Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: nextdns.io – A Combination of Cloudflare DNS and Pi-Hole

nextdns.io

Post reply on HN
Print view View original

131–140 of 151 posts

Re: Show HN: nextdns.io – A Combination of Cloudflare DNS and Pi-Hole

#131

Post by yegle »

xfer wrote: post #92
yegle wrote: post #33

Earlier quoted context omitted.

Depending on your goal. If you just want to have an ad blocking DNS server then nextdns.io is fine. But if you also want to have some control over the privacy issue involved in using a public DNS server, you should seriously consider hosting it yourself.

You are using Google dns servers and you are saying you have "control over the privacy issue involved in using a public DNS server" ?

Depending on your goal: I really don't like the idea all the ISPs can track what websites I visited (Verizon, ATT, and ISPs behind public WiFi). To me, my setup is a huge improvement to the status quo.

Re: Show HN: nextdns.io – A Combination of Cloudflare DNS and Pi-Hole

#132

Post by Terretta »

nextdns wrote: post #51
terragon wrote: post #40

Earlier quoted context omitted.

I tried using it. I'm in India, and while Cloudflare and Google DNS consistently resolve in 60-70ms, nextdns takes between 400-700ms for the first resolution and consistently 250ms for the same query repeated (I presume it caches the results?) Should I assume you've gotten a huge spike in traffic because of this HN post? If yes, I don't mind trying again in a few days, but unless things improve, I wouldn't be able to…

It's not the spike, it's probably a combination of: - a routing imperfection (this things need to be tweaked over time). - the fact that we didn't deploy our PoP in India yet (coming this month). Can you talk to us on the chat if you have some time? It would help to do some debugging.

Great idea for service, but it has to be lightning fast to be in the middle of thousands of requests a minute as someone is surfing the web without making the web feel sluggish.

In NYC on the largest metro ISP. Earlier in the day, was getting 25-43 msec to the typical major DNS providers (1.1.1.1, 4.4.4.4, 8.8.8.8, 9.9.9.9, as well as AdGuard), and usually 71 - 73 msec to you.

After a while, started getting as slow as 280 msec to you.

Last hour or so, mostly just getting timeouts to you, making the web, as well as apps, unusable.

Had to revert.

AdGuard DNS:

    dig @176.103.130.130 news.ycombinator.com
    
    ; > DiG 9.10.6 > @176.103.130.130 news.ycombinator.com
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER
nextdns.io

    dig @5.182.208.100 news.ycombinator.com
    
    ; > DiG 9.10.6 > @5.182.208.100 news.ycombinator.com
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER

Re: Show HN: nextdns.io – A Combination of Cloudflare DNS and Pi-Hole

#134

Post by Terretta »

nextdns wrote: post #24
sergiomattei wrote: post #21

How do you make money? How can I make sure you won't sell my data?

The service is free during beta, then freemium with low pricing tiers (something like free up to 500,000 DNS queries a month, then $0.99/month). We will tweak later based on actual costs at scale, but it will follow this logic. Selling data is against what we believe in and would also be counter-productive (everybody would stop using the service instantly).

Happy to pay. Your feature set is already fantastic, and love the many methods to leverage it from various devices or configurations.

But has to be rock solid, and fast.

Re: Show HN: nextdns.io – A Combination of Cloudflare DNS and Pi-Hole

#136

Post by blattimwind »

yegle wrote: post #118
blattimwind wrote: post #104

Earlier quoted context omitted.

You can absolutely just run a recursive resolver on your laptop use that resolver in every[+] network. There is literally nothing special about a recursive resolver except it doing some legwork that a stub resolver / filter resolver (like glibc or dnsmasq) doesn't do. If you run e.g. Linux or BSD, you'd just install knot-resolver, enable the service and put "127.0.0.1" in your /etc/resolv.conf. That's it. Similarly i…

Debian 10 Buster already install Stubby DNS by default as your caching DNS server.

Stubby is, as the name implies, not a recursive resolver. It's a DoT stub resolver.

Re: Show HN: nextdns.io – A Combination of Cloudflare DNS and Pi-Hole

#137

Post by 7ewis »

jamesog wrote: post #126
7ewis wrote: post #94

Earlier quoted context omitted.

468ms in the UK. 9ms on Cloudflare, 10ms on Google.

There seems to be some routing oddities going on. I'm also in the UK (on AAISP). Sometimes I get ~48ms response, other times 200-300ms. Looking at mtr I'm occasionally routed to Dallas, Texas. Other times it's correctly routing over my ISP's peering to Vultr.

What command did you run in mtr to see the routing locations?

Or just a normal report, then lookup the IP location?

Re: Show HN: nextdns.io – A Combination of Cloudflare DNS and Pi-Hole

#138

Post by jamesog »

7ewis wrote: post #137
jamesog wrote: post #126

Earlier quoted context omitted.

There seems to be some routing oddities going on. I'm also in the UK (on AAISP). Sometimes I get ~48ms response, other times 200-300ms. Looking at mtr I'm occasionally routed to Dallas, Texas. Other times it's correctly routing over my ISP's peering to Vultr.

What command did you run in mtr to see the routing locations? Or just a normal report, then lookup the IP location?

By default mtr will do reverse DNS lookups on all hops. Several of the traces I ran showed the route to nextdns's /24 transiting over NTT and from the DNS name you can figure out where each router is.

Re: Show HN: nextdns.io – A Combination of Cloudflare DNS and Pi-Hole

#139

Post by bscphil »

dual_basis wrote: post #107
bscphil wrote: post #34

Earlier quoted context omitted.

>I try to only use/pay for free-as-in-speech software I would like to see more software adopt this model. Can you give a few examples of things you support? Are they all pay-for-hosting services, or are there cases where the software itself is for sale?

What does "free-as-in-speech" mean in the context of software? A strict interpretation would suggest something along the lines of "we don't censor what the customers of our software do with it", which is true for almost all software (aside from social media platforms). I don't see how this would apply here, since this software isn't being used for the creation of anything. A looser interpretation would suggest that,…

"free-as-in-speech" is usually intended to contrast with "free-as-in-beer", thereby disambiguating the word "free" in English. Some software is "free-as-in-speech", which means you aren't limited with what you can do with it or its code -- "free" means that the user has certain rights. I think Stallman introduced this way of talking about software; people sometimes use "libre" instead. https://ssd.eff.org/en/glossary/open-source-software

Re: Show HN: nextdns.io – A Combination of Cloudflare DNS and Pi-Hole

#140

Post by [deleted] »

yegle wrote: post #131
xfer wrote: post #92

Earlier quoted context omitted.

You are using Google dns servers and you are saying you have "control over the privacy issue involved in using a public DNS server" ?

Depending on your goal: I really don't like the idea all the ISPs can track what websites I visited (Verizon, ATT, and ISPs behind public WiFi). To me, my setup is a huge improvement to the status quo.

[deleted]
Post reply on HN