sudo echo "nameserver 1.1.1.1" > /etc/resolv.conf

364 views
Skip to first unread message

Pete Mundy

unread,
Apr 4, 2018, 8:54:48 PM4/4/18
to techies-for-schools@googlegroups.com schools
Hello group,

I'm interested to know if anyone else has started resolving their DNS using 1.1.1.1 yet?

https://1.1.1.1/
https://labs.apnic.net/?p=1127
https://blog.cloudflare.com/announcing-1111/

At my home I'm planning on running a local recursive resolver for our LAN which will do DNSSEC validation on it's lookups (I'll use unbound on an RPi), and which forwards it's queries outbound to CF's 1.1.1.1 instance using DNS over TLS (port 853).

I like the fact that'll make the queries opaque on the wire, and the lookup data will never be committed to disk (and also cleared every 24 hours from RAM). I think their 'Query Name Minimization' adds value from the privacy aspect too.

https://developers.cloudflare.com/1.1.1.1/nitty-gritty-details/

I also noted that 1.1.1.1 was being served out of Aus for the first few days, which gave it latency on par with 8.8.8.8. But in the last day it has moved to CF's Auckland node, so now the latency is far less! Around 15ms RTT for me down here in the SI, but for those of you in Auckland it may well be far less. Possibly even in the range of one of two ms.

Pete

signature.asc

Julian Davison

unread,
Apr 4, 2018, 8:59:39 PM4/4/18
to techies-f...@googlegroups.com


Pete

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.
To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-schools+unsub...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Pete Mundy

unread,
Apr 4, 2018, 9:02:42 PM4/4/18
to techies-for-schools@googlegroups.com schools

No I have not. Thanks for the tip Julian :)
signature.asc
Reply all
Reply to author
Forward
0 new messages