42
What non-evil DNS server do you recommend? (sopuli.xyz)
submitted 2 years ago by to c/sysadmin@lemmy.world
35 comments fedilink hide all child comments
 

I feel kinda bad about feeding google with data. Is there some name server I can point my servers to that upholds my privacy and does not run analytics on the requests it gets?

all 35 comments

sorted by: hot top controversial new old
[–] 37 points 2 years ago (1 child)

Quad9, a Swiss public benefit, not-for-profit foundation. Main address is 9.9.9.9.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
    • [–] 19 points 2 years ago (1 child)

    Mullvad's DNS. It's available for non-subscribers as well, and their privacy policy explicitly claims they do not log DNS requests in any way. https://mullvad.net/en/help/no-logging-data-policy/

    They support both DoT and DoH, and also have various servers for blocking ads, trackers etc (if you wish to use them): https://github.com/mullvad/dns-blocklists

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago (1 child)

    I feel dumb for not using this along with my PiHole for my home, I only have 1 PiHole machine and I couldn't allow myself to set it up as main DNS so I used the default ISP as a second one in case my unit stopped working (because of experience).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
    • [–] 10 points 2 years ago

    How about dnscrypt-proxy?

    Randomized dns servers and you can use your own blocklists

  • permalink
  • fedilink
  • source
    •
    [–] 7 points 2 years ago (1 child)

    My own.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago

    This is the correct answer if you trust that your ISP isn't snooping on your traffic. Your DNS server will send unencrypted queries to the root name servers and the nameservers of the domains you search for. This traffic is easy to detect and parse, so you do need to trust your ISP, or the provider of wherever you host your DNS server.

    If you don't trust your ISP to that level you'll need to trust whichever server you connect to. It's a trade off to decide which is best for your use case.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 7 points 2 years ago* (last edited 2 years ago)

    Quad9 are great.

    IPv4:

    9.9.9.9

    149.112.112.112

    IPv6:

    2620:fe::fe

    2620:fe::9

    More options.

    E: looks like someone already mentioned Quad9.

  • permalink
  • fedilink
  • source
    •
    [–] 6 points 2 years ago (2 children)

    I use the DNS resolver in pfSense which connects directly to the DNS root servers.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 5 points 2 years ago

    I do the same in opnsense. According to dnsperfbench, running my own resolver benchmarked as slightly faster or at minimum about the same performance as using any of the big public resolvers. I think the only concern is to make sure you're not using your local resolver if you're trying to use a VPN.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 6 points 2 years ago

    Cloudflare at work, quad9 at home.

    Honestly at work I mostly use the upstream dns

  • permalink
  • fedilink
  • source
    •
    [–] 4 points 2 years ago

    NextDNS is good. OpenDNS used to be, but you know... Cisco.

  • permalink
  • fedilink
  • source
    •
    [–] 4 points 2 years ago

    Unbound seems the most secure.

  • permalink
  • fedilink
  • source
    •
    [–] 2 points 2 years ago

    Been using dnsforge.de to block ads, pretty sure they respect privacy

  • permalink
  • fedilink
  • source
    •
    [–] 2 points 2 years ago* (1 child)

    @Sibbo if you don't classify cloudflare as evil, you can give their DNS at 1.1.1.1 a try

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 5 points 2 years ago (1 child)

    You don't have to @ someone if you are replying directly to their comment or post.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 16 points 2 years ago (1 child)

    The at-ing is because of federation between Lemmy instances and mastodon instances.
    It's the way discussions happen on mastodon

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
    • [–] 2 points 2 years ago (1 child)

    OpenNIC is my favourite, community run, lots of servers have no logs

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago (1 child)

    OpenNIC is quite a hit or miss for me. How does it work for you?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    What do you mean?

    Uptime? DNS resolution speed?

    I've been using them for a good 10 years, occasionally a server goes down but then you just swap them in your config.

    I set them on my router which acts as the cache server as well. So after a client resolves it, no other clients have issues.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
    • [–] 2 points 2 years ago (1 child)

    OpenDNS, anyone?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
    • [–] 1 point 2 years ago

    Quad9

    9.9.9.9

  • permalink
  • fedilink
  • source
    •
    [+] -21 points 2 years ago (2 children)

    I don't get what data you're worried about feeding Google? Domain names? They have them all already, thats how they know what IP belongs to them.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •