+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ DNS Forwarder Best Practices
+ +Overview
+You're administrating DNS for a building, office, business, ISP, etc, and you want to use Quad 9. Great choice!
+
+
+Note
+For ISPs or organizations with more than 5,000 users behind a forwarding cache, or if you expect more than 500 queries per second from a single egress IP address, please contact Quad9 Support with the details of your deployment, so that we can work together to ensure a smooth and successful deployment.
+Caching forwarders and their optimal configuration are critical when sending queries en masse to Quad9, and is highly preferred over direct assignment via DHCP to end users with regards to:
+Performance
+Reducing the amount of queries that recurse to Quad9, saving bandwidth and providing a faster experience for the end user when their queries are already in the forwarders' cache.
+Security
+Enabling query logging or some type of high-level metrics is advised to identify possible compromise from specific endpoints or customers, and is sometimes required by local law.
+Local Policy
+Being able to block or analyze certain FQDNs at the forwarder level puts more control in the hands of the network administrator without relying exclusively on Quad9 to block malicious domains.
+When setting Quad9 as the recursive resolver in your infrastructure and caching DNS forwarders, please consider the following best practices.
+Exclusivity
+Since DNS forwarders use round-robin ordering when forwarding queries to a list of recursive DNS servers, Quad9 must be set as the exclusive recursive DNS servers in your forwarders. Adding additional, non-Quad9 recursive DNS servers will result in a percentage of your DNS queries not being protected by Quad9's threat blocking.
+Caching
+It is imperative that your DNS forwarders are configured to cache response data in order to avoid excessive recursive queries to Quad9 and to provide significantly faster DNS resolution for devices on the network.
+Ensure that your DNS forwarders have enough memory or disk space allocated to the cache to avoid the cache filling up.
+The amount of memory that should be dedicated to DNS caching varies greatly from megabytes to gigabytes based on the amount of DNS requests originating from your network endpoints.
+
+
+
+
+
+
+
+
+Bind caches in memory by default, so the only limitation is exhausting available memory in the system.
+To check the size of the current cache, you can dump the cache to a local file and then examine the file size, which will be approximately how much memory is being used by cache:
+rndc dumpdb -all
+ls -alh /var/bind/
+
+
+Caching is disabled by default, but can be enabled for in-memory storage.
+
+
+Allocated cache size is determined by the msg-cache-size and rrset-cache-size options in the unbound.conf file.
+You can check the amount of memory that your cache is currently using to compare against the cache size you allocated in unbound.conf by using the unbound-control command to view stats for mem.cache.rrset and mem.cache.message values.
+
+
+Knot Resolver caches on disk by default, but can be configured to use memory/tmpfs, backends, and share cache between instances. Knot Resolver has excellent documentation about all things caching.
+
+
+In-memory caching can be configured using the Set-DnsServerCache cmd applet.
Memory usage can be checked using the Get-DnsServerStatistics cmd applet.
Use the Primary and Secondary Quad9 IP Addresses
+Configuring both the primary and secondary IP of your desired Quad9 service helps naturally load balance the DNS queries in the Quad9 infrastructure.
+Use IPv6
+If your network is capable of IPv6, also configure the primary and secondary IPv6 addresses of your desired Quad9 service in your DNS forwarders, which helps naturally load balance the DNS queries in the Quad9 infrastructure.
+If IPv6 is not in use, Quad9 strongly encourages you to investigate how to get it enabled on your network. IPv6 route paths are often faster compared to IPv4 paths, which leads to a higher chance of success at faster speeds with better redundancy.
+Separate IP Addresses for Each DNS Forwarder
+Each DNS forwarder should, ideally, send and receive DNS queries to Quad9 using different public IPv4 and IPv6 addresses, even if the addresses are within the same subnet.
+Disable DNSSEC Validation
+Since Quad9 already performs DNSSEC validation, DNSSEC being enabled in the forwarder will cause a duplication of the DNSSEC process, significantly reducing performance and potentially causing false BOGUS responses.
+
+
+
+
+
+
+
+Add this in dnsdist.conf above your pool assignment.
+
if noDNSSECOnNOSEC then
+ addAction(NetmaskGroupRule(nmgNOSEC, false), SetDisableValidationAction(), { name="R_NO_DS" })
+end
+
+
+
+Add this to the kresd.conf file and reload/restart the kresd service.
+
-- turns off DNSSEC validation
+trust_anchors.remove('.')
+
+
+
+In recursor.conf, disable dnssec and reload/restart pdns-recursor.
+
dnssec=off
+
+
+
+Comment out these lines in unbound.conf and reload/restart unbound.
+
trust-anchor-file:
+auto-trust-anchor-file:
+trust-anchor:
+trusted-keys-file:
+Disable QNAME Minimization
+QNAME Minimization is a privacy feature that is intended to be used when you operate a recursive resolver (Quad9), but in a DNS forwarder, it provides no privacy enhancement and significantly reduces performance. What is QNAME Minimization?
+
+
+
+
+
+
+
+In the options { section of the named.conf file, add the following line and reload/restart named/bind9.
+
qname-minimization disabled;
+
+
+QNAME Minimization is not supported in dnsdist. Nothing to do here.
+
+
+
+Add this in the unbound.conf and reload/restart unbound.
+
qname-minimisation: no
+
+
+
+In the kresd.conf file, add a policy to disable QNAME Minimization and restart/reload the kresd service.
+
policy.add(policy.all(policy.FLAGS('NO_MINIMIZE')))
+Questions? Issues? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/README.md b/README.md
deleted file mode 100644
index e05a46c..0000000
--- a/README.md
+++ /dev/null
@@ -1,14 +0,0 @@
-# Quad9 Documentation
-Quad9 Public-Facing Documentation available at [docs.quad9.net](https://docs.quad9.net) using [mkdocs-material](https://github.com/squidfunk/mkdocs-material).
-
-# New Article Requests or Corrections
-
-Pull requests are allowed for typos and minor corrections only. New articles will likely not be merged, since they will need to be translated.
-
-Please open an Issue in GitHub or [open a support ticket](https://quad9.net/support/contact) for requesting net-new articles.
-
-# Consumer Routers
-
-Due to the sheer amount of consumer-grade router makes, models, and variances in user interfaces between firmware versions, we will typically not add router-specific instructions.
-
-Open-source router software (IPFire, OPNsense, pfSense, etc) is supported, since we can test in a lab environment with VMs and do not require physical access to a device.
diff --git a/Setup_Guides/Android/Android_9+_(Encrypted)/index.html b/Setup_Guides/Android/Android_9+_(Encrypted)/index.html
new file mode 100644
index 0000000..d0487f6
--- /dev/null
+++ b/Setup_Guides/Android/Android_9+_(Encrypted)/index.html
@@ -0,0 +1,1614 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Android 9+ (Encrypted)
+ +Overview
+Android 9 and later includes the Private DNS feature, which allows you to connect to DNS servers using DNS over TLS (DoT). It is important to note, that the private DNS function does not work if the Quad9 Connect app is installed and enabled. To configure your Android device to use Quad9 in this way, follow the steps below.
+
+VPNs
+The Private DNS feature will not be utilized if you are using a VPN. If using a VPN, instead, configure Quad9's IP addresses in your VPN's Custom DNS settings. Please refer to your VPN provider's documentation fr more information
Instructions
+-
+
-
+
Open the
+Settingsapp on your Android device.-
+
- Search for
Private DNSin the Search bar.-
+
- Select
Private DNS.
+
+ - Select
+ - Search for
-
+
Select
+Private DNS provider hostname-
+
- Enter:
dns.quad9.net-
+
- Press
Save
+
+ - Press
+ - Enter:
Verify Configuration
+Visit on.quad9.net in your browser of choice.
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/ChromeOS_(Chromebook)/index.html b/Setup_Guides/ChromeOS_(Chromebook)/index.html
new file mode 100644
index 0000000..07bae1f
--- /dev/null
+++ b/Setup_Guides/ChromeOS_(Chromebook)/index.html
@@ -0,0 +1,1613 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ChromeOS (Chromebook)
+ +Overview
+Quad9 Connect is an Android application compatible with ChromeOS using the Google Play Store. It creates a secure tunnel between the device and Quad9 for sending DNS queries via DNS over Quad9 Connect provides additional features like a query log, one-click service switching, and the ability to report false positives from the Query Log.
+Quad9 Connect is not a VPN, but uses the VPN functionality of the device to achieve encrypted DNS and the features associated with the application. When Quad9 Connect is enabled, it is not possible to use another VPN connection at the same time. If using a VPN, consider setting Quad9's DNS servers in the "Custom DNS" settings of your VPN client.
+Instructions
+-
+
-
+
Install Quad9 Connect
+-
+
- In the Google Play Store, search for and install the app:
Quad9 Connect
+
+ - In the Google Play Store, search for and install the app:
-
+
Display Preference
+-
+
- You can choose how you want the app to be displayed:
Phone,Tablet, orResizable. You can select your preference.
+
+ - You can choose how you want the app to be displayed:
-
+
Read and click
+OKwhen prompted for the connection request.
+
+
+You have to connect to this VPN to use Quad9 Connect.
+-
+
- Click the
playicon to connect!
+
The number ‘9’ and VPN key logo should appear in the bottom right corner of your screen.
+Verify Configuration
+To confirm you're using Quad9, visit: on.quad9.net
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/DNS_Forwarders/Windows_Server/index.html b/Setup_Guides/DNS_Forwarders/Windows_Server/index.html
new file mode 100644
index 0000000..12d6e5b
--- /dev/null
+++ b/Setup_Guides/DNS_Forwarders/Windows_Server/index.html
@@ -0,0 +1,1604 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Windows Server
+ +Overview
+Set up Quad9 in Windows DNS Server for use in DNS forwarding.
+
+
+Note
+Before proceeding, please refer to our DNS Forwarder Best Practices article.
+Instructions
+-
+
-
+
Open
+Server Managerfrom theStartmenu.-
+
- From
Server Manager, selectTools>DNS
+
+ - From
-
+
From the DNS Manager, right-click your server and select
+Properties-
+
- Select the
Forwarderstab and then selectEdit.-
+
- Add the following IP addresses:
9.9.9.9,149.112.112.112
+ - If your network supports IPv6, also add:
2620:fe::fe,2620:fe::9-
+
- Click "Apply" +
+
+ - Add the following IP addresses:
+ - Select the
Questions? Issues? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Linux_and_BSD/Fedora_38/index.html b/Setup_Guides/Linux_and_BSD/Fedora_38/index.html
new file mode 100644
index 0000000..b480e3f
--- /dev/null
+++ b/Setup_Guides/Linux_and_BSD/Fedora_38/index.html
@@ -0,0 +1,1666 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Fedora 38
+ +Overview
+The easiest way to set Quad9 on your entire network is via your router settings. If you'd prefer to set Quad9 on a single system, please follow the steps below to configure Fedora 38 to use Quad9.
+
+
+Firefox, VPNs
+-
+
- Firefox is set to use Cloudflare DNS by default in some regions. If you're using Firefox, check that this is disabled. +
- VPNs typically do not respect the system or router-level DNS settings. If you're using a VPN, configure Quad9's IP addresses in the
Custom DNSsettings of your VPN client. Refer to your VPN provider's documentation for further information.
+
Instructions
+IPv4
+-
+
-
+
Click the
+NetworkorWiFiicon in the system tray at the top-right corner of the screen.-
+
- Click the
>next to the active connection.-
+
- Select
Wired SettingsorWireless Settings.
+
+ - Select
+ - Click the
-
+
Click the
+
icon next to your connection.
+ -
+
Click the
+IPv4tab-
+
- Disable
Automatic DNS-
+
- Enter the Quad9 IP addresses of your preferred service. +
+
+ - Disable
Multiple IP addresses can be entered in the list using comas.
