HostuxDNS

Encrypted public DNS with DoH, DoT and DoQ, available without an account, with simple configuration guides for browsers, systems and local resolvers.

HostuxDNS is a public DNS resolver provided by Hostux to encrypt DNS queries and avoid relying only on the DNS service from your ISP or local network. The service supports several modern protocols, including DNS over HTTPS (DoH), DNS over TLS (DoT), DNS over QUIC (DoQ) and DNS over HTTPS/3 (DoH3), depending on your client or operating system.

In practice, HostuxDNS lets you configure encrypted DNS without creating an account, with concrete guides for browsers, Android, Windows, Apple systems, Linux, OpenWrt and local resolvers such as Unbound, AdGuard Home and Pi-hole. It is useful if you want a privacy-oriented public DNS service built on free software and simple to deploy on several devices.

If you want to use the service quickly, the main settings are:

• DoH: https://dns.hostux.net/dns-query
• DoH with ads / tracking blocking: https://dns.hostux.net/ads
• DoT: dns.hostux.net on port 853
• DoQ: quic://dns.hostux.net
• Classic DNS: 46.226.108.173 and 46.226.109.82

The right choice mostly depends on the client: DoH works well in browsers, DoT is often simple at system level, and DoQ targets compatible clients that want a dedicated encrypted DNS transport.

• Limit exposure of DNS queries to the local network or ISP.
• Choose the most suitable protocol for your browser, system or local resolver.
• Use an optional endpoint with ads and tracking blocking through /ads.
• Keep DNS resolution consistent across several personal devices or a small homelab.

Encrypted DNS improves an important privacy layer, but it does not replace a VPN, Tor or a broader privacy strategy.

• Queries pass through several termination, routing, rate-limiting and cache layers before reaching the recursive resolver.
• HTTPS traffic is handled on port 443, while DoT and DoQ use port 853.
• The /ads endpoint routes queries to a dedicated instance that applies advertising and tracking filtering before forwarding to the main resolver.
• The service relies on Nginx, HAProxy, dnsdist and Unbound, with DNSSEC validation on the resolver side.

• Configure Firefox, Chrome, Chromium or Edge with a custom DoH endpoint.
• Enable Private DNS on Android with DoT.
• Configure Windows 11 with system-level DoH.
• Deploy HostuxDNS in a local resolver, OpenWrt router, Pi-hole, Unbound or AdGuard Home.
• Use Apple profiles on iPhone, iPad or macOS for quick setup.

The guides below help configure the service for different uses.

• Device and use-case setup guide
• Configure encrypted DNS in Firefox
• Configure Private DNS on Android
• DoH vs DoT
• Architecture and stack
• Support and contact

Service: dns.hostux.net

Alias Email for disposable email aliases.