---
metadata:
  - name: generator
    content: Diplodoc Platform v5.50.2
alternate:
  - https://yandex.com/support/dns/en/keenetic.md
  - https://yandex.com/support/dns/ru/keenetic.md
---
> **Documentation Index:** Fetch the complete configuration index at https://yandex.com/support/dns/en/llms.txt

# Setting up on Keenetic routers

![](_images/keenetic_logo.png)

Yandex DNS is built into Keenetic routers. It can be configured for individual devices or for all devices at once.


{% cut "**KeeneticOS 3.8 and above**" %}

{% note info %}

If auto-update is enabled, KeeneticOS automatically updates to the latest version.

{% endnote %}

1. [Register](https://help.keenetic.com/hc/en/articles/360000394159) your devices on your home network.
1. Open **Management** → **General settings**. Click **Change component set**.
1. In the list of components, select **Use cloud services for content filtering and ad blocking**.

   ![](_images/component-options.png)

Then click **Install update** at the bottom and wait for the installation to complete.
1. On the **Internet filters** page, in the **Filtering mode** field, select **Public DNS resolvers**.
1. Under **Default content filtering profiles**, choose [Yandex DNS modes](https://yandex.com/support/dns/en/ya-dns-modes.md#ya-dns-mode) for the home and guest network. The modes will be applied by default for all devices on the network, including unregistered ones.

   ![](_images/default-filtering-profiles.png)

1. You can set your own [Yandex DNS modes](https://yandex.com/support/dns/en/ya-dns-modes.md#ya-dns-mode) for specific devices, such as for your child's computer.
    1. Under **Content filtering profiles for registered devices**, find the device.
    1. If the device is not there, [register](https://help.keenetic.com/hc/en-us/articles/360000394159) it on your home network.
    1. Select Yandex DNS mode next to the device name.

       ![](_images/registered-devices.png)

{% endcut %}

{% cut "**KeeneticOS below 3.8**" %}

1. [Register](https://help.keenetic.com/hc/en/articles/360000394159) your devices on your home network.
1. On the **Internet filter** page, in the **Filter** field, select **Yandex.DNS**.

   ![](_images/choose_filter.png)

1. Select the [filter profile](https://yandex.com/support/dns/en/ya-dns-modes.md#ya-dns-mode):
    - The **default profile** is used for all devices on the network, including unregistered ones.
    - You can assign a separate profile to individual devices, such as your child's desktop. To do this, select it from the list to the right of the name.

    ![](_images/profiles_and_devices.png)

{% endcut %}

{% cut "**DNS over TLS / HTTPS**" %}

{% note alert %}

DoT and DoH are supported on all Keenetic routers version 3.00 and higher.

{% endnote %}

Increase connection security with DNS over TLS or DNS over HTTP [encryption](https://yandex.com/support/dns/en/how-work.md#DoT-DoH).

To enable the desired protocol:

1. In the web interface, click **Management** → **General Settings**.
1. Go to **Updates and Components**.
1. Click **Component options** and select the protocol you want to install.
1. After selecting the desired protocols, click **Install the update**.

For further configuration, open the **Internet filter** page of the web configurator and go to **Setting up DNS**.


{% list tabs %}

- DNS over TLS

  ![](_images/keenetic-dot.png)
  1. In **DNS Profiles**, click **Add a server**.
  1. In the **Type of DNS server** field, choose **DNS-over-TLS**.
  1. In the **DNS server address** field, specify the IP address of the server with the desired mode and the port:
      - basic: `77.88.8.8:853`
      - safe: `77.88.8.88:853`
      - family: `77.88.8.7:853`
  1. In the **TLS Domain Name** field, enter the name of the server with the desired mode:
      - basic: `common.dot.dns.yandex.net`
      - safe: `safe.dot.dns.yandex.net`
      - family: `family.dot.dns.yandex.net`
  1. If necessary, in the **Connection** field, specify the connection interface (default value: **Any interface**).

- DNS over HTTPS

  ![](_images/keenetic-doh.png)
  1. In **DNS Profiles**, click **Add a server**.
  1. In the **Type of DNS server** field, choose **DNS-over-HTTPS**.
  1. In the **DNS server URL** field, specify the server address with the desired mode:
      - basic: `https://common.dot.dns.yandex.net`
      - safe: `https://safe.dot.dns.yandex.net`
      - family: `https://family.dot.dns.yandex.net`
  1. If necessary, in the **Connection** field, specify the connection interface (default value: **Any interface**).

{% endlist %}


{% endcut %}

Now, the sites with inappropriate content will be blocked on the devices which you have enabled the filtering profile for.


<!-- source: en/_includes/button-faq.md -->
<a href="en/faq">
  <span class="button">Contact support</span>
</a>



<!-- endsource: en/_includes/button-faq.md -->