diff --git a/README.md b/README.md
index 0a2b12f..07d3b66 100644
--- a/README.md
+++ b/README.md
@@ -20,7 +20,8 @@ Check out the article for more info: [paulmillr.com/posts/encrypted-dns/](https:
 | Google                    | 🇺🇸      | 🟢          | [Operated](https://developers.google.com/speed/public-dns/docs/secure-transports) by Google                                             | [HTTPS](https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-https.mobileconfig),  [TLS](https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-tls.mobileconfig)                                    |
 | OpenDNS                   | 🇺🇸      | 🟢          | [Operated](https://support.opendns.com/hc/en-us/articles/360038086532) by OpenDNS                                                       | [HTTPS](https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-https.mobileconfig)                                                                                                                           |
 | OpenDNS Family            | 🇺🇸      | 🔴          | Filters malware & adult content                                                                                                         | [HTTPS](https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-family-https.mobileconfig)                                                                                                                    |
-| Quad9                     | 🇺🇸      | 🔴          | [Operated](https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/) by CleanerDNS, Inc. Filters malware                             | [HTTPS](https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-https.mobileconfig), [TLS](https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-tls.mobileconfig)                                        |
+| Quad9                     | 🇨🇭     | 🔴          | [Operated](https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/) by CleanerDNS, Inc. Filters malware                             | [HTTPS](https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-https.mobileconfig), [TLS](https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-tls.mobileconfig)                                        |
+| Quad9 With ECS            | 🇨🇭     | 🔴          | [Operated](https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/) by CleanerDNS, Inc. Filters malware                             | [HTTPS](https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-https.mobileconfig), [TLS](https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-tls.mobileconfig)                                        |
 | Tiar.app                  | 🇸🇬 🇺🇸    | 🔴          | ["Privacy-first DNS provider"](https://doh.tiar.app) from SG, hosted on Digital Ocean. Filters malware                                  | [HTTPS](https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-https.mobileconfig), [TLS](https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-tls.mobileconfig)                                    |
 
 ## Installation
diff --git a/profiles/quad9-ECS-https.mobileconfig b/profiles/quad9-ECS-https.mobileconfig
new file mode 100644
index 0000000..59b9bf0
--- /dev/null
+++ b/profiles/quad9-ECS-https.mobileconfig
@@ -0,0 +1,53 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>PayloadContent</key>
+	<array>
+		<dict>
+			<key>DNSSettings</key>
+			<dict>
+				<key>DNSProtocol</key>
+				<string>HTTPS</string>
+				<key>ServerAddresses</key>
+				<array>
+					<string>2620:fe::fe:11</string>
+					<string>2620:fe::11</string>
+					<string>9.9.9.11</string>
+					<string>149.112.112.11</string>
+				</array>
+				<key>ServerURL</key>
+				<string>https://dns11.quad9.net/dns-query</string>
+			</dict>
+			<key>PayloadDescription</key>
+			<string>Configures device to use Quad9 Encrypted DNS over HTTPS with ECS</string>
+			<key>PayloadDisplayName</key>
+			<string>Quad9 DNS over HTTPS with ECS</string>
+			<key>PayloadIdentifier</key>
+			<string>com.apple.dnsSettings.managed.1a93b54b-8541-4536-8302-c08159ca9184</string>
+			<key>PayloadType</key>
+			<string>com.apple.dnsSettings.managed</string>
+			<key>PayloadUUID</key>
+			<string>ffee2c6b-9cff-4c2a-892c-e03788bcbd64</string>
+			<key>PayloadVersion</key>
+			<integer>1</integer>
+			<key>ProhibitDisablement</key>
+			<false/>
+		</dict>
+	</array>
+	<key>PayloadDescription</key>
+	<string>Adds the Quad9 with ECS DNS to Big Sur and iOS 14 based systems</string>
+	<key>PayloadDisplayName</key>
+	<string>Quad9 with ECS Encrypted DNS over HTTPS</string>
+	<key>PayloadIdentifier</key>
+	<string>com.paulmillr.apple-dns</string>
+	<key>PayloadRemovalDisallowed</key>
+	<false/>
+	<key>PayloadType</key>
+	<string>Configuration</string>
+	<key>PayloadUUID</key>
+	<string>088A5DC0-0E1F-4699-A56D-A709078D7603</string>
+	<key>PayloadVersion</key>
+	<integer>1</integer>
+</dict>
+</plist>
diff --git a/profiles/quad9-ECS-tls.mobileconfig b/profiles/quad9-ECS-tls.mobileconfig
new file mode 100644
index 0000000..3c5cb46
--- /dev/null
+++ b/profiles/quad9-ECS-tls.mobileconfig
@@ -0,0 +1,53 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>PayloadContent</key>
+	<array>
+		<dict>
+			<key>DNSSettings</key>
+			<dict>
+				<key>DNSProtocol</key>
+				<string>TLS</string>
+				<key>ServerAddresses</key>
+				<array>
+					<string>2620:fe::fe:11</string>
+					<string>2620:fe::11</string>
+					<string>9.9.9.11</string>
+					<string>149.112.112.11</string>
+				</array>
+				<key>ServerName</key>
+				<string>dns11.quad9.net</string>
+			</dict>
+			<key>PayloadDescription</key>
+			<string>Configures device to use Quad9 with ECS Encrypted DNS over HTTPS</string>
+			<key>PayloadDisplayName</key>
+			<string>Quad9 DNS over TLS with ECS</string>
+			<key>PayloadIdentifier</key>
+			<string>com.apple.dnsSettings.managed.1a93b54b-8541-4536-8302-c08159ca9184</string>
+			<key>PayloadType</key>
+			<string>com.apple.dnsSettings.managed</string>
+			<key>PayloadUUID</key>
+			<string>ffee2c6b-9cff-4c2a-892c-e03788bcbd64</string>
+			<key>PayloadVersion</key>
+			<integer>1</integer>
+			<key>ProhibitDisablement</key>
+			<false/>
+		</dict>
+	</array>
+	<key>PayloadDescription</key>
+	<string>Adds the Quad9 with ECS DNS to Big Sur and iOS 14 based systems</string>
+	<key>PayloadDisplayName</key>
+	<string>Quad9 with ECS Encrypted DNS over TLS</string>
+	<key>PayloadIdentifier</key>
+	<string>com.paulmillr.apple-dns</string>
+	<key>PayloadRemovalDisallowed</key>
+	<false/>
+	<key>PayloadType</key>
+	<string>Configuration</string>
+	<key>PayloadUUID</key>
+	<string>36F1938F-2141-4EF1-BA24-05D12CEF440B</string>
+	<key>PayloadVersion</key>
+	<integer>1</integer>
+</dict>
+</plist>