Public recursive name server

From Wikipedia, the free encyclopedia
Jump to navigation Jump to search

A public recursive name server (also called public DNS resolver) is a name server service that networked computers may use to query the Domain Name System (DNS), the decentralized Internet naming system, in place of (or in addition to) name servers operated by the local Internet service provider (ISP) to which the devices are connected. Reasons for using these services include:

Public DNS resolver operators often cite increased privacy as an advantage of their services; critics of public DNS services have cited the possibility of mass data collection targeted at the public resolvers as a potential risk of using these services. Most services now support secure DNS lookup transport services such as DNS over TLS (DoT), DNS over HTTPS (DoH) and DNS over QUIC (DoQ).

Public DNS resolvers are operated either by commercial companies, offering their service for free use to the public, or by private enthusiasts to help spread new technologies and support non-profit communities.

Notable public DNS service operators

[edit | edit source]
Provider Privacy policy DNS over UDP/TCP (Do53) DNSSEC DNS over TLS (DoT) DNS over HTTPS (DoH) DNS over QUIC (DoQ) EDNS Padding DNSCrypt Hostname IPv4 addresses IPv6 addresses Filters Remarks
AdGuard Yes[6] Yes Yes[7] Yes Yes[8] Yes[9] No Yes[10] dns.adguard-dns.com[11] 94.140.14.14
94.140.15.15 		2a10:50c0::ad1:ff
2a10:50c0::ad2:ff 		Default: ads and trackers[11]
family.adguard-dns.com 94.140.14.15
94.140.15.16 		2a10:50c0::bad1:ff
2a10:50c0::bad2:ff 		Family: ads, trackers, and adult content[11]
unfiltered.adguard-dns.com 94.140.14.140
94.140.14.141 		2a10:50c0::1:ff
2a10:50c0::2:ff 		None[11]
Alibaba ? Yes No Yes Yes Yes No No dns.alidns.com 223.5.5.5
223.6.6.6 		2400:3200::1
2400:3200:baba::1 		? Chinese regulations
Cloudflare Yes[12] Yes Yes[13] Yes[14] Yes[15] No[16] Yes No one.one.one.one[17]
1dot1dot1dot1.cloudflare-dns.com 		1.1.1.1
1.0.0.1 		2606:4700:4700::1111
2606:4700:4700::1001 		None
security.cloudflare-dns.com 1.1.1.2
1.0.0.2 		2606:4700:4700::1112
2606:4700:4700::1002 		Malware, Phishing
family.cloudflare-dns.com 1.1.1.3
1.0.0.3 		2606:4700:4700::1113
2606:4700:4700::1003 		Malware, Phishing,
Adult content
dns64.cloudflare-dns.com — 2606:4700:4700::64
2606:4700:4700::6400 		None Intended to be IPv6-only.[18] See NAT64 and DNS64.
DNS4EU ? Yes Yes Yes Yes No Yes No protective.joindns4.eu 86.54.11.1
86.54.11.201 		2a13:1001::86:54:11:1
2a13:1001::86:54:11:201 		Malware, phishing Developed for EU citizens
child-noads.joindns4.eu 86.54.11.11
86.54.11.211 		2a13:1001::86:54:11:11
2a13:1001::86:54:11:211 		Malware, phishing, adult content, ads
child.joindns4.eu 86.54.11.12
86.54.11.212 		2a13:1001::86:54:11:12
2a13:1001::86:54:11:212 		Malware, phishing, adult content
noads.joindns4.eu 86.54.11.13
86.54.11.213 		2a13:1001::86:54:11:13
2a13:1001::86:54:11:213 		Malware, phishing, ads
unfiltered.joindns4.eu 86.54.11.100
86.54.11.200 		2a13:1001::86:54:11:100
2a13:1001::86:54:11:200 		None
Google Yes[19] Yes Yes Yes Yes[20] No Yes No dns.google[21] 8.8.8.8
8.8.4.4 		2001:4860:4860::8888
2001:4860:4860::8844 		None
dns64.dns.google — 2001:4860:4860::6464
2001:4860:4860::64 		None Intended for networks with NAT64 gateway.[22]
Gcore Yes[23] Yes Yes No No No Yes No — 95.85.95.85
2.56.220.2 		2a03:90c0:999d::1
2a03:90c0:9992::1 		None
Mullvad Only for VPN service available[24] No[25] Yes Yes[25] Yes[25] No Yes No dns.mullvad.net[25] 194.242.2.2 2a07:e340::2 None Can be used without its VPN service
adblock.dns.mullvad.net 194.242.2.3 2a07:e340::3 Ads, and trackers
base.dns.mullvad.net 194.242.2.4 2a07:e340::4 Ads, trackers, and malware
extended.dns.mullvad.net 194.242.2.5 2a07:e340::5 Ads, trackers, malware, and social media
all.dns.mullvad.net 194.242.2.9 2a07:e340::9 Ads, trackers, malware, social media, gambling and adult content
Vercara (formerly Neustar Security Services) Yes[26] Yes Yes No No No No No ? 64.6.64.6
64.6.65.6 		2620:74:1b::1:1
2620:74:1c::2:2 		None Verisign transferred its public DNS to Neustar.[27]
156.154.70.1
156.154.71.1 		2610:a1:1018::1
2610:a1:1019::1
156.154.70.2
156.154.71.2 		2610:a1:1018::2
2610:a1:1019::2 		Malware, ransomware, spyware, phishing
156.154.70.3
156.154.71.3 		2610:a1:1018::3
2610:a1:1019::3 		Low security + gambling, pornography, violence, hate
156.154.70.4
156.154.71.4 		2610:a1:1018::4
2610:a1:1019::4 		Medium security + gaming, adult, drugs, alcohol, anonymous proxies
156.154.70.5
156.154.71.5 		2610:a1:1018::5
2610:a1:1019::5 		None Will not redirect non-existent domains to a landing page.
Cisco Umbrella (OpenDNS) Yes[28] Yes Yes[29] Yes Yes[30] No Yes Yes[31] dns.opendns.com
dns.umbrella.com[32] 		208.67.222.222
208.67.220.220 		2620:119:35::35
2620:119:53::53 		Basic Security filtering + user defined policies
familyshield.opendns.com 208.67.222.123
208.67.220.123 		2620:119:35::123
2620:119:53::123 		FamilyShield: adult content
sandbox.opendns.com 208.67.222.2
208.67.220.2 		2620:0:ccc::2
2620:0:ccd::2 		None Sandbox addresses that provide no filtering.
Oracle (formerly Dyn) Yes[33] Yes Yes No No No No No resolver1.dyndnsinternetguide.com
resolver2.dyndnsinternetguide.com
rdns.dynect.net 		216.146.35.35
216.146.36.36 		— None
Quad9 Yes[34][35] Yes Yes[36] Yes[37] Yes[38] No No Yes[39] dns.quad9.net 9.9.9.9
149.112.112.112 		2620:fe::9
2620:fe::fe 		Phishing, malware, and exploit kit domains
Yes[36] dns11.quad9.net 9.9.9.11
149.112.112.11 		2620:fe::11
2620:fe::fe:11 		Phishing, malware, and exploit kit domains Passes EDNS Client Subnet.
No[40] dns10.quad9.net 9.9.9.10
149.112.112.10 		2620:fe::10
2620:fe::fe:10 		None
Tencent ? Yes Yes Yes Yes Yes No No dns.pub 119.29.29.29 2402:4e00:: ? Chinese regulations
Wikimedia Informal[41] No[42] Yes[43] Yes[44] Yes[45] No No[46] No wikimedia-dns.org[47] 185.71.138.138[47] 2001:67c:930::1[47] None[48]
Yandex No[49] Yes No Yes Yes No Yes Yes common.dot.dns.yandex.net 77.88.8.8
77.88.8.1 		2a02:6b8::feed:0ff
2a02:6b8:0:1::feed:0ff 		None
safe.dot.dns.yandex.net 77.88.8.88
77.88.8.2 		2a02:6b8::feed:bad
2a02:6b8:0:1::feed:bad 		Safe: fraudulent / infected / bot sites
family.dot.dns.yandex.net 77.88.8.7
77.88.8.3 		2a02:6b8::feed:a11
2a02:6b8:0:1::feed:a11 		Family: fraudulent / infected / bot / adult sites

