesudo

    apt install

    dnsmasqsudo nano /etc/dnsmasq.conf

  2. Use the following commands in dnsmasq.conf:

    no-resolv

    bogus-priv

    strict-order

    server=94.140.14.49

    server=94.140.14.59

    port=5353

    add-cpe-id={Your_Device_ID}

  3. Restart the dnsmasq service:

    sudo service dnsmasq restart

All done! Your device is successfully connected to AdGuard DNS.

Important

If you see a notification that you are not connected to AdGuard DNS, most likely the port on which dnsmasq is running is occupied by other services. Use these instructions to solve the problem.

Use EDNS (Extended DNS)​

EDNS extends the DNS protocol, enabling larger UDP packets to carry additional data. In AdGuard DNS, it allows passing DeviceID in plain DNS using an extra parameter.

DeviceID, an eight-digit hexadecimal identifier (e.g., 1a2b3c4d), helps link DNS requests to specific devices. For encrypted DNS, this ID is part of the domain (e.g., 1a2b3c4d.d.adguard-dns.com). For unencrypted DNS, EDNS is required to transfer this identifier.

AdGuard DNS uses EDNS to retrieve DeviceID by looking for option number 65074. If such an option exists, it will read DeviceID from there. For this, you can use the dig command in the terminal:

dig @94.140.14.49 'www.example.com' A IN +ednsopt=65074:3031323334353637

Here, 65074 is the option ID, and 3031323334353637 is its value in hex format (DeviceID: 01234567).

All done! DeviceID should be displayed.

note

The dig command is merely an example, you can use any DNS software with an ability to add EDNS options to perform this action.

Use plain DNS​

If you prefer not to use extra software for DNS configuration, you can opt for unencrypted DNS. You have two choices: using linked IPs or dedicated IPs: