UP Box 4 Configuration Tool

---

This tool installs and configures the basic building blocks of the Usable Privacy Box (v4).
Use this tool to filter ads and trackers in your home network and to protect your DNS traffic against analysis and monitoring.

Notable Building Blocks

• Knot Resolver for caching and DNS over TLS (DoT)
• Pi-hole® for network-wide ad blocking.
• UP Config Utility for configuration via CLI

DNS Configuration Options

Knot Resolver provides caching, DNSSEC validation, QNAME Minimization, and IPv6 support by default.

The UP Box Configuration Tool ships four different DNS configurations:

• plain: Unencrypted DNS to Cloudflare and Google.
• recursive: Recursive resolver with unencrypted DNS to Authoritative DNS server.
• mix: Encrypted DNS over TLS split between Cloudflare, Applied Privacy, Digitale Gesellschaft, Quad9.
• private: Encrypted DNS over TLS split between Applied Privacy, Digitale Gesellschaft.

The four configuration options are loosely sorted by the privacy-protection they offer. The plain configuration is the least privacy-friendly option but may offer the best performance. The private configuration offers the strongest privacy protection. We recommend the mix configuration for the best balance between privacy and performance.

---

up-config

Installation

The UP Box 4 Configuration Tool primarily powers upriboxes based on armbian.
Any Debian-based distribution with NetworkManager may work just fine.

curl https://raw.githubusercontent.com/usableprivacy/config/main/install.sh | bash

Command Line Interface (CLI)

up-config dns

Change the DNS mode after the initial setup.

up-config init

Start the initial up-config configuration.

up-config reset

Reset up-config settings to default.

up-config update

Update the up-config configuration utility.

---

(C) NysosTech e.U. 2025