41–50 of 151 posts
But...
Why do you need a shitton of javascript to load your main page?
I cannot see the main page with ublock origin + umatrix blocking 3rd party and firefox finger print resistant options turned on.
I don't understand why any privacy conscious person would choose a hosted service instead of self-hosting your own solution. Implementing the whole thing (modulo the anycast IP, which is the only thing I did not use) is easy. I have a docker-compose file which does the whole stack: 1. Unbound DNS which provides DNS-over-TLS service at port 853. It forward request to my local pihole's 53 port. 2. Pihole forward reques…
We've been working super hard on nextdns.io, a cloud-based private DNS service that gives you full control over what is allowed or blocked on your devices. Here is a few things you can do with it: - Block malicious websites, trackers, ads, and more by combining the most popular blocklists out there, all updated in real-time (100+ lists to choose from). - Set your own privacy requirements: you decide what type of logs…
Nice. DNS has grown notoriously complex over the years and it is hard work to run a standards compliant service. Congratulations. A few suggestions: - Auto-detect OS and suggest specific setup instructions right on the landing page? - The website goes blank when I block third-party JavaScript from loading. Can you please see if you can fix that? - simplednscrypt has been handy for me to DoT/DoH/DNSCrypt with AdGuard…
> Auto-detect OS and suggest specific setup instructions right on the landing page?
It should already pre-select your OS tab on my.nextdns.io on the Setup page? If that's not the case, then it's probably a bug.
> The website goes blank when I block third-party JavaScript from loading. Can you please see if you can fix that?
Weird, we will have a look.
> simplednscrypt has been handy for me to DoT/DoH/DNSCrypt with AdGuard DNS on PC. You could include instructions in the Windows section for that? https://dnscrypt.info/implementations/
You can use your custom sdns:// endpoint listed on the Setup page, we assumed users using dnscrypt clients would know what this means. Good point, we will add setup instructions for it.
> Provide a generic DNS endpoint like AdGuard does?
We already have them, we decided to not show them on the website as it may confuse users. We may add them back.
> What's the backend that fronts DoH, DoT, and DNSCrypt queries? Is it simply relayed to Cloudflare underneath the covers? How do you do that?
It's a custom-made backend, and we recurse using unbound (we don't forward to cloudflare or anything like that).
> Re: Privacy Policy: "We store user data following modern security standards". What user data is stored using what modern standards? I like the terse policy document, but I feel there needs to be a fine print detailing data collection and data retention.
We will definitely improve that, we had to make some calls on priorities for the launch.
I don't understand why any privacy conscious person would choose a hosted service instead of self-hosting your own solution. Implementing the whole thing (modulo the anycast IP, which is the only thing I did not use) is easy. I have a docker-compose file which does the whole stack: 1. Unbound DNS which provides DNS-over-TLS service at port 853. It forward request to my local pihole's 53 port. 2. Pihole forward reques…
Even if the setup is easy, production-grade hosting is not.
Even with this setup there are ways to increase reliability with-in the budget/skill set of a normal engineer, e.g. run two RasPi with keepalived and run VRRP on your routers. As a last resort, I can disable the "Private DNS" setting on my phone if my DNS is down and I can't fix quickly enough remotely.
We've been working super hard on nextdns.io, a cloud-based private DNS service that gives you full control over what is allowed or blocked on your devices. Here is a few things you can do with it: - Block malicious websites, trackers, ads, and more by combining the most popular blocklists out there, all updated in real-time (100+ lists to choose from). - Set your own privacy requirements: you decide what type of logs…
I tried using it. I'm in India, and while Cloudflare and Google DNS consistently resolve in 60-70ms, nextdns takes between 400-700ms for the first resolution and consistently 250ms for the same query repeated (I presume it caches the results?) Should I assume you've gotten a huge spike in traffic because of this HN post? If yes, I don't mind trying again in a few days, but unless things improve, I wouldn't be able to…
I am from Sri Lanka and I get following over IPv6 using dig,
80-120ms for Nextdns (92ms avg ping)
75-140ms for Google (61ms avg ping)
70-90ms for Cloudflare (75ms avg ping)
We've been working super hard on nextdns.io, a cloud-based private DNS service that gives you full control over what is allowed or blocked on your devices. Here is a few things you can do with it: - Block malicious websites, trackers, ads, and more by combining the most popular blocklists out there, all updated in real-time (100+ lists to choose from). - Set your own privacy requirements: you decide what type of logs…
dig @5.182.208.203 google.com ;; Query time: 390 msec
We've been working super hard on nextdns.io, a cloud-based private DNS service that gives you full control over what is allowed or blocked on your devices. Here is a few things you can do with it: - Block malicious websites, trackers, ads, and more by combining the most popular blocklists out there, all updated in real-time (100+ lists to choose from). - Set your own privacy requirements: you decide what type of logs…
Good on ya. How is this all being paid for? How are you making money? Is there a subscription fee?
I believe your service would also solves this problem. Congrats on the launch too!
I don't understand why any privacy conscious person would choose a hosted service instead of self-hosting your own solution. Implementing the whole thing (modulo the anycast IP, which is the only thing I did not use) is easy. I have a docker-compose file which does the whole stack: 1. Unbound DNS which provides DNS-over-TLS service at port 853. It forward request to my local pihole's 53 port. 2. Pihole forward reques…
A sidenote -- Anycast is trivially easy to setup; with their current host, Vultr, offering essentially turn-key solutions.