Skip to main content

Before you proceed...

  1. If you set-up CIRA Canadian Shield on your router/gateway then the whole network is protected and you will not need to set-up individual devices. 
  2. It's free! But please still take the time to review and understand the terms and conditions and privacy policy.
  3. Before changing your DNS settings write down your existing IP addresses in case you need to go back. At the bottom of this page is a simple test to see if you have configured it correctly.
  • Summary of CIRA Canadian Shield DNS resolver addresses
      Features IPv4 IPv6 DoH DoT

    Private

    DNS resolution only

    149.112.121.10

    149.112.122.10

    2620:10A:80BB::10

    2620:10A:80BC::10

    https://private.canadianshield.cira.ca/dns-query

    private.canadianshield.cira.ca

    Protected

    Malware and phishing protection

    149.112.121.20

    149.112.122.20

    2620:10A:80BB::20

    2620:10A:80BC::20

    https://protected.canadianshield.cira.ca/dns-query

    protected.canadianshield.cira.ca

    Family

    Protected + blocking pornographic content

    149.112.121.30

    149.112.122.30 

    2620:10A:80BB::30

    2620:10A:80BC::30 

    https://family.canadianshield.cira.ca/dns-query

    family.canadianshield.cira.ca

    It is recommended that you use both IP addresses in configuring your DNS settings for extra redundancy. We do not recommend using a third resolver because if your device has a problem accessing the CIRA Canadian Shield service then you might be browsing unprotected without your knowledge.

     

  • Home router/gateway - recommended

    Below is a general procedure for configuring CIRA Canadian Shield using your router. See your router documentation for a more detailed procedure.

    Note: Rogers Hitron home modems have additional requirements outlined at the end of this general instruction.

    1. From your browser, enter the IP address you use to access your router’s admin console. You may need to consult your manual or search the web for the exact address for your home router/gateway. 

    Some examples of typical IP addresses are:

    • Linksys and Asus routers typically use: http://192.168.1.1
    • Netgear routers typically use: http://192.168.0.1 or http://192.168.1.1
    • D-Link routers typically use: http://192.168.0.1
    • Bell Connection-Hub currently uses http://192.168.2.1
    • Rogers Ignite currently uses http://10.0.0.1
    • Cogego router currently uses http://192.168.0.1
    • Telus modem currently uses http://192.168.1.254

    If you spot an out of date IP address above and want to let us know visit our support page and send us a message (and thank you!)

    2. Enter the router password to access network settings.

    3. Locate the router’s DNS settings.

    Hint
    : Look for the letters “DNS” next to a field that allows two or three sets of numbers, each broken into four groups of one to three numbers.

    4. Enter the Canadian Shield DNS server addresses:

    a. For Private, add the following:

    i. For IPv4, enter: 149.112.121.10 and 149.112.122.10

    ii. For IPv6, enter: 2620:10A:80BB::10 and 2620:10A:80BC::10

    b. For Protected, add the following:

    i. For IPv4, enter: 149.112.121.20 and 149.112.122.20

    ii. For IPv6, enter: 2620:10A:80BB::20 and 2620:10A:80BC::20 

    c. For Family, add the following:

    i. For IPv4, enter: 149.112.121.30 and 149.112.122.30

    ii. For IPv6, enter: 2620:10A:80BB::30 and 2620:10A:80BC::30

    5. Save your new DNS settings.

    Note: We recommend that you flush your DNS resolver cache to ensure that the new settings are applied immediately. See the product documentation for your router for more information.

    You are ready to go – your gateway/router is now using Canadian Shield.

    Extra instructions for Rogers Hitron Modem/Routers

    We have heard from some users that certain versions of the Rogers modem do not allow you to input any manual IPv6 DNS settings.

    The modem has a default setting under Gateway function --> Router Mode --> Dual (IPv4 and IPv6). If you are in Dual mode you can change the DNS settings of the modem to manual and input the two IPv4 DNS entries but if you are not given the option to specify IPv6 then you will still be unprotected because IPv6 is preferred over IPv4.

