Cloudflare 1.1.1.1 Incident on July 14, 2025

Post by Quad9 » Thu, Jul 17, 2025, 3:14 PM UTC

Aachen wrote: post #368

Quad9 wrote: post #280

Earlier quoted context omitted.

What is your ticket #? Let's see if we can get this resolved for you.

Oh hey, didn't expect this to actually be seen by many people, let alone you guys! There was no ticket number yet because I was mainly trying to resolve it upstream (whoever made it get into uBlock's default block list, Quad9, and probably other places) and then today when I checked your site specifically, the link in "False Positive? " (when you do a lookup for a blocked domain) just links back to itself so I couldn…

Post by kingnothing » Thu, Jul 17, 2025, 3:43 PM UTC

itake wrote: post #367

gerdesj wrote: post #361

Earlier quoted context omitted.

DNS is just a look up service. You can filter it or not but in the end it is just a "source of truth". What are you trying to do on your wifi?

Many wifi networks redirect non-encrypted http traffic to their captive portal. For the redirect to work, your DNS needs to be the default one provided by the router so that http://neverssl.com resolves to the wifi's "Please accept our ToS to get online" page. If you aren't using their DNS, then your network requests just get dropped (as you're not approved yet). You need their DNS to learn how to access their captiv…

Post by itake » Thu, Jul 17, 2025, 4:59 PM UTC

kingnothing wrote: post #383

itake wrote: post #367

Earlier quoted context omitted.

Many wifi networks redirect non-encrypted http traffic to their captive portal. For the redirect to work, your DNS needs to be the default one provided by the router so that http://neverssl.com resolves to the wifi's "Please accept our ToS to get online" page. If you aren't using their DNS, then your network requests just get dropped (as you're not approved yet). You need their DNS to learn how to access their captiv…

My clients use DHCP for everything and are always connected to my home VPN. If I'm away from home and need to connect to a captive network, I'll turn off the VPN, connect, then re-enable the VPN. I run unbound at home for DNS.

Post by zac23or » Thu, Jul 17, 2025, 10:45 PM UTC

kentonv wrote: post #373

zac23or wrote: post #302

Earlier quoted context omitted.

>cache.delete obviously only deletes that browser's cache, not all other browsers in the world. To me, it only makes sense if the put method creates a cache only in the datacenter where the Worker was invoked. Put and delete need to be related, in my opinion. Now I'm curious: what's the point of clearing the cache contents in the datacenter where the Worker was invoked? I can't think of any use for this method. My cr…

> To me, it only makes sense if the put method creates a cache only in the datacenter where the Worker was invoked. Put and delete need to be related, in my opinion. That is, in fact, how it works. cache.put() only writes to the local datacenter's cache. If delete() were global, it would be inconsistent with put(). > Now I'm curious: what's the point of clearing the cache contents in the datacenter where the Worker w…

Post by kachapopopow » Fri, Jul 18, 2025, 4:02 AM UTC

BenjiWiebe wrote: post #384

kachapopopow wrote: post #347

Earlier quoted context omitted.

Running your own and being the sole user is the exact same thing as using a dns server (you need to obtain nameservers for any given domain which you have to contact a dns server for).

Except that your queries are spread out to different places instead of all being sent to a single server. You ask .com resolver for domain.com's NS, and then you ask ns1.domain.com for foo.domain.com. Then you browse to wikipedia.org, and none of those DNS queries go to the same place as the previous site.