DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8.8.8 x Quad9 x OpenDNS

Post by mjevans » Mon, Apr 02, 2018, 8:23 PM UTC

bscphil wrote: post #174

sajal83 wrote: post #54

Earlier quoted context omitted.

Fair enough, but most users won't care enough look it up and use 9.9.9.10 instead of 9.9.9.9 if they want better performance in exchange for allegedly lower privacy. It appears 1.1.1.1 also does not pass client-subnet, atleast not by default. Queries to my authoritative from Google always includes client subnet, OpenDNS required request for whitelist. For Cloudflare its unclear.

>It appears 1.1.1.1 also does not pass client-subnet, atleast not by default. Wow, this is actually a huge issue. Just as a simple test, I tried nslookup google.com for both 1.1.1.1 and 8.8.8.8, and Cloudflare's responses ping at about 200ms, whereas Google's responses ping at ~10ms.

Post by vertex-four » Mon, Apr 02, 2018, 8:43 PM UTC

oelmekki wrote: post #64

vertex-four wrote: post #55

Earlier quoted context omitted.

Honestly, isn’t Unbound a better shout if you’re not going to be fiddling with it? Just install, run, and edit /etc/resolv.conf to point at 127.0.0.1.

Well, you're describing exactly how to do it with bind9 :) What make you say Unbound is better?

Post by qznc » Mon, Apr 02, 2018, 8:52 PM UTC

cleanbrowsing wrote: post #176

Pushed a shell script to compare all of them from your location: https://github.com/cleanbrowsing/dnsperftest $ sh ./dnstest.sh |sort -k 22 -n test1 test2 test3 test4 test5 test6 test7 test8 test9 test10 Average cloudflare 1 ms 1 ms 1 ms 4 ms 1 ms 1 ms 1 ms 1 ms 1 ms 1 ms 1.30 norton 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2 ms 2.00 neustar 2 ms 2 ms 2 ms 2 ms 1 ms 2 ms 2 ms 2 ms 2 ms 22 ms 3.90 cleanbrowsing 11…

  Tested 20 domains 5 times each
                Median    MAD
  NortonDNS      38 ms   + 3 ms
  CleanBrowsing  25 ms   +22 ms
  CloudFlare     24 ms   + 2 ms
  AdGuard        36 ms   + 6 ms
  Yandex         60 ms   +53 ms
  Comodo         46 ms   +11 ms
  Google         39 ms   +12 ms
  Quad9          39 ms   +26 ms
  OpenDNS        35 ms   +11 ms
  NeuStar        37 ms   + 2 ms
  Telekom        20 ms   +10 ms
  (system)        5 ms   + 9 ms

Post by timdavila » Mon, Apr 02, 2018, 8:57 PM UTC

Post by chungy » Mon, Apr 02, 2018, 9:10 PM UTC

josteink wrote: post #105

rmrfrmrf wrote: post #66

Earlier quoted context omitted.

NXDOMAIN hijacking is enough for me to switch, and most ISPs are doing it nowadays.

That’s quite a bold claim. Got any data to back it up? Source: I've yet to see this on any ISP I've used anywhere , sans free airport wifis. Travelled pretty much every continent on earth.