Hacker News Reader

Comment by Exuma | Hacker News Reader

Aside from this one issue, is switching to 1.1.1.1 a good idea in your guys experience? Right now I just realized I hvae the DNS for my ISP which is probably how they inject bullshit 404 pages full of ads. What is the fastest/best public DNS in your guys experience?

View on HN

I've been running on Cloudflare at one of my locations for about 1.5 years. There has been some down-time, but it's usually been on a local cache and not a national outage like this one. They were pretty responsive -- the total downtime was somewhere around 32 minutes.

It took me three minutes to isolate my problem to them. I just added some non-Cloudflare DNS servers to my resolver. It's easy to look at the incredible redundancy that's built-in to their system and be confident, but adding a higher layer of redundancy to an already redundant system is never a bad idea.

Cloudflare DNS is fastest public resolver by most benchmarks and I trust them with the traffic.

Id rather use my ISP because they will see it anyways.... Why introduce a third party for no good reason?

1. DNS trust is more than just privacy. Also, you want to trust that the results are good quality.

2. Cloudflare supports DoH

If you are worried about your ISP injecting/hijacking your DNS, then you should also use DNS over HTTPS.

Some ISPs I think hijack all DNS requests irrespective of the destination and point it to their own. Sky used to do this from what I read.

Setup DNSCryptProxy is my suggestion and let it pick the best/fastest/closest DNS over HTTPs resolver.

CloudFlare DNS (1.1.1.1 and 1.0.0.1) and Google's DNS (8.8.8.8 and 8.8.4.4) usually have the best latency everywhere. However, if you suspect your ISP is injecting stuff, a VPN service + their DNS might be more useful to improve your internet privacy.

During this outage, my ping to 1.1.1.1 was 70ms. 8.8.8.8 is about 3ms.

After the outage, 1.1.1.1 is also about 3ms.

Using Firefox and DNS over HTTPS (DoH) will also bypass crappy ISP DNS monitoring / injecting.

Reply on news.ycombinator.com