    The way around this is to change your Router Mode to IPv4 only and then you become protected using Canadian Shield's IPv4 resolver. Note that when you do change the Router Mode it does disconnect your internet for around 2 to 3 minutes.

  • Microsoft Windows Operating System

    For Windows operating systems, configure DNS settings in the TCP/IP Properties window for the appropriate network connection.

    1. From the Start menu, click on the Control Panel.

    2. Click Network and Internet >Network and Sharing Center > Change adapter settings.

    3. Click Change adapter settings.

    4. Right click on the network for which you would like to configure Canadian Shield.

    5. Select Properties.

    6. Do one of the following:

    a. Select Internet Protocol Version 4.
    b. Select Internet Protocol Version 6.


    7. Click Properties.

    8. Click Use the following DNS server address.


    Note: If you have not already noted down the existing DNS server IP addresses, make note of them.

    9. Replace the existing DNS addresses with one of the following (depending on the level of service you want to use):

    a. For Private, add the following:

    i. For IPv4, enter: 149.112.121.10 and 149.112.122.10

    ii. For IPv6, enter: 2620:10A:80BB::10 and 2620:10A:80BC::10

    b. For Protected, add the following:

    i. For IPv4, enter: 149.112.121.20 and 149.112.122.20 

    ii. For IPv6, enter: 2620:10A:80BB::20 and 2620:10A:80BC::20 

    c. For Family, add the following:

    i. For IPv4, enter: 149.112.121.30 and 149.112.122.30  

    ii. For IPv6, enter: 2620:10A:80BB::30 and 2620:10A:80BC::30 

    10. Click OK.

    11. Click Close to save your settings.

    12. Restart your browser.

    You are ready to go – your device is now using CIRA Canadian Shield.

  • Apple MacOS

    For MacOS, configure DNS settings in the Network window.

    1. From the Apple menu, select System Preferences.

    2. Click Network.

    3. Select the network for which you would like to configure the Canadian Shield DNS servers.

    4. Click Advanced.


    5. Click the DNS tab.


    6. Click the “+” button to add or replace the IP addresses. Do the following:

    a. For Private, add the following:

    i. For IPv4, enter:
    149.112.121.10, then click the “+” sign and enter 149.112.122.10

    ii. For IPv6, enter:
    2620:10A:80BB::10, then click the “+” sign and enter 2620:10A:80BC::10

    b. For Protected, add the following:

    i. For IPv4, enter:
    149.112.121.20, then click the “+” sign and enter 149.112.122.20 

    ii. For IPv6, enter:
    2620:10A:80BB::20, then click the “+” sign and enter 2620:10A:80BC::20 

    c. For Family, add the following:

    i. For IPv4, enter:

    149.112.121.30, then click the “+” sign and enter 149.112.122.30  

    ii. For IPv6, enter:
    2620:10A:80BB::30, then click the “+” sign and enter 2620:10A:80BC::30 

    7. Click OK.

    8. Click Apply.

    You are ready to go – your device is now using CIRA Canadian Shield.

  • Mobile edition in iOS or Android (App Store or GooglePlay)

    Mobile device apps are downloaded directly from the Play and Apple store.

     

     

  • Sony Playstation 4

    For the Playstation 4 (PS4), configure DNS settings in the Set Up Internet Connection menu.

    1. Scroll right to Settings.


    2. Scroll to Network.


    3. Scroll to Set Up Internet Connection.


    4. Depending on the network connection you are using, do one of the following:

    a. Select Wifi

    b. Select LAN


    5. Select Custom.


    6. Set IP Address Settings to Automatic.


    7. Set DHCP Host Name to Do Not Specify.


    8. Set DNS Settings to Manual.


    9. Set the Primary DNS to:

    • For Private: 149.112.121.10
    • For Protected: 149.112.121.20
    • For Family: 149.112.121.30


    10. Set the Secondary DNS to:

    • For Private: 149.112.122.10
    • For Protected: 149.112.122.20
    • For Family: 149.112.122.30

    11. If you are able to add more DNS servers, you can add the following IPv6 addresses:

    • For Private: 2620:10A:80BB::10 and 2620:10A:80BC::10
    • For Protected: 2620:10A:80BB::20 and 2620:10A:80BC::20 
    • For Family: 2620:10A:80BB::30 and 2620:10A:80BC::30 

    12. Set MTU Settings to Automatic.


    13. Set Proxy Server to Do Not Use.

    You are ready to go – your PS4 is now using CIRA Canadian Shield.