+9.9.9.9, 149.112.112.112
-
+
- If you will not use IPv6, click
Applyto complete the setup process, and then confirm you're using Quad9.
+
IPv6 (Optional)
+If your network supports IPv6, it's also recommended to configure the Quad9 IPv6 addresses. If you're not sure if IPv6 is configured on your network, you can test that here: https://test-ipv6.com/
+-
+
- Select the
IPv6tab-
+
- Disable
Automatic DNS-
+
- Enter the Quad9 IP addresses of your preferred service. +
+
+ - Disable
Multiple IP addresses can be entered in the list using comas.
+2620:fe::fe, 2620:fe::9
-
+
- Click
Applyto complete the setup process.
+
Verify Configuration
+Confirm you're using Quad9 by visiting on.quad9.net in your preferred browser.
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Linux_and_BSD/FreeBSD_(Encrypted)/index.html b/Setup_Guides/Linux_and_BSD/FreeBSD_(Encrypted)/index.html
new file mode 100644
index 0000000..4317def
--- /dev/null
+++ b/Setup_Guides/Linux_and_BSD/FreeBSD_(Encrypted)/index.html
@@ -0,0 +1,1678 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ FreeBSD (Encrypted)
+ +Overview
+This article describes how to configure and use FreeBSD's pre-installed "local_unbound" service in order to send encrypted DNS via DNS over TLS to Quad9.
+This was tested using FreeBSD 14.3 and may not work with prior branches (13.x, etc).
+
+
+Firefox, VPNs
+-
+
- Firefox is set to use Cloudflare DNS by default in some regions. If you're using Firefox, check that this is disabled. +
- VPNs typically do not respect the system or router-level DNS settings. If you're using a VPN, configure Quad9's IP addresses in the
Custom DNSsettings of your VPN client. Refer to your VPN provider's documentation for further information.
+
+
+Warning
+FreeBSD, by default, installs a local instance of Unbound DNS. This is meant to act as a local, caching DNS forwarder for the local machine only, and is not intended to act as a DNS forwarder for other network devices. If you want to run Unbound DNS on FreeBSD for the purposes of running a caching DNS forwarder that will be used by multiple devices on the network, FreeBSD recommends installing the dns/unbound package instead. These instructions are only valid for the "local_unbound" service.
+Prerequisites
+For simplicity, these instructions require that you are logged in as, or sud to the root user.
-
+
- Install the dig command so you can test DNS resolution is working as expected: +
pkg install bind-tools
+-
+
- Install the standard root/CA store so Unbound can perform TLS validation of the Quad9 certificate. +
pkg install ca_root_nss
+-
+
- Verify local_unbound is Enabled +
grep unbound /etc/rc.conf
+If the following output is produced, local_unbound is already enabled, and you can skip to the Instructions section:
+local_unbound_enable="YES"
+-
+
- If there is no output after this command, then local_unbound must be enabled.
-
+
- Tell the system that we want to use local_unbound:
+
echo 'local_unbound_enable="YES"' >> /etc/rc.conf +
+
+ - Tell the system that we want to use local_unbound:
+
Then reboot the system (yes, really):
+reboot
+-
+
- Enable local_unbound: +
local-unbound-setup
+The output should similar to this, but may differ slightly:
+destination:
+Extracting forwarders from /etc/resolv.conf.
+/var/unbound/forward.conf not modified
+/var/unbound/lan-zones.conf not modified
+/var/unbound/control.conf not modified
+/var/unbound/unbound.conf not modified
+local_unbound not running? (check /var/run/local_unbound.pid).
+Starting local_unbound.
+/etc/resolvconf.conf created
+Original /etc/resolv.conf saved as /var/backups/resolv.conf.20220625.200835
+Instructions
+This command will back up the default configuration files, download the modified config files from the attachment of this article, and restart the local_unbound service.
+mv /var/unbound/forward.conf /var/unbound/forward-ORIG.conf && mv /var/unbound/unbound.conf /var/unbound/unbound-ORIG.conf && fetch -o /var/unbound/unbound.conf https://docs.quad9.net/assets/conf/freebsd/unbound.conf && fetch -o /var/unbound/forward.conf https://docs.quad9.net/assets/conf/freebsd/forward.conf && service local_unbound restart
+These files are configured for the 9.9.9.9 service by default, without IPv6. If you'd like to use the .10 or .11 service instead, and/or enable IPv6, open the /var/unbound/forward.conf file and un-comment/comment out the appropriate lines.
Verify Configuration
+Using the Quad9 Protocol test, the result should be dot., which indicates your queries are being sent to Quad9 and are encrypted with DNS over TLS:
dig +short txt proto.on.quad9.net.
+Undo
+To undo the configuration changes to local_unbound, simply run this command to restore the original files and restart local_unbound:
+mv /var/unbound/forward-ORIG.conf /var/unbound/forward.conf && mv /var/unbound/unbound-ORIG.conf /var/unbound/unbound.conf && service local_unbound restart
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Linux_and_BSD/Linux_Mint_21.2/index.html b/Setup_Guides/Linux_and_BSD/Linux_Mint_21.2/index.html
new file mode 100644
index 0000000..733a215
--- /dev/null
+++ b/Setup_Guides/Linux_and_BSD/Linux_Mint_21.2/index.html
@@ -0,0 +1,1640 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Linux Mint 21.2
+ +Overview
+The easiest way to set Quad9 on your entire network is via your router settings. If you'd prefer to set Quad9 on a single system, please follow the steps below to configure Linux Mint to use Quad9.
+
+
+Firefox, VPNs
+-
+
- Firefox is set to use Cloudflare DNS by default in some regions. If you're using Firefox, check that this is disabled. +
- VPNs typically do not respect the system or router-level DNS settings. If you're using a VPN, configure Quad9's IP addresses in the
Custom DNSsettings of your VPN client. Refer to your VPN provider's documentation for further information.
+
Instructions
+-
+
- Click the
NetworkorWi-Fiicon on the system tray in the bottom-right corner.-
+
- Click
Network Settings-
+
- Click the icon on the bottom-right corner of the dialogue window.
+
+ - Click the
+ - Click
IPv4
+-
+
- Select
IPv4on the left-side menu.-
+
- In the
DNSsection:-
+
- Disable
Automatic-
+
- Click the :plus: botton to add a second
Serverfield.-
+
- Enter
9.9.9.9in the firstServerfield, and149.112.112.112in the second.-
+
- Click
Apply
+
+ - Click
+ - Enter
+ - Click the :plus: botton to add a second
+ - Disable
+ - In the
Verify Configuration
+Confirm you're using Quad9 by visiting on.quad9.net in your preferred browser.
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Linux_and_BSD/MX_Linux_23/index.html b/Setup_Guides/Linux_and_BSD/MX_Linux_23/index.html
new file mode 100644
index 0000000..107dfe6
--- /dev/null
+++ b/Setup_Guides/Linux_and_BSD/MX_Linux_23/index.html
@@ -0,0 +1,1620 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ MX Linux 23
+ +Overview
+The easiest way to set Quad9 on your entire network is via your router settings. If you'd prefer to set Quad9 on a single system, please follow the steps below to configure MX Linux 23 to use Quad9.
+
+
+Firefox, VPNs
+-
+
- Firefox is set to use Cloudflare DNS by default in some regions. If you're using Firefox, check that this is disabled. +
- VPNs typically do not respect the system or router-level DNS settings. If you're using a VPN, configure Quad9's IP addresses in the
Custom DNSsettings of your VPN client. Refer to your VPN provider's documentation for further information.
+
Instructions
+-
+
-
+
Right click on the Network/WiFi icon in the system tray on the left side of the screen.
+-
+
- Select
Edit Connections-
+
- Select your connection Type (Wired or Wi-Fi), then click the button at the bottom of the window.
+
+ - Select your connection Type (Wired or Wi-Fi), then click the
+ - Select
-
+
Select the
+IPv4 Settingstab.-
+
- Change
MethodtoAutomatic (DHCP) addresses only-
+
- In the
DNS Serversfield, add:9.9.9.9,149.112.112.112-
+
- Click
Save
+
+ - Click
+ - In the
+ - Change
Verify Configuration
+Confirm you're using Quad9 by visiting on.quad9.net in your preferred browser.
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Linux_and_BSD/OpenBSD_(Encrypted)/index.html b/Setup_Guides/Linux_and_BSD/OpenBSD_(Encrypted)/index.html
new file mode 100644
index 0000000..3ccf7a3
--- /dev/null
+++ b/Setup_Guides/Linux_and_BSD/OpenBSD_(Encrypted)/index.html
@@ -0,0 +1,1653 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ OpenBSD (Encrypted)
+ +Overview
+This article describes how to configure and use Unbound on OpenBSD in order to send encrypted DNS via DNS over TLS to Quad9.
+This was tested using OpenBSD 7.7.
+
+
+Firefox, VPNs
+-
+
- Firefox is set to use Cloudflare DNS by default in some regions. If you're using Firefox, check that this is disabled. +
- VPNs typically do not respect the system or router-level DNS settings. If you're using a VPN, configure Quad9's IP addresses in the
Custom DNSsettings of your VPN client. Refer to your VPN provider's documentation for further information.
+
+
+Warning
+Unbound DNS is installed by default on standard OpenBSD installations. This is meant to act as a local, caching DNS forwarder for the local machine only, and is not intended to act as a DNS forwarder for other network devices. If you want to run Unbound DNS on OpenBSD for the purposes of running a caching DNS forwarder that will be used by multiple devices on the network, you can modify the interface and access-control values in unbound.conf appropriately, which by default, only allow DNS queries from localhost.
+Instructions
+You must be logged in as the root user directly or by running the su command and typing in your password in a Terminal session.
-
+
- Back up the default unbound.conf file and download the replacement
unbound.conffile, which is pre-configured for sending DNS queries to Quad9 via DNS over TLS.
+
+
+Note
+You're encouraged to download and inspect the unbound.conf file in a text editor, which is attached to this article, before downloading it to your OpenBSD system.
+mv /var/unbound/etc/unbound.conf /var/unbound/etc/unbound.BAK && ftp -o /var/unbound/etc/unbound.conf https://docs.quad9.net/assets/conf/openbsd/unbound.conf
+Optional: If your network supports IPv6, open the /var/unbound/etc/unbound.conf file on OpenBSD with your favorite text editor, and make the following changes, removing the # (comment) before these lines begin.
+Before
+# do-ip6: no
+# forward-addr: 2620:fe::fe@853#dns.quad9.net
+# forward-addr: 2620:fe::9@853#dns.quad9.net
+After
+do-ip6: yes
+forward-addr: 2620:fe::fe@853#dns.quad9.net
+forward-addr: 2620:fe::9@853#dns.quad9.net
+-
+
- Set Unbound to start on system startup, and start the service: +
rcctl enable unbound && rcctl start unbound
+-
+
- Disable resolvd to prevent automatically overriding the
/etc/resolv.conffile:
+
rcctl disable resolvd && rcctl stop resolvd
+-
+
- Set your system to start using Unbound for DNS by backing up the existing resolv.conf file and set 127.0.0.1 as the DNS server for the system: +
mv /etc/resolv.conf /etc/resolv.BAK && echo "nameserver 127.0.0.1" > /etc/resolv.conf
+Verify Configuration
+Using the Quad9 Protocol test, the result should be dot., which indicates your queries are being sent to Quad9 and are encrypted with DNS over TLS:
dig +short txt proto.on.quad9.net.
