Ubuntu 20.04 with netplan throws malformed address error when cloudflare dns over tls ( is used. Netplan only excepts

Is there a way to configure DoT or DoH with netplan?

enter image description here

2 Answers 2


As indicated by the error message, netplan does not support specifying a non-default port for DNS servers; it will only use port 53. I see that systemd-resolved does support non-default ports, so this is a valid feature request for netplan, best reported at https://bugs.launchpad.net/netplan.

I have personally never heard before of providers offering DNSSEC on an alternate port. You might check with your provider if they have a DNSSEC endpoint running on port 53 but a different IP address.

  • There is a difference between Dnssec, dns over tls, and dns over https. Dns over tls runs on port 853. DNS over https runs on 443. DNSsec does not use a port. It adds digital signatures to DNS data. This link explains it blog.apnic.net/2018/08/20/dnssec-and-dns-over-tls
    – m0ng00se
    Dec 16, 2020 at 23:03

As @slangasek pointed out configuring port 853 for an dns entry with netplan is not supported. /etc/systemd/resolved.conf is the current way in ubuntu.

# See resolved.conf(5) for details


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.