Skip to content

UniFi

UniFi gateways do not accept a custom DNS-over-HTTPS or DNS-over-TLS server with a path or server name, so the gateway uses plain DNS: the profile’s own IPv6 addresses, and the shared IPv4 addresses with your WAN address linked to the profile.

  1. In the dashboard, on the profile’s Setup page, link your network’s IPv4 address (Link this network when you are at home), or create a DDNS link if your ISP changes it. See Linked IP.

  2. In UniFi Network, open Settings → Internet, select the WAN, and set DNS Server to manual: the IPv4 resolver addresses from the Setup page. Under IPv6, set the DNS servers to the profile’s IPv6 addresses.

  3. In Settings → Networks, for each LAN, leave DHCP DNS Server on Auto (the gateway) so clients ask the gateway, which asks opdns.

  4. Check it works.

Keeping the linked address current

Section titled “Keeping the linked address current”

UniFi’s Dynamic DNS only supports its listed providers. Run the DDNS update from any always-on machine on the network instead, as shown on the Linked IP page.

Limits

Section titled “Limits”
  • No encryption between the gateway and opdns, and no device names.
  • IPv4 queries are identified only while the linked address is current. Queries from an unlinked address are answered unfiltered.