+Undo
+If you want to stop using Unbound as the DNS server and revert these changes, simply re-enable/start resolvd:
+rcctl enable resolvd && rcctl start resolvd
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Linux_and_BSD/Ubuntu_20.04_and_22.04/index.html b/Setup_Guides/Linux_and_BSD/Ubuntu_20.04_and_22.04/index.html
new file mode 100644
index 0000000..cf25453
--- /dev/null
+++ b/Setup_Guides/Linux_and_BSD/Ubuntu_20.04_and_22.04/index.html
@@ -0,0 +1,1660 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Ubuntu 20.04 and 22.04
+ +Overview
+The easiest way to set Quad9 on your entire network is via your router settings. If you'd prefer to set Quad9 on a single system, please follow the steps below to configure Ubuntu 22.04 or 22.04 LTS to use Quad9.
+
+
+Firefox, VPNs
+-
+
- Firefox is set to use Cloudflare DNS by default in some regions. If you're using Firefox, check that this is disabled. +
- VPNs typically do not respect the system or router-level DNS settings. If you're using a VPN, configure Quad9's IP addresses in the
Custom DNSsettings of your VPN client. Refer to your VPN provider's documentation for further information.
+
Instructions
+IPv4
+-
+
-
+
From the Ubuntu desktop, select the drop down menu in the top right corner of the screen, expand either
+Wired ConnectionorWireless Connectionbased on your connection type, then selectWired SettingsorWireless Settings.
+ -
+
Click the
+ icon next to your connection.
+ -
+
Click the
+IPv4tab-
+
- Disable
Automatic DNS-
+
- Enter the Quad9 IP addresses of your preferred service. +
+
+ - Disable
Multiple IP addresses can be entered in the list using comas.
+9.9.9.9, 149.112.112.112
-
+
- If you will not use IPv6, click
Applyto complete the setup process, and then confirm you're using Quad9.
+
IPv6 (Optional)
+If your network/computer support IPv6, it's also recommended to configure the Quad9 IPv6 addresses. If you're not sure if IPv6 is configured on your network, you can test that here: https://test-ipv6.com/
+-
+
- Select the
IPv6tab-
+
- Disable
Automatic DNS-
+
- Enter the Quad9 IP addresses of your preferred service. +
+
+ - Disable
Multiple IP addresses can be entered in the list using comas.
+2620:fe::fe, 2620:fe::9
-
+
- Click
Applyto complete the setup process.
+
Verify Configuration
+Confirm you're using Quad9 by visiting on.quad9.net in your preferred browser.
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Linux_and_BSD/Ubuntu_22.04_(Encrypted)/index.html b/Setup_Guides/Linux_and_BSD/Ubuntu_22.04_(Encrypted)/index.html
new file mode 100644
index 0000000..56b1f6d
--- /dev/null
+++ b/Setup_Guides/Linux_and_BSD/Ubuntu_22.04_(Encrypted)/index.html
@@ -0,0 +1,1647 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+If the response is
+
+
+
+
+
+
+ Ubuntu 22.04 (Encrypted)
+ +Overview
+Note: The maintainers of systemd-resolved emphasize that this DNS over TLS implementation is currently a work in progress. You may consider using Stubby instead if experiencing performance issues. See here for Ubuntu 18.04 / 20.04 + Stubby instructions.
+Ubuntu 22.04 and Linux Mint 20.3 or later support DNS over TLS natively in systemd-resolved, but the option is not available in the GUI.
+
+
+Bug
+While this is technically also supported in Ubuntu 20.04, we do not recommend using this method for 20.04, since it uses an older systemd-resolve version which has problems.
+
+
+Bug
+The DNSSEC option should not be enabled in systemd-resolved. It is extremely buggy, and it would only duplicate the DNSSEC validation process which Quad9 already performs, significantly reducing performance.
+
+
+Firefox, VPNs
+-
+
- Firefox is set to use Cloudflare DNS by default in some regions. If you're using Firefox, check that this is disabled. +
- VPNs typically do not respect the system or router-level DNS settings. If you're using a VPN, configure Quad9's IP addresses in the
Custom DNSsettings of your VPN client. Refer to your VPN provider's documentation for further information.
+
Instructions
+-
+
-
+
Configure Quad9 in the Network Settings (Ubuntu, Linux Mint).
+
+ -
+
Open the
+Terminalapplication, and copy/paste these commands to enable DNS over TLS. When prompted for your password, type it in and hitEnter.
+
sudo sed -i 's/#DNSOverTLS=no/DNSOverTLS=yes/g' /etc/systemd/resolved.conf
+-
+
- Restart the
systemd-resolvdandnetworking servicesto recognize the changes to the file:
+
sudo systemctl restart systemd-resolved.service && sudo service network-manager restart
+Verify Configuration
+-
+
- Confirm that DNS over TLS is being used by opening the
Terminalapplication and running the following command, typing in your password and pressing `Enter``:
+
$ dig +short txt proto.on.quad9.net.
+dot., then it is working! If the response is do53-udp., then it's still using plaintext. If there is no response, that means that Quad9 may not have been configured probably in the Network Settings.
+Undo
+If you experience any issues or want to undo this configuration change:
+-
+
- Open the Terminal application, and copy/paste these commands to disable DNS over TLS. You'll be prompted for your password. +
sudo sed -i 's/DNSOverTLS=yes/#DNSOverTLS=no/g' /etc/systemd/resolved.conf
+-
+
- Restart the
systemd-resolvdandnetworkingservices to recognize the changes to the file we just made:
+
sudo systemctl restart systemd-resolved.service && sudo service network-manager restart
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)/index.html b/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)/index.html
new file mode 100644
index 0000000..4d6d811
--- /dev/null
+++ b/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)/index.html
@@ -0,0 +1,1732 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Big Sur and later (Encrypted)
+ +Overview
+DNS over TLS (DoT) and DNS over HTTPS (DoH) are now supported natively in MacOS Big Sur and later.
+Please follow the steps below to install the Quad9 DNS Profile.
+
+
+VPNs, iCloud Private Relay, Little Snitch
+When using iCloud Private Relay, most VPN clients, or Little Snitch, it will not utilize/respect this DNS profile.
+-
+
-
+
VPN: do not follow these instructions. Instead set Quad9's IP addresses in the
+Custom DNSsettings of your VPN client. Refer to your VPN client's documentation for further information.
+ -
+
Apple Private Relay: do not follow these instructions. Apple private relay will use its own DNS servers at the system level, with no way to override it
+
+
+
+Firefox
+-
+
- Firefox is set to use Cloudflare DNS by default in some regions. If you're using Firefox, check that this is disabled. +
Choosing DNS over TLS or DNS over HTTPS
+DNS over TLS is recommended if the device will mainly connect to Wi-Fi networks you control, or on corporate networks where DNS over TLS is allowed.
+DNS over HTTPS is recommended if the device will frequently connect to guest Wi-Fi, and/or networks you do not administrate, as DoH is not as commonly blocked on firewalls.
+Before You Start
+
+
+nslookup and dig
The App Store, as well as the dig and nslookup commands in a Terminal do not use encrypted DNS. This is by design.
+
+DNS over TLS
+If connected to a Wi-Fi network which blocks DNS over TLS, which may occur on restrictive network firewalls, you will have to disable the profile or disconnect from the network to regain DNS resolution. This solution does not allow for unencrypted "fallback" behavior. DNS over HTTPS is recommended for most users
+
+
+This profile will expire!
+These profiles are only valid until they expire, at which point, they will automatically disable until a new profile is installed. This is by design of Apple, and there is no way around it."
+Download Profile
+Download one of the profiles here directly using Safari on your MacOS device. You must use Safari to download the file.
+-
+
-
+
9.9.9.9 (DNSSEC, Threat-Blocking)
+-
+
- Recommended: HTTPS (.9)
-
+
- SHA256:
b240f046a16f7d0e5df6458f5121221c4f118bf4d415cd8cce47d10b6fd46d36
+
+ - SHA256:
- TLS (.9)
-
+
- SHA256:
d132d71447bc3b43e371a86533e4d12fa46a4690a63abf77b2ceae72a1b3cef3
+
+ - SHA256:
+ - Recommended: HTTPS (.9)
-
+
9.9.9.10 (No DNSSEC, no Threat-Blocking)
+-
+
- HTTPS (.10)
-
+
- SHA256:
42cb9445417dc81ced18c33d943c23559a81afb018d440bf465bb0635a44bb66
+
+ - SHA256:
- TLS (.10)
-
+
- SHA256:
86588f6d2dac42d03b155c7f557b4dd05b354059736aaa4ec8f3ef4d3ca2548e
+
+ - SHA256:
+ - HTTPS (.10)
-
+
9.9.9.11 (DNSSEC, Threat-Blocking, with ECS)
+-
+
- HTTPS (.11)
-
+
- SHA256:
38c52f0755c4ec053c685e1ebf3b9956841a81373df2cc2e9dc962a418ac6993
+
+ - SHA256:
- TLS (.11)
-
+
- SHA256:
abf69de093831cf8c4d644d234a3a594d13026415533ad1bb2b9f1540f307a46
+
+ - SHA256:
+ - HTTPS (.11)
-
+
9.9.9.12 (No DNSSEC, no Threat-Blocking, with ECS)
+-
+
- HTTPS (.12)
-
+
- SHA256:
eccb63252a1cd6726d42a1d72c58e11503cf06a0de6977d2472386f9cc88d9d8
+
+ - SHA256:
- TLS (.12)
-
+
- SHA256:
0b01df454c9e4ee7f39b0a79e63920c6fa6e44f1fe17c0064bb8da6ce68bcb04
+
+ - SHA256:
+ - HTTPS (.12)
Installation
+-
+
- Navigate to your Downloads folder and select to the profile you just downloaded.
-
+
- Open
Settings>Profile Downloadedand select the Quad9 profile you opened.-
+
- Click Install
-
+
- Enter your phone's passcode +
+
+ - Click Install
+ - Open
+
+Note
+You will receive a warning message warning that your network traffic may be filtered or monitored by the DNS server. While Quad9’s profile can protect your device by filtering potentially malicious traffic, none of your traffic will be logged by Quad9. Please refer to our Privacy Policy for more information
+-
+
-
+
Select Install, then Install again.
+
+ -
+
The profile is now installed. Select
+Done
+
Verify Configuration
+To confirm the installation was successful, visit on.quad9.net
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Miscellaneous/Cloudflared_and_Quad9/index.html b/Setup_Guides/Miscellaneous/Cloudflared_and_Quad9/index.html
new file mode 100644
index 0000000..c5e3d5e
--- /dev/null
+++ b/Setup_Guides/Miscellaneous/Cloudflared_and_Quad9/index.html
@@ -0,0 +1,1548 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Cloudflared and Quad9
+ +Cloudflared is a DNS over HTTPS proxy that can be configured to use Quad9 for DNS resolution.
+-
+
- In the
cloudflared.ymlconfiguration file, replace the Cloudflare IPs in theproxy-dns-upstreamsection with the Quad9 addresses associated with your desired features.-
+
- Restart the
cloudflaredservice
+
+ - Restart the
Before (Cloudflare DoH Servers) +
proxy-dns-upstream:
+
+- https://1.1.1.1/dns-query
+- https://1.0.0.1/dns-query
+IPv4 +
proxy-dns-upstream:
+
+- https://9.9.9.9/dns-query
+- https://149.112.112.112/dns-query
+IPv6 +
proxy-dns-upstream:
+
+- https://[2620:fe::fe]/dns-query
+- https://[2620:fe::9]/dns-query
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Miscellaneous/Pi-Hole/index.html b/Setup_Guides/Miscellaneous/Pi-Hole/index.html
new file mode 100644
index 0000000..ffa3afe
--- /dev/null
+++ b/Setup_Guides/Miscellaneous/Pi-Hole/index.html
@@ -0,0 +1,1640 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Pi Hole
+ +Overview
+Pi-Hole is a popular DNS forwarder, often used primarily for blocking domains specifically associated with ads and tracking.
+Pi-Hole Setup
+For detailed setup instructions of Pi-Hole itself, please see the Official Pi-Hole Documentation.
+Quad9 Setup
+Once you have installed Pi-Hole and can access the administration panel, Quad9 is already one of the default options.
