Taming systemd-resolved: Tips for a Saner DNS Setup on Linux

Introduction to systemd-resolved

I’ve been working with Linux systems for years, and one thing that’s become increasingly important is DNS resolution. systemd-resolved is a DNS resolver component of the systemd suite, designed to provide a flexible and secure way to resolve domain names on Linux systems. As of 2026, it’s become a crucial part of many Linux distributions, including Ubuntu, Debian, and Fedora. However, its default configuration may not be suitable for all users, especially those who require more control over their DNS setup.

[Read More]

Troubleshooting DNS Leaks on a Small Linux Server with systemd-resolved

Introduction to DNS Leaks

I’ve seen DNS leaks compromise even the most secure Linux setups - it’s a common issue that can expose your online activities. When running a small Linux server, ensuring the security and integrity of your DNS setup is crucial. A DNS leak occurs when your system sends DNS queries to an unintended DNS server, potentially revealing your browsing history. In this article, we’ll focus on troubleshooting DNS leaks on a small Linux server using systemd-resolved.

[Read More]

Resolving the systemd-resolved Conundrum: When Split DNS and Local Hostnames Collide

Introduction to systemd-resolved

I’ve seen systemd-resolved cause its fair share of issues with split DNS and local hostnames, but it’s actually a powerful tool for managing DNS resolution on Linux systems. As part of the systemd ecosystem, it aims to improve the DNS resolution process and provide better integration with other systemd services.

Understanding Split DNS

Split DNS, or split-horizon DNS, is a technique used to provide different DNS responses based on the client’s location. This is commonly used in environments where internal and external DNS zones need to be separated - think of a company with an internal DNS zone for its internal network and a separate external DNS zone for its public-facing services. Don’t bother with split DNS if you don’t need it, but if you do, systemd-resolved can be configured to handle it.

[Read More]

When systemd-resolved Takes Over: Taming DNS Surprises with resolv.conf and Stub Resolvers

Introduction to systemd-resolved

I’ve seen this go wrong when people upgrade to a modern Linux distribution and suddenly find that their DNS settings aren’t working as expected. This is because systemd-resolved has taken over DNS resolution, and managing it can be a bit different from the old way of editing /etc/resolv.conf directly. In this article, we’ll explore how to work with systemd-resolved and manage DNS settings effectively.

Understanding systemd-resolved

systemd-resolved is a part of the systemd suite, and it’s designed to provide a robust and flexible way to manage DNS resolution on Linux systems. The real trick is that it acts as a stub resolver, which means it doesn’t perform the actual DNS lookups itself but instead forwards requests to a real DNS resolver. This approach allows for better integration with the system’s networking stack and provides features like DNSSEC validation and caching.

[Read More]

DNS Over TLS (DoT)

Enhancing Privacy

These tags should help categorize the content and make it easier for readers to find related posts on your blog.

As the internet becomes an increasingly integral part of our lives, privacy and security concerns continue to grow. One of the most overlooked aspects of online communication is the Domain Name System (DNS). DNS is essential for translating human-readable domain names (like example.com) into IP addresses that computers can use to route requests. However, the traditional method of DNS queries is insecure, allowing potential eavesdroppers to track and intercept a user’s online activity. To address this concern, DNS over TLS (DoT) has emerged as an effective solution.

[Read More]