Improve network security with DNS shield

Making sure your DNS is secure is important. This is especially true in UniFi ecosystems where services like remote management and updating depend on reliable DNS resolution. This article will dive into how UniFi handles DNS issues and how you can tweak DNS settings to improve your network's performance and security.

Let's get in!

Table of Contents

• DNS in UniFi systems
• Why switch DNS servers?
• Step-by-Step guide to re-configuring your DNS settings
• Common DNS Issues and How to Solve Them
• Final thoughts

DNS in UniFi systems

DNS is an important network service that translates domain names into IP addresses. UniFi devices require proper DNS configuration to perform functions such as updating and remote management.

These devices typically use the DNS server provided by your internet service provider (ISP). However, when this default setting doesn't meet your needs, or if you're experiencing issues, switching to a public DNS server like 1.1.1.1 or 8.8.8.8 might be a better option.

Why switch DNS servers?

Using a reliable public DNS server can offer faster response times and improved security compared to some ISP-provided DNS services. It is extra beneficial in situations where ISP DNS servers are slow or not updated to resolve specific domains critical for your UniFi devices. However, be cautious when configuring custom internal DNS servers. They may not update quickly enough to resolve necessary domains or might block them outright.

Here is how you can go ahead and configure your DNS settings

Step-by-Step guide to re-configuring your DNS settings

1. UniFi Gateways:

   • Navigate to UniFi Network > Settings > Internet > DNS Server.
   • Enter the new DNS server addresses.

2. Cloud Keys and Non-Gateway Consoles:

   • Access UniFi OS > Console Settings.
   • Check if the IP configuration is set to DHCP or Static. If static, enter the new DNS Server and apply changes. If DHCP, modify the DNS server settings from your DHCP server.

3. Expedite DNS Changes:

   • Changes will take effect after the DHCP lease expires, usually after 24 hours. To expedite this, restart your device.

Common DNS Issues and How to Solve Them

DNS resolution may fail due to restrictions set by upstream firewalls, gateways, or ISP modems. Make sure that UDP Port 53, which is used by DNS, is not being blocked. If issues persist, check these settings or consult your administrator/MSP for troubleshooting.

Final thoughts

Proper DNS configuration is essential for the operation of UniFi devices, affecting everything from performance to security. If you are not sure about handling DNS settings or require a more robust solution, consider UniHosted.

We offer managed DNS solutions for UniFi systems, making sure that your network remains secure and efficient without the hassle of manual configurations. Especially, if you are an MSP or IT-service business looking for flexible and scalable network deployments, this is something for you.