+-
+
-
+
In the Admin panel, navigate to
+Settings->DNS-
+
- Check both IPv4 boxes next to Quad9 (filtered, DNSSEC)
-
+
- If your network support IPv6, it's also recommended to check both IPv6 boxes. If you're not sure if IPv6 is configured on your network, you can test that here: https://test-ipv6.com/ +
+
+ - Check both IPv4 boxes next to Quad9 (filtered, DNSSEC)
-
+
Check/Enable the options:
+-
+
Never forward non-FQDNsandNever forward reverse lookups for private IP rangesto prevent sending unanswerable DNS queries to Quad9.-
+
- Click
Saveat the bottom.
+
+- Click
+
Verify Configuration
+Once Quad9 has been configured in Pi-Hole, you can configure your router or a single computer to use the Pi-Hole's IP address as a DNS server. If the Query Log is enabled (Settings -> Privacy [tab]), you should see Quad9 recorded in the Status column:
+You can also confirm if Quad9 is being used manually on Linux, MacOS, or Windows.
+Blocked Domains
+Domains which are blocked by Quad9 will record Blocked (external, NXRA) in the Status column of the Query Log:
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Open-Source_Routers/IPFire_(Encrypted)/index.html b/Setup_Guides/Open-Source_Routers/IPFire_(Encrypted)/index.html
new file mode 100644
index 0000000..ec4117b
--- /dev/null
+++ b/Setup_Guides/Open-Source_Routers/IPFire_(Encrypted)/index.html
@@ -0,0 +1,1664 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IPFire (Encrypted)
+ +Overview
+IPFire is an open-source firewall and router, used in both consumer and commercial environments.
+IPFire utilizes Unbound, which has built-in DNS over TLS support, with the configuration being accessible in the GUI.
+This setup guide was tested using IPFire 2.27
+
+
+Backup Time!
+Before making changes to a production environment, we recommend backing up the existing configuration
+Instructions
+-
+
-
+
Navigate to
+System->Domain Name System-
+
- Under
DNS Servers, clickAdd-
+
- Go through this process twice, one for each Quad9 IP address, where the TLS Hostname will always be dns.quad9.net
-
+
- IP address:
9.9.9.9
+ - IP address:
149.112.112.112
+
+ - IP address:
+ - Go through this process twice, one for each Quad9 IP address, where the TLS Hostname will always be dns.quad9.net
+ - Under
-
+
Use ISP-assigned DNS Servers:
+Disabled
+ - Protocol for DNS Queries:
TLS
+ - Enable Safe Search:
Disabled
+ - QNAME Minimisation:
Disabled
+ - Click
Save
+
Verify Configuratiom
+GUI
+Navigate to Status -> Net-Traffic in the top menu, and search for an active connect to either 9.9.9.9 or 149.112.112.112 via port 853 TCP
CLI
+-
+
- Connect to your IPFire device via SSH +
- Install the tshark package +
pakfire -y install tshark
+-
+
- Start a packet capture with tshark to filter for DNS over TLS traffic: +
tshark -i any 'port 853'
+If the IPFire device is using DNS over HTTPS for DNS queries, you will see output like this: +
1 0.000000000 192.168.1.150 → 9.9.9.9 TCP 76 37226 → 853 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=3103990808 TSecr=0 WS=512
+2 0.006914259 9.9.9.9 → 192.168.1.150 TCP 76 853 → 37226 [SYN, ACK] Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 TSval=2447463919 TSecr=3103990808 WS=256
+3 0.006948874 192.168.1.150 → 9.9.9.9 TCP 68 37226 → 853 [ACK] Seq=1 Ack=1 Win=64512 Len=0 TSval=3103990815 TSecr=2447463919
+4 0.007110658 192.168.1.150 → 9.9.9.9 TLSv1 387 Client Hello
+5 0.013306457 9.9.9.9 → 192.168.1.150 TCP 68 853 → 37226 [ACK] Seq=1 Ack=320 Win=30208 Len=0 TSval=2447463926 TSecr=3103990815
+6 0.013926633 9.9.9.9 → 192.168.1.150 TLSv1.3 2964 Server Hello, Change Cipher Spec, Application Data
+7 0.013945067 192.168.1.150 → 9.9.9.9 TCP 68 37226 → 853 [ACK] Seq=320 Ack=2897 Win=62464 Len=0 TSval=3103990822 TSecr=2447463926
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Open-Source_Routers/MikroTik_RouterOS_(Encrypted)/index.html b/Setup_Guides/Open-Source_Routers/MikroTik_RouterOS_(Encrypted)/index.html
new file mode 100644
index 0000000..a9f1bf9
--- /dev/null
+++ b/Setup_Guides/Open-Source_Routers/MikroTik_RouterOS_(Encrypted)/index.html
@@ -0,0 +1,1660 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ MikroTik RouterOS (Encrypted)
+ +Overview
+This article describes how to configure your MikroTik router using RouterOS to send encrypted DNS queries to Quad9 using DNS over HTTPS.
+RouterOS >=6.4.7 is required. These instructions were tested using RouterOS 7.1.3.
+
+
+Backup Time!
+Before making changes to a production environment, we recommend backing up the existing configuration
+Instructions
+-
+
-
+
Connect to your MikroTik router's management interface via SSH or console. The username and password will be the same as if using Webfig (GUI).
+
+ -
+
In order for MikroTik to perform certificate verification of the Quad9 DNS over HTTPS domain, we need to download and import the DigiCert Global Root CA certificate.
+-
+
- Download the certificate to your MikroTik router: +
+
/tool/fetch mode=https url="https://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt.pem"
+-
+
- Import the certificate into the local certificate store. When prompted for a passphrase, just hit enter for no passphrase: +
/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt.pem
+The resulting output should be:
+passphrase:
+certificates-imported: 1
+private-keys-imported: 0
+files-imported: 1
+decryption-failures: 0
+keys-with-no-certificate: 0
+-
+
- Log into Webfig (GUI), and navigate to
IP->DNSon the left-side menu.
+ - In the Servers field, set:
9.9.9.9,149.112.112.112,2620:fe::fe,2620:fe::9
+
+
+Warning
+If your network does not support IPv6, then the IPv6 addresses should not be added, as it may result in a percentage of your DNS requests failing. Not sure if you have IPv6? Test here.
+-
+
- Use DoH Server:
https://dns.quad9.net/dns-query
+ - Verify DoH Certificate:
Enabled
+ - Allow Remote Requests:
Enabled
+
+
+Warning
+Don't forget to configure the firewall rules to prevent non-local IP address from using this as a DNS server.
+-
+
- Click Apply at the top. +
Verify Configuration
+To confirm that the MikroTik router is sending DNS queries to Quad9 using DNS over HTTPS, you can use the packet sniffer tool to filter for packets being sent to/from Quad9 IP addresses using port 443 (HTTPS):
+tool/sniffer/quick port=443 ip-address=9.9.9.9,149.112.112.112
+If DNS queries sent to the MikroTik router are being forwarded to Quad9 using DNS over HTTPS, you will see any output.
+Columns: INTERFACE, TIME, NUM, DIR, SRC-MAC, DST-MAC, SRC-ADDRESS, DST-ADDRESS, PROTOCOL, SIZE, CPU
+INTERFACE TIME NUM DIR SRC-MAC DST-MAC SRC-ADDRESS DST-ADDRESS PROTOCOL SIZE CPU
+ether1 6.886 5 <- 04:F0:21:45:C9:0C 08:00:27:7D:3B:33 9.9.9.9:443 (https) 192.168.1.222:59348 ip:tcp 66 0
+ether1 6.887 6 <- 04:F0:21:45:C9:0C 08:00:27:7D:3B:33 9.9.9.9:443 (https) 192.168.1.222:59348 ip:tcp 1514 0
+ether1 6.887 7 -> 08:00:27:7D:3B:33 04:F0:21:45:C9:0C 192.168.1.222:59348 9.9.9.9:443 (https) ip:tcp 66 0
+ether1 6.887 8 <- 04:F0:21:45:C9:0C 08:00:27:7D:3B:33 9.9.9.9:443 (https) 192.168.1.222:59348 ip:tcp 1514 0
+ether1 6.887 9 -> 08:00:27:7D:3B:33 04:F0:21:45:C9:0C 192.168.1.222:59348 9.9.9.9:443 (https) ip:tcp 66 0
+If you do not yet have endpoints using the MikroTik router for DNS, you can manually query the MikroTik router to facilitate testing and checking for the output generated above from Terminal (Linux/macOS) or Command Prompt (Windows), replacing 192.168.1.1 with the LAN IP address of your MikroTik router.
+nslookup quad9.net 192.168.1.1
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Open-Source_Routers/OPNsense_(Encrypted)/index.html b/Setup_Guides/Open-Source_Routers/OPNsense_(Encrypted)/index.html
new file mode 100644
index 0000000..aef6086
--- /dev/null
+++ b/Setup_Guides/Open-Source_Routers/OPNsense_(Encrypted)/index.html
@@ -0,0 +1,1631 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ OPNsense (Encrypted)
+ +Overview
+OPNsense is an open-source firewall, used in both consumer and commercial environments.
+OPNsense utilizes Unbound, which has built-in DNS over TLS support, with the configuration being accessible in the GUI.
+
+
+Backup Time!
+Before making changes to a production environment, we recommend backing up the existing configuration
+Instructions
+-
+
- Navigate to
Services->Unbound DNS->DNS over TLSon the left-side menu-
+
- Click the + button
-
+
- Add 4 entries, using
dns.quad9.netin the Verify CN Field, and853in the Server Port: field.
+
+ - Add 4 entries, using
+ - Click the + button
Server IP: 9.9.9.9
+Server IP: 149.112.112.112
+Server IP: 2620:fe::fe
+Server IP: 2620:fe::9
+
+IPv6
+If your network does not have IPv6, which you can test here, then IPv6 addresses should not be added, as it may result in a percentage of your DNS requests failing.
+-
+
-
+
Click
+Applyto save the changes.
+ -
+
Navigate to
+System->Settings->Generalon the left-side menu.
+ -
+
Disable
+Allow DNS server list to be overridden by DHCP/PPP on WAN
+ - Click
Save
+ - Click
Applyat the top of the page
+
Verify Configuration
+To confirm that OPNsense is now sending your queries via DNS over TLS, you can run a packet capture in command line, such as:
+tcpdump -i em0 'port 853'
+
+
+Note
+You may have to adjust the interface name from em0 to that of your device's WAN interface.
+You can also test from a macOS, Linux, or Windows system that is connected to this OPNsense router/firewall.
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Open-Source_Routers/OpenWrt_LuCi/index.html b/Setup_Guides/Open-Source_Routers/OpenWrt_LuCi/index.html
new file mode 100644
index 0000000..3a56dcb
--- /dev/null
+++ b/Setup_Guides/Open-Source_Routers/OpenWrt_LuCi/index.html
@@ -0,0 +1,1616 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ OpenWrt LuCi
+ +Overview
+The OpenWrt Project is a Linux operating system targeting embedded devices, which is often used as an open-source solution for routers and firewalls.
+This guide covers setting Quad9 in the DNS forwarder settings. When using your OpenWrt router as a DNS server, it will forward DNS requests to Quad9.
+
+
+Backup Time!
+Before making changes to a production environment, we recommend backing up the existing configuration
+Instructions
+-
+
-
+
Log into your LuCI control panel, typically by opening
+http://192.168.1.1in your browser.
+ -
+
Navigate to
+Network->DHCP and DNS-
+
- Set
9.9.9.9and149.112.112.112, or the addresses of your preferred Quad9 service in the "DNS forwardings" input fields.
+
+ - Set
-
+
If your network supports IPv6, you can also add 2620:fe::fe and 2620:fe::9, or the IPv6 addresses of your preferred Quad9 service.