  • Microsoft Xbox One

    For the Xbox One, configure DNS settings in the Network Settings menu.

    1. Open the Network screen by pressing the Xbox button.

    2. Select Settings > Network > Network Settings.

    3. Click Advanced Settings.


    4. Click DNS Settings.


    5. Choose Manual.

    6. Set the Primary DNS to:

    • For Private: 149.112.121.10
    • For Protected: 149.112.121.20
    • For Family: 149.112.121.30

    7. Set the Secondary DNS to:

    • For Private: 149.112.122.10
    • For Protected: 149.112.122.20
    • For Family: 149.112.122.30

    8. If you are able to add more DNS servers, you can add the following IPv6 addresses:

    • For Private: 2620:10A:80BB::10 and 2620:10A:80BC::10
    • For Protected: 2620:10A:80BB::20 and 2620:10A:80BC::20 
    • For Family: 2620:10A:80BB::30 and 2620:10A:80BC::30 

    A confirmation screen will appear when you are finished.

    9. Press the B button.

  • Nintendo Switch

    For the Nintendo Switch, configure DNS settings in the Internet Settings menu.

    1. Navigate to the home screen and select the System Settings button at the bottom of the screen.

    2. Select Internet Settings > Internet Settings.
        Your Nintendo Switch will automatically search for nearby WiFi signals.

    3. Select your network from the list of networks located under Registered Networks.

    4. Select Change Settings.


     

    5. Select Manual under DNS Settings.


    6. Select Primary DNS and hold down the B button to delete the existing DNS address.


    7. Set the Primary DNS to:

    • For Private: 149.112.121.10
    • For Protected: 149.112.121.20
    • For Family: 149.112.121.30
       

    8. Select Secondary DNS and hold down the B button to delete the existing DNS address.
     

    9. Set the Secondary DNS to:

    • For Private: 149.112.122.10
    • For Protected: 149.112.122.20
    • For Family: 149.112.122.30

    11. Click OK.

    You are ready to go – your Nintendo Switch is now using CIRA Canadian Shield.

  • Nintendo 3DS

    For the Nintendo, configure DNS settings in the Connection Settings menu.

    Note: These instructions work on the following systems:

    • New Nintendo 3DS
    • New Nintendo 3DS XL
    • New Nintendo 2DS XL
    • Nintendo 3DS
    • Nintendo 3DSXL
    • Nintendo 2DS

    1. Navigate to the home menu and choose System Settings (the wrench icon).


    2. Select Internet Settings >Connection Settings.


    3. Select your Internet Connection and then select Change Settings.


    4. Select DNS.


    5. Set Auto-Obtain DNS to No.

    6. Click Detailed Setup.


    7. Set the Primary DNS to:

    • For Private: 149.112.121.10
    • For Protected: 149.112.121.20
    • For Family: 149.112.121.30

    8. Set the Secondary DNS to:

    • For Private: 149.112.122.10
    • For Protected: 149.112.122.20
    • For Family: 149.112.122.30

    11. Click OK.

    You are ready to go – your Nintendo Switch is now using CIRA Canadian Shield.

  • Ubuntu Desktop

    If you use this operating system then you probably know what you are doing already. For most Linux distributions, configure DNS settings through Network Connections Manager.

