Alternative DNS services
Cisco Umbrella (formerly OpenDNS)
OpenDNS provided free alternative nameservers, was bought by Cisco in Nov. 2016 and continues to offer OpenDNS as end-user product of its "Umbrella" product suite with focus on Security Enforcement, Security Intelligence and Web Filtering. The old nameservers still work but are pre-configured to block adult content:
Cloudflare provides a service committed to never writing the querying IP addresses to disk and wiping all logs within 24 hours, with the exception of providing data to APNIC labs for research purposes. APNIC and Cloudfare committed to treat all data with high privacy standards in their research agreement statement.
Comodo provides another IPv4 set, with optional (non-free) web-filtering. Implied in this feature is that the service hijacks the queries.
DNS.WATCH focuses on neutrality and security and provides two servers located in Germany with no logging and with DNSSEC enabled. Note they welcome commercial sponsorship.
188.8.131.52 # resolver1.dns.watch 184.108.40.206 # resolver2.dns.watch
Google's nameservers can be used as an alternative:
OpenNIC provides free uncensored nameservers located in multiple countries. The full list of public servers is available at servers.opennic.org and a shortlist of nearest nameservers for optimal performance is generated on their home page.
To retrieve a list of nearest nameservers, an API is also available and returns, based on the URL parameters provided, a list of nameservers in the desired format. For example to get the 200 nearest IPv4 servers, one can use https://api.opennicproject.org/geoip/?list&ipv=4&res=200&adm=0&bl&wl.
Alternatively, the anycast servers below can be used; while reliable their latency fluctuates a lot.
IPv4 nameservers (Worldwide Anycast)
IPv6 nameservers (Worldwide Anycast)
- The use of OpenNIC DNS servers will allow host name resolution in the traditional Top-Level Domain (TLD) registries, but also in OpenNIC or afiliated operated namespaces: .o, .libre, .dyn...
- The tool opennic-up — automates the renewal of the DNS servers with the most responsive OpenNIC servers
Quad9 is a free DNS service founded by IBM, Packet Clearing House and Global Cyber Alliance; its primary unique feature is a blocklist which avoids resolving known malicious domains. The addresses below are worldwide anycast.
220.127.116.11 ## "secure", with blocklist and DNSSEC 18.104.22.168 ## no blocklist, no DNSSEC
2620:fe::fe ## "secure", with blocklist and DNSSEC 2620:fe::10 ## no blocklist, no DNSSEC
UncensoredDNS is a free uncensored DNS service. It is run by a private individual and consists in one anycast served by multiple servers and one unicast node hosted in Denmark.
22.214.171.124 ## anycast.censurfridns.dk 126.96.36.199 ## unicast.censurfridns.dk
2001:67c:28a4:: ## anycast.censurfridns.dk 2a01:3a0:53:53:: ## unicast.censurfridns.dk
Yandex.DNS has servers in Russia, Eastern and Western Europe and has three options, Basic, Safe and Family:
Basic Yandex.DNS - Quick and reliable DNS
188.8.131.52 # Preferred IPv4 DNS 184.108.40.206 # Alternate IPv4 DNS 2a02:6b8::feed:0ff # Preferred IPv6 DNS 2a02:6b8:0:1::feed:0ff # Alternate IPv6 DNS
Safe Yandex.DNS - Protection from virus and fraudulent content
220.127.116.11 # Preferred IPv4 DNS 18.104.22.168 # Alternate IPv4 DNS 2a02:6b8::feed:bad # Preferred IPv6 DNS 2a02:6b8:0:1::feed:bad # Alternate IPv6 DNS
Family Yandex.DNS - Without adult content
22.214.171.124 # Preferred IPv4 DNS 126.96.36.199 # Alternate IPv4 DNS 2a02:6b8::feed:a11 # Preferred IPv6 DNS 2a02:6b8:0:1::feed:a11 # Alternate IPv6 DNS
Yandex.DNS' speed is the same in the three modes. In Basic mode, there is no traffic filtering. In Safe mode, protection from infected and fraudulent sites is provided. Family mode enables protection from dangerous sites and blocks sites with adult content.