dns servers/proxies

Get help with DNS related problems or issues in #dns

   New root hints

Use dig, drill or kdig to fetch them from any root server into whichever file is used to prime your server, e.g., dig @198.41.0.4 > named.cache

Hints, full zone and trust anchor (KSK) files are available from or via IANA using FTP or HTTPS.

   New root DNSSEC KSK

The root DNSSEC KSK (trust anchor) was replaced (rolled) on 11 October 2018 -- originally planned for a year earlier it was postponed for cautionary reasons, see their announcement for details. For most this has been a non-event. ICANN has information for anyone interested, especially those running validating resolvers.

   Software

   Nameservers or proxies

Name Version Type
BIND 9.14.3/9.11.8 authoritative and validating resolver in one
Cisco Prime Network Registrar DNS 9.1.1.1 authoritative and validating resolver
CoreDNS 1.5.2 DNS server written in Go, with service discovery and chaining plugins
djbdns 1.05 authoritative (limited record types supported) and non-validating resolver using distinct programs
DNRD 2.20.3 proxy
dnscrypt-proxy 1.9.5 proxy/forwarder
dnsdist 1.3.3 load balancer, DoT (since 1.3.0), dnscrypt
dnsmasq 2.80 filtering proxy with authoritative abilities
Dohnut 4.5.2 DNS to DoH proxy, load balancer, query fuzzer
gdnsd 3.2.0 authoritative
Knot DNS 2.8.2 authoritative
Knot Resolver 4.1.0 validating resolver
MaraDNS 2.0.17 authoritative
MaraDNS Deadwood 3.2.14 resolver
NSD 4.2.1 authoritative
NxFilter 4.3.4.5 filtering proxy
pdnsd 1.2.9a-par proxy
Posadis 0.60.6 authoritative and resolver in one
PowerDNS Authoritative 4.1.10 authoritative
PowerDNS Recursor 4.1.14 resolver
SANS 1.0.1 authoritative
Simple DNS Plus 8.0(110) authoritative and resolver all in one
stubby 0.2.6 proxy
systemd-resolved 240 optionally validating resolver (part of systemd), also supports DoT, LLMNR and mDNS
Technitium DNS Server 4.0(beta) resolver and proxy supporting optional forwarding via DoH (standard or "JSON") or DoT
Unbound 1.9.2 validating resolver, DoT, dnscrypt
YADIFA 2.3.9 authoritative

   Tools

Name Version Type
adns 1.5.1 cli: library that includes some utilities
BuddyNS Delegation Lab tool   web: visualize and troubleshoot delegation
Bulldohzer 1.1.2 cli: DNS & DoH latency measurements
c-ares 1.15.0 cli: library that includes some utilities
delv   cli: lookup and DNSSEC validation (part of BIND 9.10+)
dHSM   cli: Distributed Threshold Cryptography HSM
dHSM zone signer   cli: Zone signer companion for dHSM by using PKCS11
dig   cli: lookup (part of BIND)
DNSBajaj (DNS By Eye) 0.9.6 web: check the delegation of your domain by using graphs of dependencies
DNSDiag 1.6.4 cli: diagnostics and performance measurement
dnsperf/resperf 2.2.1 cli: benchmark nameserver performance
DNSSEC Analyzer   web: Verisign's DNSSEC problem debugger
dnssec-failed.org   web: if you can see visit the site your resolver didn't perform DNSSEC validation -- it should show a page saying that but doesn't
dnssec-tools.org 2.2.3 cli: various DNSSEC tools
web: results of data submitted by dnssec-check
gui: tray monitor
dnssectest.net   web: lookup and DNSSEC validation, plus DNSSEC deployment stats
DNSstuff   web: domain name analysis
DNSViz 0.8.2 cli & web: zone visualization (including DNSSEC)
dnstracer 1.9 cli: trace name delegation
flamethrower 0.10 cli: benchmark nameserver performance
getdnsapi 1.5.2 new api to use dns
Google Public DNS   web: web based resolver
intoDNS   web: provides lots of info about a domain (some requires own interpretation)
kdig   cli: advanced lookups including DoT (part of Knot DNS)
ldns 1.7.0 cli: library that includes a lookup tool (drill) that provides even more information than dig
Namebench 2.0 cli: benchmark nameserver performance
OpenDNSSEC 2.1.4 cli: policy-based zone signer with PKCS#11 interface
PacketQ 1.4.1 cli: run sql queries agaist pcap files
SoftHSM 2.5.0 cli: optional companion for OpenDNSSEC. Cryptographic store with PKCS#11 interface
The Transitive Trust and DNS Dependency Graph Portal   web: graphs of transitive trust and dependencies
unbound-host   cli: lookup (part of unbound)
Zonemaster 2019.1.1 cli+web: zone delegation quality checker

   Service providers

   Authoritative services

Note that most registrars provide it for free, though some charge a fee - we don't attempt to enumerate them here.

