Hello group,
I'm interested to know if anyone else has started resolving their DNS using 1.1.1.1 yet?
https://1.1.1.1/
https://labs.apnic.net/?p=1127
https://blog.cloudflare.com/announcing-1111/
At my home I'm planning on running a local recursive resolver for our LAN which will do DNSSEC validation on it's lookups (I'll use unbound on an RPi), and which forwards it's queries outbound to CF's 1.1.1.1 instance using DNS over TLS (port 853).
I like the fact that'll make the queries opaque on the wire, and the lookup data will never be committed to disk (and also cleared every 24 hours from RAM). I think their 'Query Name Minimization' adds value from the privacy aspect too.
https://developers.cloudflare.com/1.1.1.1/nitty-gritty-details/
I also noted that 1.1.1.1 was being served out of Aus for the first few days, which gave it latency on par with 8.8.8.8. But in the last day it has moved to CF's Auckland node, so now the latency is far less! Around 15ms RTT for me down here in the SI, but for those of you in Auckland it may well be far less. Possibly even in the range of one of two ms.
Pete