Choosing a Public DNS Resolver

https://evilbit.de/dns-resolver-guide.html

38•pawal•3h ago

Comments

denkmoon•1h ago

9.9.9.9 is all you need

_def•1h ago

quad9 seems fine. Glad there are a bunch of alternatives though. We should never stop practicing decentralization in the net.

Bender•53m ago

I use Unbound locally as a DoH server. The Alpine Linux Unbound package is compiled with libnghttp2, required for the built in DoH listener. That's more than enough to enable ECH [1].

I pre-cache all the domains I use hourly via cron. My ISP is not going to dork with my DNS requests and their employees are bigger deviants than I. If I ever started browsing the web from a phone I would just set up my own public DoH server. It only takes a few minutes and gives me my own query logs for debugging weird issues.

[1] - https://tls-ech.dev/

harshreality•36m ago

Why pre-cache? For speed... what is it, 30-50ms at most? If the authoritative server's TTL is <60minutes, do you force it to 3600? Do you audit all the connections that occur for every website you visit, collect all the domains hosting assets, and pre-cache those as well, or is the main site's domain the only critical one because that affects perceived latency the most?

Bender•27m ago

I pre-cache for speed, verifying records that have expired since I retain the expired records for sites that have intermittent DNS issues and also to throw in domains that I do not use in the off chance someone is logging where I go and when. They will see the Cloudflare top 20K domains hourly. Myself and family members have been able to access sites when others around the internet can not due to infrastructure related DNS problems. In other words, when others will say "It's always DNS" for myself and family members that is rarely the case.

kingo55•34m ago

> I pre-cache all the domains I use hourly via cron.

How does this look? Shell script querying a list of hostnames? What qualifies as a domain you use?

Bender•26m ago

It looks like this [1] I enable query logging to a tmpfs RAM disk and then every month I update a list of domains that I have queries more than {n} times. I mix that in with a list of the Cloudflare top 20K domains after removing the broken ones.

[1] - https://nochan.net/b/Internet-Crap/20260602-Set-Up-Your-Own-...

petee•10m ago

Unbound has "prefetch" which will refresh near-expired cached records, and various other cache/ttl knobs. "serve-expired" seemed to work well too

Bender•6m ago

I use both of those as well in Unbound.

degenerate•45m ago

9.9.9.9 with 1.1.1.1 as secondary

kingo55•36m ago

It would be nice if a site like this could offer a basic speed comparison test to your local network.

Imagine seeing response times at P90 for a series of random lookups and comparing the median response times.

IP Crawl: Living atlas of open webcams discovered on the public internet

Anonymous GitHub account mass-dropping undisclosed 0-days

OpenRA

Choosing a Public DNS Resolver

America's Large Homebuilders Shift the Cost of Shoddy Construction to Buyers

Enhancing X11 Application Security with LXC

AI learns the “dark art” of RFIC design

Fintech Engineering Handbook

The case for physical media ownership

Turn your site into a place people can bump into each other

Regular expressions that work "everywhere"

Suspicious Discontinuities (2020)

Show HN: Adrafinil – keep a lid-closed Mac awake only while agents work

How do you keep Web MIDI from crashing a 1983 synthesizer?

Paradise Revisited: What Darwin Saw in the Galápagos

Reducing tick density along recreational trails in Ottawa, Canada

Asian AI startups launch Mythos-like models

Post-Mythos Cybersecurity: Keep calm and carry on

DSpark: Speculative decoding accelerates LLM inference [pdf]

Show HN: Starglyphs - A constellation puzzle game based on Euler paths

Supabase (YC S20) Is Hiring for Multigres

Michigan spent $1.8B and only created 602 jobs

One man, two kernels, and a lot of RISC-V

The eerie interface of man and machine (Life Magazine, October 1967)

How H-E-B became Texas' most beloved brand (2024)

Set Up Your Own DoH Service

Zuckerberg's war on whistleblowers

The US Army Issued Ocarinas to Soldiers in World War II

Codeberg Is Down

Running a software jam in a world of slop

Choosing a Public DNS Resolver

Comments

IP Crawl: Living atlas of open webcams discovered on the public internet

Anonymous GitHub account mass-dropping undisclosed 0-days

OpenRA

Choosing a Public DNS Resolver

America's Large Homebuilders Shift the Cost of Shoddy Construction to Buyers

Enhancing X11 Application Security with LXC

AI learns the “dark art” of RFIC design

Fintech Engineering Handbook

The case for physical media ownership

Turn your site into a place people can bump into each other

Regular expressions that work "everywhere"

Suspicious Discontinuities (2020)

Show HN: Adrafinil – keep a lid-closed Mac awake only while agents work

How do you keep Web MIDI from crashing a 1983 synthesizer?

Paradise Revisited: What Darwin Saw in the Galápagos

Reducing tick density along recreational trails in Ottawa, Canada

Asian AI startups launch Mythos-like models

Post-Mythos Cybersecurity: Keep calm and carry on

DSpark: Speculative decoding accelerates LLM inference [pdf]

Show HN: Starglyphs - A constellation puzzle game based on Euler paths

Supabase (YC S20) Is Hiring for Multigres

Michigan spent $1.8B and only created 602 jobs

One man, two kernels, and a lot of RISC-V

The eerie interface of man and machine (Life Magazine, October 1967)

How H-E-B became Texas' most beloved brand (2024)

Set Up Your Own DoH Service

Zuckerberg's war on whistleblowers

The US Army Issued Ocarinas to Soldiers in World War II

Codeberg Is Down

Running a software jam in a world of slop