+
+ -
+
Navigate to
+Resolv and Hosts Filessub-tab, and make sureIgnore resolv fileisEnabled.
+ -
+
Click
+Save & Applyat the bottom. Since you are not changing the DHCP settings, the change should be instantaneous .
+
Verify Configuration
+-
+
- Confirm you're using Quad9 on Linux, MacOS, or Windows. +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Open-Source_Routers/pfSense_(Encrypted)/index.html b/Setup_Guides/Open-Source_Routers/pfSense_(Encrypted)/index.html
new file mode 100644
index 0000000..cabf866
--- /dev/null
+++ b/Setup_Guides/Open-Source_Routers/pfSense_(Encrypted)/index.html
@@ -0,0 +1,1627 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ pfSense (Encrypted)
+ +Overview
+pfSense is an open-source firewall and router, used in both consumer and commercial environments.
+pfSense has documentation for DNS over TLS, which we recommend reviewing in addition to this article.
+pfSense utilizes Unbound, which has built-in DNS over TLS support, with the configuration being accessible in the GUI.
+
+
+Backup Time!
+Before making changes to a production environment, we recommend backing up the existing configuration
+Instructions
+Navigate to System -> General Setup on the top menu.
-
+
- Click
Add DNS Serveruntil there are 4 rows of entries available.
+ - Add the Quad9 IPv4 and IPv6 addresses on the left fields:
+
9.9.9.9,149.112.112.112,2620:fe::fe,2620:fe::9
+
+
+Warning
+If your network does not have IPv6, which you can test here, then IPv6 addresses should not be added, as it may result in a percentage of your DNS requests failing.
+-
+
- Add
dns.quad9.neton all the Hostname fields on the right.
+
Click "Save" at the bottom of the screen.
+Navigate to Services -> DNS Forwarder on the top menu.
+* Make sure Enable DNS forwarder is disabled. If it is enabled, disable it, and click Save at the bottom of the page.
Navigate to Services -> DNS Resolver on the top menu.
-
+
- Scroll down until you find the section seen in the following screenshot. +
- Disable Enable DNSSEC Support if enabled. +
+
+DNSSEC
+DNSSEC is already enforced by Quad9, and enabling DNSSEC at the forwarder level can cause false DNSSEC failures.
+-
+
- Enable
DNS Query Forwarding
+ - Enable
Use SSL/TLS for outgoing DNS queries to Forwarding Servers
+ - Click
Saveat the bottom of the screen.
+ - Click
ApplyChanges near the top of the screen to apply the saved changes.
+
Verify Configuration
+You can confirm that pfSense is now sending your queries via DNS over TLS using the built-in Packet Capture Tool.
+You can also run a test from a macOS, Linux, or Windows system on the network.
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Windows/Windows_10/index.html b/Setup_Guides/Windows/Windows_10/index.html
new file mode 100644
index 0000000..ce2867c
--- /dev/null
+++ b/Setup_Guides/Windows/Windows_10/index.html
@@ -0,0 +1,1667 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Windows 10
+ +Overview
+The easiest way to set Quad9 on your entire network is via your router settings. If you'd prefer to set Quad9 on an individual Windows device, please follow the steps below to configure Windows 10 to use Quad9.
+
+
+Firefox, VPNs
+-
+
- Firefox is set to use Cloudflare DNS by default in some regions. If you're using Firefox, check that this is disabled. +
- VPNs typically do not respect the system or router-level DNS settings. If you're using a VPN, configure Quad9's IP addresses in the
Custom DNSsettings of your VPN client. Refer to your VPN provider's documentation for further information.
+
Instructions
+IPv4
+-
+
-
+
Right click on the Network icon (Wired or WiFi) in the system tray and click
+Open Network & Internet Settings.
+ -
+
Click
+Change adapter options
+ -
+
Select
+Properties.
+ -
+
Select
+Internet Protocol Version 4 (TCP/IPv4). Then, clickProperties.
+ -
+
Select
+Use the following DNS server addresses.-
+
- Enter:
9.9.9.9in Preferred DNS Server
+ - Enter:
149.112.112.112in Alternate DNS Server.
+
+ - Enter:
- Click
OK.
+
IPv6
+If your networks supports IPv6, it's also recommended to configure the Quad9 IPv6 addresses. If you're not sure if IPv6 is configured on your network, you can test that here: https://test-ipv6.com/
+-
+
-
+
Select Internet Protocol Version 6 (TCP/IPv6)
+-
+
- Click Properties. +
+ -
+
Select
+Use the following DNS server addresses.-
+
- Enter:
2620:fe::fein Preferred DNS Server
+ - Enter:
2620:fe::9in Alternate DNS Server.-
+
- Click
OK.
+
+ - Click
+ - Enter:
-
+
Close all configuration windows.
+
+
Verify Configuration
+Confirm you're using Quad9 by visiting on.quad9.net in your preferred browser.
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/Windows/Windows_11_(Encrypted)/index.html b/Setup_Guides/Windows/Windows_11_(Encrypted)/index.html
new file mode 100644
index 0000000..8e57329
--- /dev/null
+++ b/Setup_Guides/Windows/Windows_11_(Encrypted)/index.html
@@ -0,0 +1,1688 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Windows 11 (Encrypted)
+ +Overview
+The easiest way to set Quad9 on your entire network is via your router settings. If you'd prefer to set Quad9 on an individual Windows device, please follow the steps below to configure Windows 11 to use Quad9.
+
+
+Firefox, VPNs
+-
+
- Firefox is set to use Cloudflare DNS by default in some regions. If you're using Firefox, check that this is disabled. +
- VPNs typically do not respect the system or router-level DNS settings. If you're using a VPN, configure Quad9's IP addresses in the
Custom DNSsettings of your VPN client. Refer to your VPN provider's documentation for further information.
+
Instructions
+IPv4
+-
+
-
+
Right click the Network or WiFi icon on the system tray, and left click
+Network and Internet Settings
+ -
+
Select
+EthernetorWiFi, depending on your connection type.
+ -
+
Scroll down and click
+Editnext toDNS server assignment
+ -
+
Make the following changes:
+-
+
- Change
Automatic (DHCP)toManual
+ - Toggle the
Onswitch underIPv4to change the DNS server
+ - Enter into
Preferred DNS: 9.9.9.9-
+
- Set
DNS over HTTPStoOn (automatic template)
+
+ - Set
- Enter into
Alternate DNS: 149.112.112.112-
+
- Set
DNS over HTTPStoOn (automatic template)
+
+ - Set
+ - Change
+
+Note
+If using a laptop that roams to other networks which may block DNS over HTTPS, consider toggling the Fallback to plaintext switch.
-
+
- Click
Save
+
IPv6
+If using IPv6, which you can confirm here: https://test-ipv6.com/, you should also scroll down and set up Quad9 on IPv6.
+-
+
- Make the following changes:
-
+
- Toggle the
Onswitch underIPv6to change the DNS server
+ - Enter into
Preferred DNS: 2620:fe::fe-
+
- Set
DNS over HTTPStoOn (automatic template)
+
+ - Set
- Enter into
Alternate DNS: 2620:fe::9-
+
- Set
DNS over HTTPStoOn (automatic template)
+
+ - Set
+ - Toggle the
+
+Note
+If Windows is not configured with an IPv6 address, setting up an IPv6 DNS server could cause DNS resolution to fail.
+If using a laptop that roams to other networks which may block DNS over HTTPS, consider toggling the Fallback to plaintext switch.
-
+
- Click
Save
+
Verify Configuration
+-
+
- Open the Terminal application, and execute this command: +
Resolve-DnsName -Type txt proto.on.quad9.net.
+The output should show doh. (DNS over HTTPS) in the NameHost section if you set Quad9 in the Network Settings and enabled encryption.
Name Type TTL Section NameHost
+---- ---- --- ------- --------
+proto.on.quad9.net CNAME 60 Answer doh
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/Setup_Guides/iOS/iOS_14_and_later_(Encrypted)/index.html b/Setup_Guides/iOS/iOS_14_and_later_(Encrypted)/index.html
new file mode 100644
index 0000000..dcd5550
--- /dev/null
+++ b/Setup_Guides/iOS/iOS_14_and_later_(Encrypted)/index.html
@@ -0,0 +1,1724 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Skip to content
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ iOS 14 and later (Encrypted)
+ +Overview
+Please follow the steps below to install the Quad9 DNS Profile. Requires iOS 14 or later.
+
+
+VPNs, iCloud Private Relay, Little Snitch
+When using iCloud Private Relay, most VPN clients, or Little Snitch, it will not utilize/respect this DNS profile.
+-
+
-
+
VPN: do not follow these instructions. Instead set Quad9's IP addresses in the
+Custom DNSsettings of your VPN client. Refer to your VPN client's documentation for further information.
+ -
+
Apple Private Relay: do not follow these instructions. Apple private relay will use its own DNS servers at the system level, with no way to override it.
+
+
TLS vs HTTPS
+DNS over HTTPS is recommended for most users. If the device will frequently connect to guest Wi-Fi and/or networks you do not administrate. HTTPS has a minuscule chance of being blocked on firewalls.
+DNS over TLS is recommended only if the device will mainly connect to Wi-Fi networks you control, or on corporate networks where DNS over TLS is allowed. TLS has a higher chance of being blocked on firewalls.
+Before You Start
+
+
+nslookup and dig
The App Store, as well as the dig and nslookup commands in a Terminal do not use encrypted DNS. This is by design.
+
+DNS over TLS
+If connected to a Wi-Fi network which blocks DNS over TLS, which may occur on restrictive network firewalls, you will have to disable the profile or disconnect from the network to regain DNS resolution. This solution does not allow for unencrypted "fallback" behavior. DNS over HTTPS is recommended for most users.
+
+
+Profiles expire on January 20th, 2026!
+These profiles are only valid until they expire, at which point, they will automatically disable until a new profile is installed. This is by design of Apple, and there is no way around it.
+Remind yourself to download a new version a few days before they expire by adding a calendar event:
+Download Profile
+Download one of the profiles here directly using Safari on your iOS device. This will not work if downloaded with a different browser.
+-
+
-
+
9.9.9.9 (DNSSEC, Threat-Blocking)
+-
+
- Recommended: HTTPS (.9)
-
+
- SHA256:
b240f046a16f7d0e5df6458f5121221c4f118bf4d415cd8cce47d10b6fd46d36
+
+ - SHA256:
- TLS (.9)
-
+
- SHA256:
d132d71447bc3b43e371a86533e4d12fa46a4690a63abf77b2ceae72a1b3cef3
+
+ - SHA256:
+ - Recommended: HTTPS (.9)
-
+
9.9.9.10 (No DNSSEC, no Threat-Blocking)
+-
+
- HTTPS (.10)
-
+
- SHA256:
42cb9445417dc81ced18c33d943c23559a81afb018d440bf465bb0635a44bb66
+
+ - SHA256:
- TLS (.10)
-
+
- SHA256:
86588f6d2dac42d03b155c7f557b4dd05b354059736aaa4ec8f3ef4d3ca2548e
+
+ - SHA256:
+ - HTTPS (.10)
-
+
9.9.9.11 (DNSSEC, Threat-Blocking, with ECS)
+-
+
- HTTPS (.11)
-
+
- SHA256:
38c52f0755c4ec053c685e1ebf3b9956841a81373df2cc2e9dc962a418ac6993
+
+ - SHA256:
- TLS (.11)
-
+
- SHA256:
abf69de093831cf8c4d644d234a3a594d13026415533ad1bb2b9f1540f307a46
+
+ - SHA256:
+ - HTTPS (.11)
-
+
9.9.9.12 (No DNSSEC, no Threat-Blocking, with ECS)
+-
+
- HTTPS (.12)
-
+
- SHA256:
eccb63252a1cd6726d42a1d72c58e11503cf06a0de6977d2472386f9cc88d9d8
+
+ - SHA256:
- TLS (.12)
-
+
- SHA256:
0b01df454c9e4ee7f39b0a79e63920c6fa6e44f1fe17c0064bb8da6ce68bcb04
+
+ - SHA256:
+ - HTTPS (.12)
Installation
+-
+
- Navigate to your Downloads folder and select to the profile you just downloaded.
