Setting DNS Over TLS (DOT) using Systemd Resolved

PodjokCorner - Beberapa tangkapan layar sebelum dan sesuah dilakukan setting DOT:

⚙️ Konfigurasi

# Setting systemd-resolved
sudo vim /etc/systemd/resolved.conf

# File: /etc/systemd/resolved.conf
[Resolve]
DNS=1.1.1.1 1.0.0.1 2606:4700:4700::1111 2606:4700:4700::1001
FallbackDNS=8.8.8.8 8.8.4.4 2001:4860:4860::8888 2001:4860:4860::8844
DNSOverTLS=yes
DNSSEC=yes
Domains=~.

🧪 Restart service

sudo systemctl restart systemd-resolved
# optional, sudo systemctl enable systemd-resolved
sudo systemctl restart NetworkManager

✅ Cek status resolvectl

> resolvectl status
Global
           Protocols: +LLMNR +mDNS +DNSOverTLS DNSSEC=yes/supported
    resolv.conf mode: foreign
  Current DNS Server: 1.0.0.1
         DNS Servers: 1.1.1.1 1.0.0.1 2606:4700:4700::1111 2606:4700:4700::1001
Fallback DNS Servers: 8.8.8.8 8.8.4.4 2001:4860:4860::8888 2001:4860:4860::8844
          DNS Domain: ~.

🎛️ Optional -- Bila cara di atas belum berhasil, coba langkah di bawah ini

cat /etc/NetworkManager/conf.d/10-dns-systemd-resolved.conf

buat file tersebut bila belum ada, selanjutnya isi file tersebut dengan script diseperti ini

# File: /etc/NetworkManager/conf.d/10-dns-systemd-resolved.conf
[main]
dns=systemd-resolved
systemd-resolved=false

🍔 DONE ☕