stubby
« Back to VersTracker
Description:
DNS privacy enabled stub resolver service based on getdns
Type: Formula  |  Tracked Since: Dec 28, 2025
Links: Homepage  |  formulae.brew.sh
Category: Networking
Tags: dns privacy encryption networking security
Install: brew install stubby
About:
Stubby is a DNS privacy enabled stub resolver service that acts as a local DNS forwarder. It sends all outgoing DNS queries to upstream DNS-over-TLS (DoT) servers, preventing surveillance and manipulation of DNS traffic by third parties. This daemon provides a secure and privacy-respecting alternative to traditional DNS resolvers.
Key Features:
  • Encrypts DNS queries using DNS-over-TLS (DoT)
  • Acts as a local forwarder to protect all device traffic
  • Supports strict privacy profiles and multiple upstreams
  • Lightweight daemon written in C using getdns
Use Cases:
  • Protecting privacy by encrypting DNS traffic on local networks
  • Bypassing ISP DNS censorship or manipulation
  • Securing DNS queries on untrusted Wi-Fi networks
Alternatives:
  • cloudflared – Cloudflare's proxy daemon that also supports DNS-over-HTTPS (DoH)
  • unbound – Full recursive resolver that can be configured for DoT, but heavier than Stubby
Version History
Detected Version Rev Change Commit
Sep 15, 2025 11:05am 1 VERSION_BUMP c5dec2a3
Nov 8, 2024 11:20pm 1 VERSION_BUMP 546184dd
Sep 13, 2024 1:13am 1 VERSION_BUMP 98e228da