-
+
- Open
Settings>Profile Downloadedand select the Quad9 profile you opened.-
+
- Click
Install.-
+
- Enter your phone's passcode. +
+
+ - Click
+ - Open
+
+Note
+You will receive a warning message warning that your network traffic may be filtered or monitored by the DNS server. While Quad9’s profile can protect your device by filtering potentially malicious traffic, none of your traffic will be logged by Quad9. Please refer to our Privacy Policy for more information.
+-
+
-
+
Select
+Install, thenInstallagain.
+ -
+
The profile is now installed. Select
+Done.
+
Verify Configuration
+To confirm the installation was successful, visit on.quad9.net
+Questions? Issues? Didn't work? Contact us!
+ + + + + + + + + + + + + + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/docs/assets/conf/freebsd/forward.conf b/assets/conf/freebsd/forward.conf
similarity index 100%
rename from docs/assets/conf/freebsd/forward.conf
rename to assets/conf/freebsd/forward.conf
diff --git a/docs/en/assets/conf/freebsd/unbound.conf b/assets/conf/freebsd/unbound.conf
similarity index 100%
rename from docs/en/assets/conf/freebsd/unbound.conf
rename to assets/conf/freebsd/unbound.conf
diff --git a/docs/assets/conf/mobileconfig/Quad9_Secured_DNS_over_HTTPS_ECS_20240201.mobileconfig b/assets/conf/mobileconfig/Quad9_Secured_DNS_over_HTTPS_ECS_20240201.mobileconfig
similarity index 100%
rename from docs/assets/conf/mobileconfig/Quad9_Secured_DNS_over_HTTPS_ECS_20240201.mobileconfig
rename to assets/conf/mobileconfig/Quad9_Secured_DNS_over_HTTPS_ECS_20240201.mobileconfig
diff --git a/docs/assets/conf/openbsd/unbound.conf b/assets/conf/openbsd/unbound.conf
similarity index 100%
rename from docs/assets/conf/openbsd/unbound.conf
rename to assets/conf/openbsd/unbound.conf
diff --git a/assets/images/favicon.png b/assets/images/favicon.png
new file mode 100644
index 0000000..1cf13b9
Binary files /dev/null and b/assets/images/favicon.png differ
diff --git a/.cache/plugin/social/8f1d275bb89a351f1c7a819a100f72cc.png b/assets/images/social/en/FAQs.png
similarity index 100%
rename from .cache/plugin/social/8f1d275bb89a351f1c7a819a100f72cc.png
rename to assets/images/social/en/FAQs.png
diff --git a/.cache/plugin/social/de86a83da1783db5d93b108a18b96b22.png b/assets/images/social/en/Quad9_For_Organizations/DNS_Forwarder_Best_Practices.png
similarity index 100%
rename from .cache/plugin/social/de86a83da1783db5d93b108a18b96b22.png
rename to assets/images/social/en/Quad9_For_Organizations/DNS_Forwarder_Best_Practices.png
diff --git a/.cache/plugin/social/3c0a6a188b8fef9cf736cc485d961849.png b/assets/images/social/en/Setup_Guides/Android/Android_9+_(Encrypted).png
similarity index 100%
rename from .cache/plugin/social/3c0a6a188b8fef9cf736cc485d961849.png
rename to assets/images/social/en/Setup_Guides/Android/Android_9+_(Encrypted).png
diff --git a/.cache/plugin/social/f50d76f9c894216b3ab8509201e636a8.png b/assets/images/social/en/Setup_Guides/ChromeOS_(Chromebook).png
similarity index 100%
rename from .cache/plugin/social/f50d76f9c894216b3ab8509201e636a8.png
rename to assets/images/social/en/Setup_Guides/ChromeOS_(Chromebook).png
diff --git a/assets/images/social/en/Setup_Guides/DNS_Forwarders/Windows_Server.png b/assets/images/social/en/Setup_Guides/DNS_Forwarders/Windows_Server.png
new file mode 100644
index 0000000..ad60cdb
Binary files /dev/null and b/assets/images/social/en/Setup_Guides/DNS_Forwarders/Windows_Server.png differ
diff --git a/.cache/plugin/social/ffd04b049fccf2226962eea9be67ac7e.png b/assets/images/social/en/Setup_Guides/Linux_and_BSD/Fedora_38.png
similarity index 100%
rename from .cache/plugin/social/ffd04b049fccf2226962eea9be67ac7e.png
rename to assets/images/social/en/Setup_Guides/Linux_and_BSD/Fedora_38.png
diff --git a/.cache/plugin/social/4b956ca77732b1cc5083fe643ca8306c.png b/assets/images/social/en/Setup_Guides/Linux_and_BSD/FreeBSD_(Encrypted).png
similarity index 100%
rename from .cache/plugin/social/4b956ca77732b1cc5083fe643ca8306c.png
rename to assets/images/social/en/Setup_Guides/Linux_and_BSD/FreeBSD_(Encrypted).png
diff --git a/.cache/plugin/social/fb8554416de38012260fb4c14bd5cddb.png b/assets/images/social/en/Setup_Guides/Linux_and_BSD/Linux_Mint_21.2.png
similarity index 100%
rename from .cache/plugin/social/fb8554416de38012260fb4c14bd5cddb.png
rename to assets/images/social/en/Setup_Guides/Linux_and_BSD/Linux_Mint_21.2.png
diff --git a/.cache/plugin/social/20755e15cc1f82126f80a2565e3fa5d4.png b/assets/images/social/en/Setup_Guides/Linux_and_BSD/MX_Linux_23.png
similarity index 100%
rename from .cache/plugin/social/20755e15cc1f82126f80a2565e3fa5d4.png
rename to assets/images/social/en/Setup_Guides/Linux_and_BSD/MX_Linux_23.png
diff --git a/.cache/plugin/social/d20b8f54930ac6e71cfd0b03117924df.png b/assets/images/social/en/Setup_Guides/Linux_and_BSD/OpenBSD_(Encrypted).png
similarity index 100%
rename from .cache/plugin/social/d20b8f54930ac6e71cfd0b03117924df.png
rename to assets/images/social/en/Setup_Guides/Linux_and_BSD/OpenBSD_(Encrypted).png
diff --git a/.cache/plugin/social/b665236659d416e75e419c6af9a14609.png b/assets/images/social/en/Setup_Guides/Linux_and_BSD/Ubuntu_20.04_and_22.04.png
similarity index 100%
rename from .cache/plugin/social/b665236659d416e75e419c6af9a14609.png
rename to assets/images/social/en/Setup_Guides/Linux_and_BSD/Ubuntu_20.04_and_22.04.png
diff --git a/.cache/plugin/social/1c06b6564b57e614b36a65d12c7e2945.png b/assets/images/social/en/Setup_Guides/Linux_and_BSD/Ubuntu_22.04_(Encrypted).png
similarity index 100%
rename from .cache/plugin/social/1c06b6564b57e614b36a65d12c7e2945.png
rename to assets/images/social/en/Setup_Guides/Linux_and_BSD/Ubuntu_22.04_(Encrypted).png
diff --git a/.cache/plugin/social/ea8684ba8dd6e1e223587077630f9a33.png b/assets/images/social/en/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted).png
similarity index 100%
rename from .cache/plugin/social/ea8684ba8dd6e1e223587077630f9a33.png
rename to assets/images/social/en/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted).png
diff --git a/.cache/plugin/social/d9e25cfe516c514096708641f0e2d91b.png b/assets/images/social/en/Setup_Guides/Miscellaneous/Cloudflared_and_Quad9.png
similarity index 100%
rename from .cache/plugin/social/d9e25cfe516c514096708641f0e2d91b.png
rename to assets/images/social/en/Setup_Guides/Miscellaneous/Cloudflared_and_Quad9.png
diff --git a/.cache/plugin/social/75b337d93646e0c3ccce500f9da12f49.png b/assets/images/social/en/Setup_Guides/Miscellaneous/Pi-Hole.png
similarity index 100%
rename from .cache/plugin/social/75b337d93646e0c3ccce500f9da12f49.png
rename to assets/images/social/en/Setup_Guides/Miscellaneous/Pi-Hole.png
diff --git a/.cache/plugin/social/929acd96f4c0eae7d7cd88354678597c.png b/assets/images/social/en/Setup_Guides/Open-Source_Routers/IPFire_(Encrypted).png
similarity index 100%
rename from .cache/plugin/social/929acd96f4c0eae7d7cd88354678597c.png
rename to assets/images/social/en/Setup_Guides/Open-Source_Routers/IPFire_(Encrypted).png
diff --git a/.cache/plugin/social/3c51fd09f8ed30eaec841fb2045ad5b1.png b/assets/images/social/en/Setup_Guides/Open-Source_Routers/MikroTik_RouterOS_(Encrypted).png
similarity index 100%
rename from .cache/plugin/social/3c51fd09f8ed30eaec841fb2045ad5b1.png
rename to assets/images/social/en/Setup_Guides/Open-Source_Routers/MikroTik_RouterOS_(Encrypted).png
diff --git a/.cache/plugin/social/7348cf37779c449c073ddfd6659f4d64.png b/assets/images/social/en/Setup_Guides/Open-Source_Routers/OPNsense_(Encrypted).png
similarity index 100%
rename from .cache/plugin/social/7348cf37779c449c073ddfd6659f4d64.png
rename to assets/images/social/en/Setup_Guides/Open-Source_Routers/OPNsense_(Encrypted).png
diff --git a/.cache/plugin/social/da9a9f80356749ffa0c1e667c25b6971.png b/assets/images/social/en/Setup_Guides/Open-Source_Routers/OpenWrt_LuCi.png
similarity index 100%
rename from .cache/plugin/social/da9a9f80356749ffa0c1e667c25b6971.png
rename to assets/images/social/en/Setup_Guides/Open-Source_Routers/OpenWrt_LuCi.png
diff --git a/.cache/plugin/social/ff29475245027f1e46118b05a7b731bb.png b/assets/images/social/en/Setup_Guides/Open-Source_Routers/pfSense_(Encrypted).png
similarity index 100%
rename from .cache/plugin/social/ff29475245027f1e46118b05a7b731bb.png
rename to assets/images/social/en/Setup_Guides/Open-Source_Routers/pfSense_(Encrypted).png
diff --git a/.cache/plugin/social/2e0c3477378e081d14c6e9f8a9d6e373.png b/assets/images/social/en/Setup_Guides/Windows/Windows_10.png
similarity index 100%
rename from .cache/plugin/social/2e0c3477378e081d14c6e9f8a9d6e373.png
rename to assets/images/social/en/Setup_Guides/Windows/Windows_10.png
diff --git a/.cache/plugin/social/2f00fcc6c221a538103f34b881bb59a5.png b/assets/images/social/en/Setup_Guides/Windows/Windows_11_(Encrypted).png
similarity index 100%
rename from .cache/plugin/social/2f00fcc6c221a538103f34b881bb59a5.png
rename to assets/images/social/en/Setup_Guides/Windows/Windows_11_(Encrypted).png
diff --git a/.cache/plugin/social/c4cdbabb72eed4a123bf7417336a1de5.png b/assets/images/social/en/Setup_Guides/iOS/iOS_14_and_later_(Encrypted).png
similarity index 100%
rename from .cache/plugin/social/c4cdbabb72eed4a123bf7417336a1de5.png
rename to assets/images/social/en/Setup_Guides/iOS/iOS_14_and_later_(Encrypted).png
diff --git a/.cache/plugin/social/4a95d019ceb0055466d5d8b3a029d1e1.png b/assets/images/social/en/index.png
similarity index 100%
rename from .cache/plugin/social/4a95d019ceb0055466d5d8b3a029d1e1.png
rename to assets/images/social/en/index.png
diff --git a/.cache/plugin/social/9b98de8ef9c861d31478b303f7859afb.png b/assets/images/social/en/services.png
similarity index 100%
rename from .cache/plugin/social/9b98de8ef9c861d31478b303f7859afb.png
rename to assets/images/social/en/services.png
diff --git a/assets/images/social/es/FAQ.png b/assets/images/social/es/FAQ.png
new file mode 100644
index 0000000..061cc0a
Binary files /dev/null and b/assets/images/social/es/FAQ.png differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Android/Android_9+_(Encriptado).png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Android/Android_9+_(Encriptado).png"
new file mode 100644
index 0000000..3aad387
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Android/Android_9+_(Encriptado).png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/ChromeOS_(Chromebook).png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/ChromeOS_(Chromebook).png"
new file mode 100644
index 0000000..af33eed
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/ChromeOS_(Chromebook).png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Linux_y_BSD/FreeBSD_(Encriptado).png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Linux_y_BSD/FreeBSD_(Encriptado).png"
new file mode 100644
index 0000000..95683a2
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Linux_y_BSD/FreeBSD_(Encriptado).png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Linux_y_BSD/OpenBSD_(Encriptado).png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Linux_y_BSD/OpenBSD_(Encriptado).png"
new file mode 100644
index 0000000..f11f810
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Linux_y_BSD/OpenBSD_(Encriptado).png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Linux_y_BSD/Ubuntu_20.04_y_22.04.png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Linux_y_BSD/Ubuntu_20.04_y_22.04.png"
