Network-Setup/CoreDNS/Corefile

dns://.:53 {
  forward . 5.1.66.255:53 [2001:678:e68:f000::]:53 185.150.99.255 [2001:678:ed0:f000::]:53 91.239.100.100 [2001:67c:28a4::]:53 89.233.43.71 [2a01:3a0:53:53::]:53 {
    prefer_udp
    policy round_robin
  }
  cache {
    success 5000
    denial 2500
  }
}

dns://.:5353 {
  forward . 127.0.0.1:5051 127.0.0.1:5052 127.0.0.1:5053 127.0.0.1:5054 127.0.0.1:5055 127.0.0.1:5056 127.0.0.1:5057 {
    policy round_robin
  }
  cache {
    success 5000
    denial 2500
  }
}

tls://.:853 {}

https://.:443 {}

##########

127.0.0.1:5051 {
  forward . tls://[2a01:4f8:251:554::2] tls://5.9.164.112 {
    tls_servername dns3.digitalcourage.de
    prefer_udp
    policy round_robin
  }
}

127.0.0.1:5052 {
  forward . tls://5.1.66.255 tls://185.150.99.255 tls://[2001:678:ed0:f000::] tls://[2001:678:e68:f000::] {
    tls_servername dot.ffmuc.net
    prefer_udp
    policy round_robin
  }
}

127.0.0.1:5053 {
  forward . tls://185.95.218.43 tls://185.95.218.42 tls://[2a05:fc84::43] tls://[2a05:fc84::42] {
    tls_servername dns.digitale-gesellschaft.ch
    prefer_udp
    policy round_robin
  }
}

127.0.0.1:5054 {
  forward . tls://89.233.43.71 tls://[2a01:3a0:53:53::] {
    tls_servername unicast.censurfridns.dk
    prefer_udp
    policy round_robin
  }
}

127.0.0.1:5055 {
  forward . tls://91.239.100.100 tls://[2001:67c:28a4::] {
    tls_servername anycast.censurfridns.dk
    prefer_udp
    policy round_robin
  }
}

127.0.0.1:5056 {
  forward . tls://91.239.100.100 tls://[2001:67c:28a4::] {
    tls_servername anycast.uncensoreddns.org
    prefer_udp
    policy round_robin
  }
}

127.0.0.1:5057 {
  forward . tls://89.233.43.71 tls://[2a01:3a0:53:53::] {
    tls_servername unicast.uncensoreddns.org
    prefer_udp
    policy round_robin
  }
}