Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

webcache.googleusercontent.com

Post reply on HN
Print view View original

51–60 of 253 posts

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#51

Post by gruez »

manacit wrote: post #35
cm2187 wrote: post #33

Earlier quoted context omitted.

To me that’s a diversification away from 8.8.8.8. I am absolutely not criticising google’s DNS, it’s a useful service. But I am happy to get more choice.

I agree - there are not very many internet-scale (for lack of a better term), completely free and fast DNS servers who have an IP address that's easy to remember. Is that specific? sure, but I'll tell you when I go to set a new system up I'm going to type 8.8.8.8 because it's what comes to my mind.

Most ISPs provide their own DNS server via dhcp, why not use that?

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#52

Post by ocdtrekkie »

f2n wrote: post #30
gpm wrote: post #15

Earlier quoted context omitted.

Up to the website operator. Cloudflare actually went out of their way to make it easy to whitelist Tor IPs that would generally get automatictly blacklisted for abuse.

They also went out of their way to automatically treat them as more questionable by default. Unless the website operator explicitly whitelists tor, tor users are given a worse experience. EDIT: Maybe not anymore? See replies

This probably isn't really correct. Their blog says that 94% of the traffic they were getting over Tor was malicious, and since they probably automatically put IPs where a lot of malicious traffic comes from on the CAPTCHA list, my guess is all the Tor nodes got flagged automagically.

What they went out of their way to do, was explicitly make it less painful for legitimate users to use Tor, despite the amount of malicious content they get from Tor. I'd argue for most companies, if 94% of the traffic from somewhere is malicious, the answer is "block it and be done with it", but clearly, Cloudflare actually values Tor and what it stands for enough to come up with a workaround.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#53

Post by duskwuff »

mulmen wrote: post #49
manacit wrote: post #35

Earlier quoted context omitted.

I agree - there are not very many internet-scale (for lack of a better term), completely free and fast DNS servers who have an IP address that's easy to remember. Is that specific? sure, but I'll tell you when I go to set a new system up I'm going to type 8.8.8.8 because it's what comes to my mind.

For "easy to remember" my preference is to use Level 3 because I don't (directly) use them for any other service. 4.2.2.1 4.2.2.2 For as often as I manually configure DNS (I use DHCP) it's not onerous to look up the IPs of whatever DNS is preferable for your purpose. edit: Depending on who you are this may redirect you to a search portal. Probably best to find an alternate DNS provider.

Level 3's resolvers will return fake NXDOMAIN responses that redirect to searchguide.level3.com.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#54

Post by m-p-3 »

cm2187 wrote: post #33
amq wrote: post #12

The concerning thing about this is that internet is increasingly dependent on Cloudflare, making it a single point of failure and exploitation. Somehow, people are not talking much about it, but a significant amount of sites have opted in for Cloudflare proxying, allowing it to see the traffic in plain text, while the visitors are made to believe that the connection is secure. Similarly, users will now use their fast…

To me that’s a diversification away from 8.8.8.8. I am absolutely not criticising google’s DNS, it’s a useful service. But I am happy to get more choice.

There's also Quad9 that I saw in an article earlier (not sure if it was on HN).

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#57

Post by cm2187 »

m-p-3 wrote: post #54
cm2187 wrote: post #33

Earlier quoted context omitted.

To me that’s a diversification away from 8.8.8.8. I am absolutely not criticising google’s DNS, it’s a useful service. But I am happy to get more choice.

There's also Quad9 that I saw in an article earlier (not sure if it was on HN).

My personal experience is that I had reliability problems that I didn’t have with Google. And DNS is a critical step in the connection for which you really want reliability.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#59

Post by gsich »

gpm wrote: post #15
gsich wrote: post #5

Earlier quoted context omitted.

Do Cloudflare websites work from TOR then?

Up to the website operator. Cloudflare actually went out of their way to make it easy to whitelist Tor IPs that would generally get automatictly blacklisted for abuse.

Not up to the website operator. If Cloudflare blocks TOR or annoys them with Captchas it's Cloudflares problem.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#60

Post by singularity2001 »

amq wrote: post #12

The concerning thing about this is that internet is increasingly dependent on Cloudflare, making it a single point of failure and exploitation. Somehow, people are not talking much about it, but a significant amount of sites have opted in for Cloudflare proxying, allowing it to see the traffic in plain text, while the visitors are made to believe that the connection is secure. Similarly, users will now use their fast…

single point of failure and single point of surveillance, together with 8.8.8.8
Post reply on HN