new file mode 100644
index 0000000..20ce89b
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Linux_y_BSD/Ubuntu_20.04_y_22.04.png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Linux_y_BSD/Ubuntu_22.04_(Encriptado).png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Linux_y_BSD/Ubuntu_22.04_(Encriptado).png"
new file mode 100644
index 0000000..3713db3
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Linux_y_BSD/Ubuntu_22.04_(Encriptado).png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Miscel\303\241neas/Cloudflared_y_Quad9.png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Miscel\303\241neas/Cloudflared_y_Quad9.png"
new file mode 100644
index 0000000..316cb6f
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Miscel\303\241neas/Cloudflared_y_Quad9.png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/IPFire_(Encriptado).png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/IPFire_(Encriptado).png"
new file mode 100644
index 0000000..b6dcfdc
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/IPFire_(Encriptado).png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/MikroTik_RouterOS_(Encriptado).png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/MikroTik_RouterOS_(Encriptado).png"
new file mode 100644
index 0000000..0be2c89
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/MikroTik_RouterOS_(Encriptado).png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/OPNsense_(Encriptado).png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/OPNsense_(Encriptado).png"
new file mode 100644
index 0000000..9f83b14
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/OPNsense_(Encriptado).png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/OpenWrt_(LuCi).png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/OpenWrt_(LuCi).png"
new file mode 100644
index 0000000..fb42a7e
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/OpenWrt_(LuCi).png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/pfSense_(Encriptado).png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/pfSense_(Encriptado).png"
new file mode 100644
index 0000000..b75ccc0
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Open_Source_Enrutadores/pfSense_(Encriptado).png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Windows/Windows_10.png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Windows/Windows_10.png"
new file mode 100644
index 0000000..0570e06
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/Windows/Windows_10.png" differ
diff --git "a/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/iOS/iOS_14_y_despues_(Encriptado).png" "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/iOS/iOS_14_y_despues_(Encriptado).png"
new file mode 100644
index 0000000..40c7a0a
Binary files /dev/null and "b/assets/images/social/es/Gu\303\255as_de_configuraci\303\263n/iOS/iOS_14_y_despues_(Encriptado).png" differ
diff --git a/assets/images/social/es/Quad9_para_organizaciones/Recomendaciones_para_el_reenviardor_DNS.png b/assets/images/social/es/Quad9_para_organizaciones/Recomendaciones_para_el_reenviardor_DNS.png
new file mode 100644
index 0000000..7a28c6a
Binary files /dev/null and b/assets/images/social/es/Quad9_para_organizaciones/Recomendaciones_para_el_reenviardor_DNS.png differ
diff --git a/assets/images/social/es/index.png b/assets/images/social/es/index.png
new file mode 100644
index 0000000..f334537
Binary files /dev/null and b/assets/images/social/es/index.png differ
diff --git a/assets/images/social/es/servicios.png b/assets/images/social/es/servicios.png
new file mode 100644
index 0000000..b388278
Binary files /dev/null and b/assets/images/social/es/servicios.png differ
diff --git a/assets/images/social/fr/FAQ.png b/assets/images/social/fr/FAQ.png
new file mode 100644
index 0000000..061cc0a
Binary files /dev/null and b/assets/images/social/fr/FAQ.png differ
diff --git "a/assets/images/social/fr/Guides_de_configuration/Android/Android_9+_(Crypt\303\251).png" "b/assets/images/social/fr/Guides_de_configuration/Android/Android_9+_(Crypt\303\251).png"
new file mode 100644
index 0000000..d80f37a
Binary files /dev/null and "b/assets/images/social/fr/Guides_de_configuration/Android/Android_9+_(Crypt\303\251).png" differ
diff --git a/assets/images/social/fr/Guides_de_configuration/ChromeOS_(Chromebook).png b/assets/images/social/fr/Guides_de_configuration/ChromeOS_(Chromebook).png
new file mode 100644
index 0000000..af33eed
Binary files /dev/null and b/assets/images/social/fr/Guides_de_configuration/ChromeOS_(Chromebook).png differ
diff --git a/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/Fedora_38.png b/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/Fedora_38.png
new file mode 100644
index 0000000..5f62d8e
Binary files /dev/null and b/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/Fedora_38.png differ
diff --git "a/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/FreeBSD_(Chiffr\303\251).png" "b/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/FreeBSD_(Chiffr\303\251).png"
new file mode 100644
index 0000000..e3d7ac4
Binary files /dev/null and "b/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/FreeBSD_(Chiffr\303\251).png" differ
diff --git "a/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/OpenBSD_(Chiffr\303\251).png" "b/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/OpenBSD_(Chiffr\303\251).png"
new file mode 100644
index 0000000..d530887
Binary files /dev/null and "b/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/OpenBSD_(Chiffr\303\251).png" differ
diff --git a/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/Ubuntu_20.04_et_22.04.png b/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/Ubuntu_20.04_et_22.04.png
new file mode 100644
index 0000000..2cc7274
Binary files /dev/null and b/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/Ubuntu_20.04_et_22.04.png differ
diff --git "a/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/Ubuntu_22.04_(Chiffr\303\251).png" "b/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/Ubuntu_22.04_(Chiffr\303\251).png"
new file mode 100644
index 0000000..62430fc
Binary files /dev/null and "b/assets/images/social/fr/Guides_de_configuration/Linux_et_BSD/Ubuntu_22.04_(Chiffr\303\251).png" differ
diff --git "a/assets/images/social/fr/Guides_de_configuration/MacOS/Big_Sur_et_plus_r\303\251cent_(Chiffr\303\251).png" "b/assets/images/social/fr/Guides_de_configuration/MacOS/Big_Sur_et_plus_r\303\251cent_(Chiffr\303\251).png"
new file mode 100644
index 0000000..04a80d8
Binary files /dev/null and "b/assets/images/social/fr/Guides_de_configuration/MacOS/Big_Sur_et_plus_r\303\251cent_(Chiffr\303\251).png" differ
diff --git a/assets/images/social/fr/Guides_de_configuration/Miscellaneous/Cloudflared_et_Quad9.png b/assets/images/social/fr/Guides_de_configuration/Miscellaneous/Cloudflared_et_Quad9.png
new file mode 100644
index 0000000..695757c
Binary files /dev/null and b/assets/images/social/fr/Guides_de_configuration/Miscellaneous/Cloudflared_et_Quad9.png differ
diff --git a/assets/images/social/fr/Guides_de_configuration/Miscellaneous/Pi-Hole.png b/assets/images/social/fr/Guides_de_configuration/Miscellaneous/Pi-Hole.png
new file mode 100644
index 0000000..721650f
Binary files /dev/null and b/assets/images/social/fr/Guides_de_configuration/Miscellaneous/Pi-Hole.png differ
diff --git "a/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/IPFire_(Chiffr\303\251).png" "b/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/IPFire_(Chiffr\303\251).png"
new file mode 100644
index 0000000..d31e317
Binary files /dev/null and "b/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/IPFire_(Chiffr\303\251).png" differ
diff --git "a/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/MikroTik_RouterOS_(Chiffr\303\251).png" "b/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/MikroTik_RouterOS_(Chiffr\303\251).png"
new file mode 100644
index 0000000..9f2d2a6
Binary files /dev/null and "b/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/MikroTik_RouterOS_(Chiffr\303\251).png" differ
diff --git "a/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/OPNsense_(Chiffr\303\251).png" "b/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/OPNsense_(Chiffr\303\251).png"
new file mode 100644
index 0000000..68aad02
Binary files /dev/null and "b/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/OPNsense_(Chiffr\303\251).png" differ
diff --git a/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/OpenWrt_LuCi.png b/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/OpenWrt_LuCi.png
new file mode 100644
index 0000000..13c797d
Binary files /dev/null and b/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/OpenWrt_LuCi.png differ
diff --git "a/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/pfSense_(Chiffr\303\251).png" "b/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/pfSense_(Chiffr\303\251).png"
new file mode 100644
index 0000000..0f16ae1
Binary files /dev/null and "b/assets/images/social/fr/Guides_de_configuration/Open-Source_Routers/pfSense_(Chiffr\303\251).png" differ
diff --git a/assets/images/social/fr/Guides_de_configuration/Windows/Windows_10.png b/assets/images/social/fr/Guides_de_configuration/Windows/Windows_10.png
new file mode 100644
index 0000000..0570e06
Binary files /dev/null and b/assets/images/social/fr/Guides_de_configuration/Windows/Windows_10.png differ
diff --git "a/assets/images/social/fr/Guides_de_configuration/Windows/Windows_11_(Crypt\303\251).png" "b/assets/images/social/fr/Guides_de_configuration/Windows/Windows_11_(Crypt\303\251).png"
new file mode 100644
index 0000000..fd24d36
Binary files /dev/null and "b/assets/images/social/fr/Guides_de_configuration/Windows/Windows_11_(Crypt\303\251).png" differ
diff --git a/assets/images/social/fr/Quad9_pour_les_organisations/Meilleures pratiques du DNS forwarder.png b/assets/images/social/fr/Quad9_pour_les_organisations/Meilleures pratiques du DNS forwarder.png
new file mode 100644
index 0000000..f565733
Binary files /dev/null and b/assets/images/social/fr/Quad9_pour_les_organisations/Meilleures pratiques du DNS forwarder.png differ
diff --git a/assets/images/social/fr/index.png b/assets/images/social/fr/index.png
new file mode 100644
index 0000000..95a370f
Binary files /dev/null and b/assets/images/social/fr/index.png differ
diff --git a/assets/images/social/fr/services.png b/assets/images/social/fr/services.png
new file mode 100644
index 0000000..1c11f62
Binary files /dev/null and b/assets/images/social/fr/services.png differ
diff --git a/assets/images/social/ro/FAQs.png b/assets/images/social/ro/FAQs.png
new file mode 100644
index 0000000..3b6619d
Binary files /dev/null and b/assets/images/social/ro/FAQs.png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/Android/Android_9+_(Criptat).png b/assets/images/social/ro/Ghiduri_de_configurare/Android/Android_9+_(Criptat).png
new file mode 100644
index 0000000..7a5ce4e
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/Android/Android_9+_(Criptat).png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/ChromeOS_(Chromebook).png b/assets/images/social/ro/Ghiduri_de_configurare/ChromeOS_(Chromebook).png
new file mode 100644
index 0000000..af33eed
