9.9.9.9
Quad9 has several different service offerings for recursive DNS features. Each is represented by a different IP address (or, in some cases, hostname), which you use to configure your systems. See our Set Up Guides for how to configure the most commonly used devices. 9.9.9.9 2620:fe::fe https://dns.quad9.net/dns-query tls://dns.quad9.net Secured w/ECS: Malware blocking, DNSSEC Validation, ECS enabled internal note to add link to faq after page is done. https://quad9.net/support/faq/#edns 9.9.9.11 2620:fe::11 https://dns11.quad9.net/dns-query tls://dns11.quad9.net Unsecured: No Malware blocking, no DNSSEC validation 9.9.9.10 2620:fe::10 https://dns10.quad9.net/dns-query TLS Hints: If you have devices that need to be configured by IP address, make sure to put ALL the IP addresses listed for your selected service into any configuration areas. Putting in just one of the three will leave you vulnerable to single-path failures if they should occur. Even if you do not yet have IPv6, please add those addresses from the list so you don’t have to remember later – most systems will ignore IPv6 addresses if they cannot be used. Android Configuration Options Quad9 provides an app for Android users, which greatly simplifies configuration of Quad9 DNS for those devices. The app includes other features such as a full log of DNS queries, notification on block events, and encryption (using DNS-over-TLS) of all queries to the Quad9 systems. It is also possible to use Quad9 services using the Private DNS feature of Android, click here to find out how to do it. DNSCrypt Configuration Options DNSCrypt is a less frequently used DNS encryption protocol, but it is supported by Quad9. To read more about DNSCrypt, see our DNSCrypt post here, or you may download the configuration files and stamps by following https://quad9.net/dnscrypt/quad9-resolvers.toml Quad9 offers several service profiles, each with a different IP address and feature set. The recommended configuration includes malware blocking and DNSSEC validation. Additional profiles are available for ECS-enabled deployments or expert configurations without filtering. All services support IPv4, IPv6, DNS over HTTPS, DNS over TLS, and DNSCrypt. Quad9 systems are distributed across 260+ locations in 115+ countries, located primarily at Internet Exchange Points — where the highest concentration of network interconnections occur. Anycast routing directs every query to the closest operational system automatically. See the live status map to check current availability worldwide. If you’re trying to reach a site that isn’t loading, or want to verify that a known malicious domain is being blocked, use this tool to check a hostname or domain against Quad9’s threat list. Enter any domain to see whether Quad9 is blocking it — and why. Step-by-step instructions for configuring Quad9 on the most commonly used devices and operating systems — routers, Windows, macOS, Android, iOS, and more. Set it up once at the router level and protection extends to every device on the network automatically. Check the FAQ for answers to common questions about security, privacy, reliability, and configuration. For anything not covered there, use the contact form to reach the Quad9 team directly. You can also verify whether your device is currently using Quad9 at on.quad9.net, and check live service status at uptime.quad9.net.
Service Addresses
& Features
QUICK LINKS
Recursive DNS Server Addresses and Features – Service based configuration:
Recommended: Malware Blocking, DNSSEC Validation
this is the most typical configuration
IPv4
149.112.112.112
IPv6
2620:fe::9
HTTPS
TLS
IPv4
149.112.112.11
IPv6
2620:fe::fe:11
HTTPS
TLS
for experts only!
IPv4
149.112.112.10
IPv6
2620:fe::fe:10
HTTPS
tls://dns10.quad9.net
Find the “Quad9 Connect” app on the F-Droid Store:
In This Section
Service Addresses & Features
Quad9 Locations
Search Blocked Domains
Setup Guides
Get Support