What DNS would you recommend?

[bester69]

Hi,
What dns server do you think is the best and why?
https://en.wikipedia.org/wiki/Public_re ... ame_server

Im using now, cleanbrowsing dns, cos they've FamilyFilter and DNSCrypt (So prevent DNS spoofing)

[sickpig]

the wiki link lost me at porn blocking
m using cloudflare as that is the fastest one around as per benchmarks and their ips are so cool, you cant beat 1111

[pylkko]

You can benchmark them from your location and network. If I remember, there's even a package that does it for you.

You can also run your own DNS but not so many benefits as far as I can see

[Head_on_a_Stick]

The main benefit of a local nameserver is caching:

Code: Select all

Puffy:~$ dig google.com
[...]
;; Query time: 113 msec
[...]
Puffy:~$ dig google.com
[...]
;; Query time: 1 msec

I also use Cloudflare, via unwind(8) in OpenBSD & unbound for my other systems.

[pylkko]

In a way that makes sense, if you can lower the access time that much, but I get a 16 ms with dig using openDNS (wifi) and a 1-2 ms on LAN (wifi), so the difference is not so drastic for me and would be even less on cable (I have ethernet cabling and can get wired network in all rooms of the house).

when you use a local nameserver, do you dedicate a separate machine for it? Some people have an ARM dev board or router with custom OS to server the entire network. Or do you have a per-machine set-up, or how does it work?

[Head_on_a_Stick]

when you use a local nameserver, do you dedicate a separate machine for it?

No, I only have the one laptop

how does it work?

I just enable unbound.service and add

Code: Select all

nameserver 127.0.0.1

to /etc/resolv.conf

I was using systemd-resolved (which has a smaller memory footprint than unbound) but it was causing some delays with lookups and general browsing so I switched.

[pylkko]

I know that openDNS is kind of not open in any sense and owned by Cisco. It just was faster than my ISP. It sounds like a great idea to use your own to keep your own data. But AFAIK, your own nameserver has to pass the data to another server out there anyway. Sometimes I have heard the argument that this protects your data a little bit since then you send the data not so frequently and it can be pooled data of many users, but not so sure of the validity of the argument.

[Head_on_a_Stick]

your own nameserver has to pass the data to another server out there anyway

I have unbound configured to forward all requests to Cloudflare but it can query the root nameservers (given in the root.hints file) directly, at the expense of privacy (the servers can see your IP address then).

[reinob]

Hi,
What dns server do you think is the best and why?
https://en.wikipedia.org/wiki/Public_re ... ame_server

Im using now, cleanbrowsing dns, cos they've FamilyFilter and DNSCrypt (So prevent DNS spoofing)

and how did you configure your computer to use DNSCrypt? are you using dnscrypt-proxy?

FWIW I use unbound w/o any upstream server (forward zone) for servers (VPS, NAS) and whatever my home router has (i.e. ISP) for the rest. It's usually faster (read: closer) than other public ones, even Cloudflare.

For some time I used a raspberry pi with dnsmasq as DNS server, but then I also had to use it for DHCP (for internal name resolution to work..), which worked OK (and had the bonus of being able to block ads via DNS for the whole home network), but caused lots of (minor, but annoying) issues with my home router (a Fritzbox, which is about the only one you can use in Germany if you want router and DSL modem in one), so I reverted that :(

[millpond]

I would recommend OpenDNS. Though it does have occasional 'issues'.
Cloudflare is nasty and will try to censor sites when it feels like.
Google is the Great Firewall of the West.

Best to create your own DNS files of sites you frequent, but may not be that politically correct.

[reinob]

I would recommend OpenDNS. Though it does have occasional 'issues'.
Cloudflare is nasty and will try to censor sites when it feels like.
Google is the Great Firewall of the West.

Care to elaborate on that?

AFAIK OpenDNS does filtering (what you call censoring).
Cloudflare does, reportedly, not. Google doesn't either.

Would be interesting to read your sources on this.

[p.H]

Best to create your own DNS files of sites you frequent, but may not be that politically correct.

Could you elaborate on this too ?
What is a "DNS file of sites", and why may it not be politically correct ?

[millpond]

I would recommend OpenDNS. Though it does have occasional 'issues'.
Cloudflare is nasty and will try to censor sites when it feels like.
Google is the Great Firewall of the West.

Care to elaborate on that?

AFAIK OpenDNS does filtering (what you call censoring).
Cloudflare does, reportedly, not. Google doesn't either.

Would be interesting to read your sources on this.

Google censorship is well known. Proven in many articles since the election. Just try to find a really politically incorrect video, like Tarrant's or numerous others. Its openly banned 'copyright violations'.It actively tries to block some of my VPN servers. Vile.

Cloudflare will try to block torrent sites periodically. And who knows what else.

OpenDNS will block sites, usually with fake certificate errors.It periodically tries to block my own site. It leads to block.opendns.com

[millpond]

Best to create your own DNS files of sites you frequent, but may not be that politically correct.

Could you elaborate on this too ?
What is a "DNS file of sites", and why may it not be politically correct ?

On win thre is a native hosts, and it can be added to Linux with a util.
A native DNS lookup/filter.

[sickpig]

On win thre is a native hosts, and it can be added to Linux with a util.
A native DNS lookup/filter.

what's the proof?