DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8.8.8 x Quad9 x OpenDNS

Post by syshum » Mon, Apr 02, 2018, 6:41 PM UTC

vimda wrote: post #156

kawsper wrote: post #130

Earlier quoted context omitted.

They also allow for websites to look HTTPs-enabled, but the transfer happens in clear text, e.g.: Client -(HTTPS)> CloudFlare -(HTTP)> Server. For a company that allegedly is privacy first, this is a huge violation of trust. I also know about some people that run websites that can't get Stripe because they can't figure out how to configure SSL for their website, they just plug in CloudFlare in front, and now they can…

The threat model of MiTM attacks leans heavily towards the client side than the Cloudflare -> origin connection. It's not perfect and it would be fantastic if everyone could setup SSL on their origin servers, but in the end there's are more script kiddies in coffeeshops than there are tier1 isps trying to steal your data

Post by redm » Mon, Apr 02, 2018, 6:49 PM UTC

cleanbrowsing wrote: post #176

Pushed a shell script to compare all of them from your location: https://github.com/cleanbrowsing/dnsperftest $ sh ./dnstest.sh |sort -k 22 -n test1 test2 test3 test4 test5 test6 test7 test8 test9 test10 Average cloudflare 1 ms 1 ms 1 ms 4 ms 1 ms 1 ms 1 ms 1 ms 1 ms 1 ms 1.30 norton 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2.00 neustar 2 ms 2 ms 2 ms 2 ms 1 ms 2 ms 2 ms 2 ms 2 ms 22 ms 3.90 cleanbrowsing 11…

               test1   test2   test3   test4   test5   test6   test7   test8   test9   test10  Average 
  norton         5 ms    6 ms    5 ms    6 ms    5 ms    5 ms    6 ms    6 ms    5 ms    6 ms      5.50
  neustar        6 ms    6 ms    6 ms    6 ms    6 ms    5 ms    6 ms    5 ms    6 ms    6 ms      5.80
  cloudflare     7 ms    7 ms    7 ms    7 ms    7 ms    7 ms    7 ms    7 ms    7 ms    7 ms      7.00
  cleanbrowsing  16 ms   31 ms   16 ms   16 ms   16 ms   16 ms   16 ms   16 ms   16 ms   16 ms     17.50
  google         14 ms   5 ms    5 ms    13 ms   5 ms    121 ms  5 ms    14 ms   12 ms   12 ms     20.60
  opendns        11 ms   5 ms    5 ms    18 ms   5 ms    131 ms  5 ms    12 ms   12 ms   5 ms      20.90
  comodo         34 ms   34 ms   34 ms   34 ms   33 ms   34 ms   34 ms   33 ms   33 ms   34 ms     33.70
  quad9          45 ms   46 ms   49 ms   44 ms   44 ms   44 ms   44 ms   56 ms   45 ms   45 ms     46.20
  yandex         144 ms  148 ms  148 ms  146 ms  153 ms  143 ms  148 ms  180 ms  148 ms  148 ms    150.60
  adguard        156 ms  167 ms  150 ms  149 ms  151 ms  146 ms  147 ms  148 ms  189 ms  147 ms    155.00

Post by [deleted] » Mon, Apr 02, 2018, 6:52 PM UTC

mino wrote: post #198

danpalmer wrote: post #160

Earlier quoted context omitted.

Yep, Virgin Media did this in the UK and messed it up badly. Every day at 6pm YouTube would stop working until the following morning. It appeared to work by inspecting DNS packets and replying with overrides if necessary. I didn’t like it but I could understand that. What I did not agree with was the fact that this also happened for other DNS services. Google DNS and OpenDNS both experienced the same issue, as did a…

Again, it's probably _not_ Virgin's fault or responsibility. Capacity planning is handled by Google directly. Also, I think that virtually every ISP with more than a few tens of thousands users is hosting a GGC instance nowadays (and a Netflix OpenCache, etc. etc.). Nowadays, the vast majority of the transit&peering of ISPs is not going to the Internet, but to a few racks of local caching servers managed by OTT opera…

Post by cleanbrowsing » Mon, Apr 02, 2018, 6:56 PM UTC

redm wrote: post #203

cleanbrowsing wrote: post #176

Pushed a shell script to compare all of them from your location: https://github.com/cleanbrowsing/dnsperftest $ sh ./dnstest.sh |sort -k 22 -n test1 test2 test3 test4 test5 test6 test7 test8 test9 test10 Average cloudflare 1 ms 1 ms 1 ms 4 ms 1 ms 1 ms 1 ms 1 ms 1 ms 1 ms 1.30 norton 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2.00 neustar 2 ms 2 ms 2 ms 2 ms 1 ms 2 ms 2 ms 2 ms 2 ms 22 ms 3.90 cleanbrowsing 11…

Oddly, I also got the best performance from Norton. An MTR shows Norton at 5 hops, Google at 8 hops and Cloudflare at 7. I might even accept slower speeds for added privacy, luckily I don't have to. test1 test2 test3 test4 test5 test6 test7 test8 test9 test10 Average norton 5 ms 6 ms 5 ms 6 ms 5 ms 5 ms 6 ms 6 ms 5 ms 6 ms 5.50 neustar 6 ms 6 ms 6 ms 6 ms 6 ms 5 ms 6 ms 5 ms 6 ms 6 ms 5.80 cloudflare 7 ms 7 ms 7 ms 7…

Post by beaconfield » Mon, Apr 02, 2018, 7:05 PM UTC