Total Pageviews

Sunday, 12 January 2020

public recursive name server (also called public DNS resolver)

A public recursive name server (also called public DNS resolver) is a name server service that networked computers may use for query to DNS, the decentralized Internet naming system, in place of or in addition to name servers operated by the Internet service provider to which the devices are connected. Reasons for using these services include:
  • speed, compared to using ISP DNS services[1]
  • filtering (security, ad-blocking, porn-blocking, etc.)[2]
  • reporting[3]
  • avoiding censorship[4]
  • redundancy (smart caching)[5]
  • access to unofficial alternative top level domains not found in the official DNS root zone
  • temporary unavailability of the ISP's name server
Public DNS resolver operators often cite increased privacy as an advantage of their services; critics of public DNS services have cited the possibility of mass data collection targeted at the public resolvers as a potential risk of using these services. Several services now support secure DNS lookup transport services such as DNS over HTTPS and DNS over TLS.
Public DNS resolvers are operated either by commercial companies, offering their service for free use to the public, or by private enthusiasts to help spread new technologies and support non-profit communities.

List of public DNS service operators[edit]

ProviderNodesPrivacy policyDNS over UDPDNSSECDNS over TLSDNS over HTTPSDNSCryptHostnamesIPv4 addressesIPv6 addressesFiltersRemarks
AdGuard DNS12[6]Yes[7]YesYes[8]YesYes[9]Yes[10]dns.adguard.com176.103.130.130
176.103.130.131		2a00:5a60::ad1:0ff
2a00:5a60::ad2:0ff		Default[11]A free, privacy-oriented DNS resolution system that blocks tracking, ads and phishing.[12]
dns-family.adguard.com176.103.130.132
176.103.130.134
2a00:5a60::bad1:0ff
2a00:5a60::bad2:0ff
Family[11]
CleanBrowsing20Yes[13]YesYesYes[14]Yes[15]Yes[16]family-filter-dns.cleanbrowsing.org185.228.168.168
185.228.169.168		2a0d:2a00:1::
2a0d:2a00:2::		FamilyDesigned to be used on devices of kids under 13.
adult-filter-dns.cleanbrowsing.org185.228.168.10
185.228.169.11		2a0d:2a00:1::1
2a0d:2a00:2::1		Adult
security-filter-dns.cleanbrowsing.org185.228.168.9
185.228.169.9		2a0d:2a00:1::2
2a0d:2a00:2::2		Security
Cloudflare 1.1.1.1194[17]Yes[18]YesYes[19]Yes[20]Yes[21]Noone.one.one.one[22]
1dot1dot1dot1.cloudflare-dns.com		1.1.1.1
1.0.0.1		2606:4700:4700::1111
2606:4700:4700::1001		None
dns64.cloudflare-dns.com—2606:4700:4700::64
2606:4700:4700::6400		NoneIntended to be used with IPv6-only network.[23] See NAT64 and DNS64.
Comodo Secure DNSNoYesYesNoNoYesns1.recursive.dnsbycomodo.com
ns2.recursive.dnsbycomodo.com		8.26.56.26
8.20.247.20		—
Dyn DNSYes[24]YesYesNoNoNoresolver1.dyndnsinternetguide.com
resolver2.dyndnsinternetguide.com		216.146.35.35
216.146.36.36		—Shut down on May 31, 2020
Google Public DNS23[25]Yes[26]YesYesYesYes[27]Nodns.google[28]
google-public-dns-a.google.com
google-public-dns-b.google.com		8.8.8.8
8.8.4.4		2001:4860:4860::8888
2001:4860:4860::8844		None
—2001:4860:4860::6464
2001:4860:4860::64		NoneIntended to be used on networks with NAT64 gateway.[29]
Neustar DNS AdvantageYes[30]YesYesNoNoNo156.154.70.1
156.154.71.1		2610:a1:1018::1
2610:a1:1019::1		None
156.154.70.2
156.154.71.2		2610:a1:1018::2
2610:a1:1019::2		Malware, ransomware, spyware, phishing
156.154.70.3
156.154.71.3		2610:a1:1018::3
2610:a1:1019::3		Low security + gambling, pornography, violence, hate
156.154.70.4
156.154.71.4		2610:a1:1018::4
2610:a1:1019::4		Medium security + gaming, adult, drugs, alcohol, anonymous proxies
156.154.70.5
156.154.71.5		2610:a1:1018::5
2610:a1:1019::5		NoneWill not redirect non-existent domains to a landing page
Norton ConnectSafeYes[31]YesNoNoNoNo199.85.126.10
199.85.127.10		—Security (malware, phishing sites and scam sites)Shut down on November 15, 2018[32]
199.85.126.20
199.85.127.20		Security and pornography
199.85.126.30
199.85.127.30		Family-friendly: security, pornography and other objectionable content
OpenDNS31[33]Yes[34]YesNoNoYes[35]Yes[36]resolver1.opendns.com
resolver2.opendns.com		208.67.222.222
208.67.220.220		2620:119:35::35
2620:119:53::53		Basic Security filtering + user defined policies
resolver1-fs.opendns.com
resolver2-fs.opendns.com		208.67.222.123
208.67.220.123		"FamilyShield": adult content
resolver1.ipv6-sandbox.opendns.com
resolver2.ipv6-sandbox.opendns.com		2620:0:ccc::2
2620:0:ccd::2		NoneSandbox addresses which provide no filtering
OpenNICYes[37]YesYesNoNoPartial[38]Several [39]185.121.177.177
169.239.202.202		2a05:dfc7:5::53
2a05:dfc7:5::5353		List of all OpenNIC Tier 2 DNS Resolvers
Quad9137[40]Yes[41]YesYes[42]Yes[43]Yes[44]Yes[45]dns.quad9.net
rpz-public-resolver1.rrdns.pch.net		9.9.9.9
149.112.112.112		2620:fe::fe
2620:fe::9		Malicious domains (phishing, malware, exploit kit domains)
No[46]dns-nosec.quad9.net9.9.9.10
149.112.112.10		2620:fe::10
2620:fe::fe:10		None
VeriSign Public DNSYes[47]YesYes[48]NoNoNorecpubns1.nstld.net
recpubns2.nstld.net		64.6.64.6
64.6.65.6		2620:74:1b::1:1
2620:74:1c::2:2		None
Yandex.DNSYes[49]YesNoNoNoYesdns.yandex.ru
secondary.dns.yandex.ru		77.88.8.1
77.88.8.8		2a02:6b8::feed:0ff
2a02:6b8:0:1::feed:0ff		None
safe.dns.yandex.ru
secondary.safe.dns.yandex.ru		77.88.8.2
77.88.8.88		2a02:6b8::feed:bad
2a02:6b8:0:1::feed:bad		"Safe": fraudulent / infected / bot sites
family.dns.yandex.ru
secondary.family.dns.yandex.ru		77.88.8.3
77.88.8.7		2a02:6b8::feed:a11
2a02:6b8:0:1::feed:a11		"Family": fraudulent / infected / bot / adult sites