References

[edit | edit source]
  1. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  2. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  3. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  4. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  5. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  6. ^ AdGuard DNS Privacy Notice
  7. ^ AdGuard DNS FAQ: What is DNSSEC?
  8. ^ The official release of AdGuard DNS — a new unique approach to privacy-oriented DNS
  9. ^ AdGuard DNS-over-QUIC
  10. ^ Adguard DNS now supports DNSCrypt
  11. ^ a b c d AdGuard DNS Setup guide
  12. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  13. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  14. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  15. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  16. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  17. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  18. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  19. ^ Google Public DNS: Your Privacy
  20. ^ Google Public DNS: DNS-over-HTTPS
  21. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  22. ^ Google Public DNS64
  23. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  24. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  25. ^ a b c d Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  26. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  27. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  28. ^ Cisco Online Privacy Statement
  29. ^ OpenDNS: DNSSEC General Availability
  30. ^ OpenDNS: Querying OpenDNS using DoH
  31. ^ OpenDNS: OpenDNS and DNSCrypt
  32. ^ Cisco Umbrella Enhances Support of DNS Encryption with DNS Over HTTPS
  33. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  34. ^ Quad9: Compliance and Applicable Law
  35. ^ Quad9: Data and Privacy Policy
  36. ^ a b Quad9 FAQ: Does Quad9 implement DNSSEC?
  37. ^ Quad9 FAQ: Does Quad9 support DNS over TLS?
  38. ^ Quad9 FAQ: Does Quad9 support DNS over HTTPS (DoH)?
  39. ^ Quad9 FAQ: Does Quad9 support dnscrypt?
  40. ^ Quad9 FAQ: Is there a service that Quad9 offers that does not have the blocklist or other security?
  41. ^ Wikimedia DNS: Privacy Policy
  42. ^ Wikimedia DNS: Encrypted DNS"
  43. ^ Wikitech: Wikimedia DNS: DNSSEC
  44. ^ Wikitech: Wikimedia DNS
  45. ^ Wikitech: Wikimedia DNS
  46. ^ Wikitech: Wikimedia DNS: EDNS.280.29 Padding
  47. ^ a b c Wikimedia DNS: Instructions
  48. ^ Wikimedia DNS
  49. ^ Terms of use of the Yandex.DNS service
[edit | edit source]
Retrieved from "http://70.231.62.181/index.php?title=Public_recursive_name_server&oldid=5705776"