    1. Click on the Network icon (top-right panel by default).

    2. Click on Edit Connections to open the Network Connections.

    3. Select and highlight your connection name.


    4. Click Edit.


    5. Click on the IPv4 Settings tab or the IPv6 Settings tab.


    6. In the DNS servers field, enter the Canadian Shield IP addresses. Be sure to separate the IP addresses with a comma.

    a. For Private, add the following:

    i. For IPv4, enter: 149.112.121.10 and 149.112.122.10

    ii. For IPv6, enter: 2620:10A:80BB::10 and 2620:10A:80BC::10

    b. For Protected, add the following:

    i. For IPv4, enter: 149.112.121.20 and 149.112.122.20

    ii. For IPv6, enter: 2620:10A:80BB::20 and 2620:10A:80BC::20 

    c. For Family, add the following:

    i. For IPv4, enter: 149.112.121.30 and 149.112.122.30

    ii. For IPv6, enter: 2620:10A:80BB::30 and 2620:10A:80BC::30

    7. Click Save.

    You are ready to go – your device is now using CIRA Canadian Shield.

  • Debian

    If you use this you almost definitely know what you are doing already; but for Debian, configure DNS settings using the command line prompt.

    1. In the command line, type:

        sudo vim /etc/resolv.conf

    2. Replace the nameserver lines with:

    a. For Private, add the following:

    i. For IPv4, enter:

    nameserver 149.112.121.10

    nameserver 149.112.122.10

    ii. For IPv6, enter:

    nameserver 2620:10A:80BB::10

    nameserver 2620:10A:80BC::10

    b. For Protected, add the following:

    i. For IPv4, enter:
    nameserver 149.112.121.20

    nameserver 149.112.122.20

    ii. For IPv6, enter:
    nameserver 2620:10A:80BB::20

    nameserver 2620:10A:80BC::20 

    c. For Family, add the following:

    i. For IPv4, enter:

    nameserver 149.112.121.30

    nameserver 149.112.122.30

    ii. For IPv6, enter:

    nameserver 2620:10A:80BB::30

    nameserver 2620:10A:80BC::30

    Note: Since you are using vim press the "i" key on your keyboard to edit the document.

    3. Save and exit vim by pressing the ESC key on your keyboard.

    4. After lifting the ESC key, type:

        :wq

    You are ready to go – your device is now using CIRA Canadian Shield.

  • DNS Encryption with DNS over HTTPs (DoH) on Chrome

    You can configure each option of the service (Private, Protected, and Family) to use DoH (DNS-over-HTTPS). If Chrome is the browser you are using, configure DoH through the Target field in the Properties dialog box.

    1. Right-click on your Chrome shortcut.

    2. Select Properties.

    3. Click on the Shortcut tab.

    4. In the Target field, add the following text to the end of the field:

        Private: https://private.canadianshield.cira.ca/dns-query

        Protected: https://protected.canadianshield.cira.ca/dns-query
        Family: https://family.canadianshield.cira.ca/dns-query

    5. If Chrome is already running, restart it. If Chrome is not running, start it up.

    You are ready to go – CIRA Canadian Shield is set up using DoH over HTTPS on Chrome.

  • DNS Encryption with DNS over HTTPs (DoH) on Firefox

    You can configure each option of the service (Private, Protected, and Family) to use DoH (DNS-over-HTTPS). If Firefox is the browser you are using, configure DoH through Connection Settings.

    1. Click on the menu button and select Menu > Options.

    2. In the General panel, scroll down to Network Settings and click the Settings button.

    3. In the dialog box that opens, scroll down to Enable DNS over HTTPS.

    4. Select the Enable DNS over HTTPS checkbox.

    5. Select Custom and enter the following text in the field:
        Private: https://private.canadianshield.cira.ca/dns-query

        Protected: https://protected.canadianshield.cira.ca/dns-query
        Family: https://family.canadianshield.cira.ca/dns-query
     

    6. Click OK.

    You are ready to go – CIRA Canadian Shield is set up using DoH over HTTPS on Firefox.


Please enable Javascript in order to test your Canadian Shield configuration.

Click the button to test your Canadian Shield configuration.

  • Private Not configured Successfully configured
  • Protected Not configured Successfully configured
  • Family Not configured Successfully configured

Something went wrong. Please refresh your browser and try again.