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/ChromeOS_(Chromebook).png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/DNS_Forwarders/Windows_Server.png b/assets/images/social/ro/Ghiduri_de_configurare/DNS_Forwarders/Windows_Server.png
new file mode 100644
index 0000000..ad60cdb
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/DNS_Forwarders/Windows_Server.png differ
diff --git "a/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/Fedora_38.png" "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/Fedora_38.png"
new file mode 100644
index 0000000..5f62d8e
Binary files /dev/null and "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/Fedora_38.png" differ
diff --git "a/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/FreeBSD_(Criptat).png" "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/FreeBSD_(Criptat).png"
new file mode 100644
index 0000000..32bb46c
Binary files /dev/null and "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/FreeBSD_(Criptat).png" differ
diff --git "a/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/Linux_Mint_21.2.png" "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/Linux_Mint_21.2.png"
new file mode 100644
index 0000000..ebbb31c
Binary files /dev/null and "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/Linux_Mint_21.2.png" differ
diff --git "a/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/MX_Linux_23.png" "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/MX_Linux_23.png"
new file mode 100644
index 0000000..c7c991c
Binary files /dev/null and "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/MX_Linux_23.png" differ
diff --git "a/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/OpenBSD_(Criptat).png" "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/OpenBSD_(Criptat).png"
new file mode 100644
index 0000000..c856f38
Binary files /dev/null and "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/OpenBSD_(Criptat).png" differ
diff --git "a/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/Ubuntu_20.04_and_22.04.png" "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/Ubuntu_20.04_and_22.04.png"
new file mode 100644
index 0000000..9dca16c
Binary files /dev/null and "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/Ubuntu_20.04_and_22.04.png" differ
diff --git "a/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/Ubuntu_22.04_(Criptat).png" "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/Ubuntu_22.04_(Criptat).png"
new file mode 100644
index 0000000..b65d300
Binary files /dev/null and "b/assets/images/social/ro/Ghiduri_de_configurare/Linux_\310\231i_BSD/Ubuntu_22.04_(Criptat).png" differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/MacOS/Big_Sur+_(Criptat).png b/assets/images/social/ro/Ghiduri_de_configurare/MacOS/Big_Sur+_(Criptat).png
new file mode 100644
index 0000000..b503c8c
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/MacOS/Big_Sur+_(Criptat).png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/Miscellaneous/Cloudflared_and_Quad9.png b/assets/images/social/ro/Ghiduri_de_configurare/Miscellaneous/Cloudflared_and_Quad9.png
new file mode 100644
index 0000000..8dedca4
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/Miscellaneous/Cloudflared_and_Quad9.png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/Miscellaneous/Pi-Hole.png b/assets/images/social/ro/Ghiduri_de_configurare/Miscellaneous/Pi-Hole.png
new file mode 100644
index 0000000..721650f
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/Miscellaneous/Pi-Hole.png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/IPFire_(Criptat).png b/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/IPFire_(Criptat).png
new file mode 100644
index 0000000..aadaa88
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/IPFire_(Criptat).png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/MikroTik_RouterOS_(Criptat).png b/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/MikroTik_RouterOS_(Criptat).png
new file mode 100644
index 0000000..9ff58cc
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/MikroTik_RouterOS_(Criptat).png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/OPNsense_(Criptat).png b/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/OPNsense_(Criptat).png
new file mode 100644
index 0000000..06ad7a2
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/OPNsense_(Criptat).png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/OpenWrt_LuCi.png b/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/OpenWrt_LuCi.png
new file mode 100644
index 0000000..13c797d
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/OpenWrt_LuCi.png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/pfSense_(Criptat).png b/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/pfSense_(Criptat).png
new file mode 100644
index 0000000..4a34f94
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/Open-Source_Routers/pfSense_(Criptat).png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/Windows/Windows_10.png b/assets/images/social/ro/Ghiduri_de_configurare/Windows/Windows_10.png
new file mode 100644
index 0000000..0570e06
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/Windows/Windows_10.png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/Windows/Windows_11_(Criptat).png b/assets/images/social/ro/Ghiduri_de_configurare/Windows/Windows_11_(Criptat).png
new file mode 100644
index 0000000..63c6486
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/Windows/Windows_11_(Criptat).png differ
diff --git a/assets/images/social/ro/Ghiduri_de_configurare/iOS/iOS_14+_(Criptat).png b/assets/images/social/ro/Ghiduri_de_configurare/iOS/iOS_14+_(Criptat).png
new file mode 100644
index 0000000..aa8ab46
Binary files /dev/null and b/assets/images/social/ro/Ghiduri_de_configurare/iOS/iOS_14+_(Criptat).png differ
diff --git "a/assets/images/social/ro/Quad9_pentru_Organiza\310\233ii/DNS_Forwarder_Best_Practices.png" "b/assets/images/social/ro/Quad9_pentru_Organiza\310\233ii/DNS_Forwarder_Best_Practices.png"
new file mode 100644
index 0000000..b2b1b05
Binary files /dev/null and "b/assets/images/social/ro/Quad9_pentru_Organiza\310\233ii/DNS_Forwarder_Best_Practices.png" differ
diff --git a/assets/images/social/ro/index.png b/assets/images/social/ro/index.png
new file mode 100644
index 0000000..4c70d25
Binary files /dev/null and b/assets/images/social/ro/index.png differ
diff --git a/assets/images/social/ro/servicii.png b/assets/images/social/ro/servicii.png
new file mode 100644
index 0000000..bde1313
Binary files /dev/null and b/assets/images/social/ro/servicii.png differ
diff --git a/assets/javascripts/bundle.92b07e13.min.js b/assets/javascripts/bundle.92b07e13.min.js
new file mode 100644
index 0000000..969e5c1
--- /dev/null
+++ b/assets/javascripts/bundle.92b07e13.min.js
@@ -0,0 +1,16 @@
+"use strict";(()=>{var Wi=Object.create;var gr=Object.defineProperty;var Vi=Object.getOwnPropertyDescriptor;var Di=Object.getOwnPropertyNames,Vt=Object.getOwnPropertySymbols,zi=Object.getPrototypeOf,yr=Object.prototype.hasOwnProperty,ao=Object.prototype.propertyIsEnumerable;var io=(e,t,r)=>t in e?gr(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r,$=(e,t)=>{for(var r in t||(t={}))yr.call(t,r)&&io(e,r,t[r]);if(Vt)for(var r of Vt(t))ao.call(t,r)&&io(e,r,t[r]);return e};var so=(e,t)=>{var r={};for(var o in e)yr.call(e,o)&&t.indexOf(o)<0&&(r[o]=e[o]);if(e!=null&&Vt)for(var o of Vt(e))t.indexOf(o)<0&&ao.call(e,o)&&(r[o]=e[o]);return r};var xr=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var Ni=(e,t,r,o)=>{if(t&&typeof t=="object"||typeof t=="function")for(let n of Di(t))!yr.call(e,n)&&n!==r&&gr(e,n,{get:()=>t[n],enumerable:!(o=Vi(t,n))||o.enumerable});return e};var Lt=(e,t,r)=>(r=e!=null?Wi(zi(e)):{},Ni(t||!e||!e.__esModule?gr(r,"default",{value:e,enumerable:!0}):r,e));var co=(e,t,r)=>new Promise((o,n)=>{var i=p=>{try{s(r.next(p))}catch(c){n(c)}},a=p=>{try{s(r.throw(p))}catch(c){n(c)}},s=p=>p.done?o(p.value):Promise.resolve(p.value).then(i,a);s((r=r.apply(e,t)).next())});var lo=xr((Er,po)=>{(function(e,t){typeof Er=="object"&&typeof po!="undefined"?t():typeof define=="function"&&define.amd?define(t):t()})(Er,(function(){"use strict";function e(r){var o=!0,n=!1,i=null,a={text:!0,search:!0,url:!0,tel:!0,email:!0,password:!0,number:!0,date:!0,month:!0,week:!0,time:!0,datetime:!0,"datetime-local":!0};function s(k){return!!(k&&k!==document&&k.nodeName!=="HTML"&&k.nodeName!=="BODY"&&"classList"in k&&"contains"in k.classList)}function p(k){var ft=k.type,qe=k.tagName;return!!(qe==="INPUT"&&a[ft]&&!k.readOnly||qe==="TEXTAREA"&&!k.readOnly||k.isContentEditable)}function c(k){k.classList.contains("focus-visible")||(k.classList.add("focus-visible"),k.setAttribute("data-focus-visible-added",""))}function l(k){k.hasAttribute("data-focus-visible-added")&&(k.classList.remove("focus-visible"),k.removeAttribute("data-focus-visible-added"))}function f(k){k.metaKey||k.altKey||k.ctrlKey||(s(r.activeElement)&&c(r.activeElement),o=!0)}function u(k){o=!1}function d(k){s(k.target)&&(o||p(k.target))&&c(k.target)}function y(k){s(k.target)&&(k.target.classList.contains("focus-visible")||k.target.hasAttribute("data-focus-visible-added"))&&(n=!0,window.clearTimeout(i),i=window.setTimeout(function(){n=!1},100),l(k.target))}function L(k){document.visibilityState==="hidden"&&(n&&(o=!0),X())}function X(){document.addEventListener("mousemove",J),document.addEventListener("mousedown",J),document.addEventListener("mouseup",J),document.addEventListener("pointermove",J),document.addEventListener("pointerdown",J),document.addEventListener("pointerup",J),document.addEventListener("touchmove",J),document.addEventListener("touchstart",J),document.addEventListener("touchend",J)}function ee(){document.removeEventListener("mousemove",J),document.removeEventListener("mousedown",J),document.removeEventListener("mouseup",J),document.removeEventListener("pointermove",J),document.removeEventListener("pointerdown",J),document.removeEventListener("pointerup",J),document.removeEventListener("touchmove",J),document.removeEventListener("touchstart",J),document.removeEventListener("touchend",J)}function J(k){k.target.nodeName&&k.target.nodeName.toLowerCase()==="html"||(o=!1,ee())}document.addEventListener("keydown",f,!0),document.addEventListener("mousedown",u,!0),document.addEventListener("pointerdown",u,!0),document.addEventListener("touchstart",u,!0),document.addEventListener("visibilitychange",L,!0),X(),r.addEventListener("focus",d,!0),r.addEventListener("blur",y,!0),r.nodeType===Node.DOCUMENT_FRAGMENT_NODE&&r.host?r.host.setAttribute("data-js-focus-visible",""):r.nodeType===Node.DOCUMENT_NODE&&(document.documentElement.classList.add("js-focus-visible"),document.documentElement.setAttribute("data-js-focus-visible",""))}if(typeof window!="undefined"&&typeof document!="undefined"){window.applyFocusVisiblePolyfill=e;var t;try{t=new CustomEvent("focus-visible-polyfill-ready")}catch(r){t=document.createEvent("CustomEvent"),t.initCustomEvent("focus-visible-polyfill-ready",!1,!1,{})}window.dispatchEvent(t)}typeof document!="undefined"&&e(document)}))});var qr=xr((dy,On)=>{"use strict";/*!
+ * escape-html
+ * Copyright(c) 2012-2013 TJ Holowaychuk
+ * Copyright(c) 2015 Andreas Lubbe
+ * Copyright(c) 2015 Tiancheng "Timothy" Gu
+ * MIT Licensed
+ */var $a=/["'&<>]/;On.exports=Pa;function Pa(e){var t=""+e,r=$a.exec(t);if(!r)return t;var o,n="",i=0,a=0;for(i=r.index;i