References[edit]

  1. ^ "How to Change Your Default DNS to Google DNS for Fast Internet Speeds". TechWorm. 2016-08-20. Retrieved 2016-10-22.
  2. ^ "A simple way to get around Rogers' DNS re-directing". IT Business. Retrieved 2016-10-22.
  3. ^ "OpenDNS Adds Centralized Reporting, IP-Layer Enforcement to Umbrella". mspmentor.net. Retrieved 2016-10-22.
  4. ^ "Austrian Pirate Bay Blockade Censors Slovak Internet - TorrentFreak". TorrentFreak. 2015-12-03. Retrieved 2016-10-22.
  5. ^ Security; Iana. "DNS devastation: Top websites whacked offline as Dyn dies again". The Register. Retrieved 2016-10-22.
  6. ^ AdGuard DNS servers map
  7. ^ AdGuard DNS Privacy Notice
  8. ^ AdGuard DNS FAQ: What is DNSSEC?
  9. ^ The official release of AdGuard DNS — a new unique approach to privacy-oriented DNS
  10. ^ Adguard DNS now supports DNSCrypt
  11. ^ Jump up to:a b AdGuard DNS Setup guide
  12. ^ "AdGuard DNS FAQ: What is AdGuard DNS?". adguard.com. Retrieved 2019-08-12.
  13. ^ NOC.org / dcid. "CleanBrowsing Privacy and Terms of Service". Cleanbrowsing.org. Retrieved 2019-01-04.
  14. ^ "Parental Control with DNS over TLS Support".
  15. ^ NOC.org / dcid. "Parental Control with DNS Over HTTPS (DoH) Support". Cleanbrowsing.org. Retrieved 2019-01-04.
  16. ^ NOC.org / dcid. "Parental Control with DNSCrypt Support". Cleanbrowsing.org. Retrieved 2019-01-04.
  17. ^ Cloudflare: Our Anycast Network Map
  18. ^ "Privacy Policy". Cloudflare. Retrieved 2019-01-04.
  19. ^ "The Nitty Gritty - Cloudflare Resolver".
  20. ^ Cloudflare Inc (2018-03-31). "DNS over TLS - Cloudflare Resolver". Developers.cloudflare.com. Retrieved 2019-01-04.
  21. ^ Cloudflare Inc. "DNS over HTTPS - Cloudflare Resolver". Developers.cloudflare.com. Retrieved 2019-01-04.
  22. ^ "Test DNS owner one.one.one.one". 2018-08-21.
  23. ^ Supporting IPv6-only Networks
  24. ^ "Oracle's Privacy Policy". dyn.com. Retrieved 2018-12-31.
  25. ^ Google Public DNS: Where are your servers currently located?
  26. ^ Google Public DNS: Your Privacy
  27. ^ Google Public DNS: DNS-over-HTTPS
  28. ^ "Get Started | Public DNS".
  29. ^ Google Public DNS64
  30. ^ "Privacy Policy | Neustar". home.neustar.
  31. ^ Norton ConnectSafe Privacy Notice
  32. ^ "Norton ConnectSafe". connectsafe.norton.com. Retrieved 2018-12-31.
  33. ^ OpenDNS: Data Center Locations
  34. ^ Cisco Online Privacy Statement
  35. ^ [1]
  36. ^ OpenDNS and DNSCrypt
  37. ^ OpenNIC: Privacy Policy
  38. ^ OpenNIC: DNSCrypt
  39. ^ OpenNIC Tier 2 DNS Resolvers
  40. ^ Quad9’s Year One Success Shows There is a DNS Solution that Provides Both Privacy and Security
  41. ^ Quad9: Privacy, Data Collection and Use Policy
  42. ^ Quad9 FAQ: Does Quad9 implement DNSSEC?
  43. ^ Quad9 Frequently Asked Questions
  44. ^ DoH with Quad9 DNS Servers
  45. ^ Quad9 DNSCrypt Now In Testing
  46. ^ Quad9 FAQ: Is there a service that Quad9 offers that does not have the blocklist or other security?
  47. ^ Verisign Public DNS Terms of Service
  48. ^ Verisign Public DNS Forum: employee post
  49. ^ Terms of use of the Yandex.DNS service

External links[edit]


Posted by at
Labels: