Configure Ubiquiti to use 1.1.1.1 as DNS server

Search for a command to run...

Phew, that was a lot. I'm always surprised how simple solutions contain so much detail and nuance when I try to explain them. I hope I conveyed the message that A-Frame simplifies code within a module or class by separating the infrastructure compone...

No architecture is complete without an easy way to test the functionality. My recommended strategy is to use two types of tests: unit and integration. As far as test setup goes, there is no clear winner for a test framework. xUnit.NET, NUnit and the ...

The examples in the previous posts seem really nice for simple scenarios. How do I approach more advanced use cases? The big scenarios are: I need multiple pieces of data from different sources I need to perform an infrastructure call in the middle...

I’ve shown how I write code using the A-Frame architecture without help. Yet I find a library or framework very convenient when using advanced techniques. Wolverine is at its core a messaging framework, but goes well beyond that. It has an in-memory ...

Now the expected structure is clear, let's take a look at the code. I will start with a minimal API implementation to demonstrate that there is no need for a framework to implement this architecture. I do know of a framework that makes A-Frame effort...

Recently, Cloudflare launched the privacy conscious (and very fast) DNS service 1.1.1.1. I want to use it to resolve all my DNS needs. Setting this up via my Ubiquiti network was super easy.
All I had to do was go to my CloudKey controller that's registered in Unifi cloud portal. Once logged in, I went to Settings (icon in the lower left part of the screen), navigate to the Networks tab. Select the LAN to upgrade to the 1.1.1.1 DNS service. There is a setting named DHCP Name Server that is set to Auto. Set it to Manual and enter the two DNS server addresses: 1.1.1.1 and 1.0.0.1.



All that stands between me and the awesome 1.1.1.1 DNS service is a simple reboot of all network devices. Enjoy the new DNS service, although in practice you won't notice all that much. Except improved privacy of course.
Update: Not all traffic is safe yet, because at this moment Unifi products don't use DNS-over-HTTPS (DoH). There is a feature request going to get the Unifi Security Gateway to communicate with DNS servers over DoH if it's supported by the DNS Resolver. 1.1.1.1 does support DoH, but Unifi lacks support at this moment. If you want to use DoH, the "easiest" way is to host your own DNS Server and configure that to talk to 1.1.1.1 over DoH. You can find a guide on Scott Helme's blog.