Provider Cost Notes
Afraid FreeDNS free with limits secondary
Akamai (Cotendo) paid  
Amazon - Route 53 paid api, registration
BuddyNS free and paid api
Cloudflare free and paid api, dynamic
ClouDNS free and paid tiers secondary
DNS Made Easy paid with free trial api
DNSimple paid secondary
Dyn paid dynamic, registration
easyDNS paid dynamic (some plans), registration, secondary
GoDaddy paid  
Google - Cloud DNS paid with free trial api
GratisDNS free secondary, danish
Hurricane Electric free api, dynamic, limited record types (no dnssec), secondary
Namecheap free, free if domain is purchased/renewed (BasicDNS) and paid dynamic, free has limited record types (no dnssec), secondary (premium only)
Neustar UltraDNS paid api, secondary
No-IP.com free and paid  
NS1 free and paid api, secondary
PUCK free secondary only
Rackspace free if using other (paid) services api
Verisign Managed DNS paid  
Verizon ROUTE paid api

   Recursor services

Note that most ISPs and some datacenters provide it for free to their customers - we don't attempt to enumerate them here. Beware: some ISPs log and sell their resolver data, and some replace NXDOMAIN with their own server's address(es) to provide their form of safety and/or marketing, some do both.

Also, paid filtering services usually provide customization, so domains or classes of domains can be added or removed from the filters.

Provider Cost Notes Addresses
Akamai AnswerX paid
CenturyLink (nee Level 3)   does not officially provide a public resolver though their servers will respond; they have at times provided 'fake' responses - please do not use these addresses
  • 4.2.2.x
Cisco Umbrella (nee OpenDNS) free and paid filtering, also on 5353/udp and 5353/tcp, dnscrypt on 443/tcp
check/purge entry at their cachecheck tool
check their system status (works even if your DNS isn't working)		 Home:
  • 208.67.222.222
  • 208.67.220.220
  • 2620:0:CCC::2
  • 2620:0:CCD::2
FamilyShield (blocks adult content):
  • 208.67.222.123
  • 208.67.220.123
CleanBrowsing free and paid filtering, also on 5353/udp and 5353/tcp, DoH, DoT, dnscrypt on 8443/tcp Security Filter (malicious sites):
  • 185.228.168.9
  • 185.228.169.9
  • 2A0D:2A00:1::2
  • 2A0D:2A00:2::2
Adult Filter (blocks security (above) plus adult, pornographic and explict): Family Filter (blocks adult (above) plus proxy/vpn and mixed content): TLS:
  • CN=cleanbrowsing.org
Cloudflare
announcement		   free, limited logging, DoH, DoT
Comodo Secure DNS free filtering
  • 8.26.56.26
  • 8.20.247.20
Commons Host free DoH only DoH:
DNS-OARC ODVR free validating
  • 184.105.193.73
  • 184.105.193.74
  • 2620:FF:C000:0:1::64:20
  • 2620:FF:C000:0:1::64:21
DNS.WATCH free no logging, validating
  • 84.200.69.80
  • 84.200.70.40
  • 2001:1608:10:25::1C04:B12F
  • 2001:1608:10:25::9249:D69B
Dyn Internet Guide free filtering, correcting
  • 216.146.35.35
  • 216.146.36.36
FreeDNS free no logging
  • 37.235.1.174
  • 37.235.1.177
Google Public DNS free validating, DoH
flush a cached entry using their flush cache tool
Norton ConnectSafe free filtering, validating, shutting down november 15th 2018 Security filtering only:
  • 199.85.126.10
  • 199.85.127.10
Security + Pornography:
  • 199.85.126.20
  • 199.85.127.20
Security + Pornography + Other:
  • 199.85.126.30
  • 199.85.127.30
Neustar DNS Advantage free correcting, filtering, validating Reliability & Performance 1:
  • 156.154.70.1
  • 156.154.71.1
  • 2610:A1:1018::1
  • 2610:A1:1019::1
Reliability & Performance 2 (no correcting):
  • 156.154.70.5
  • 156.154.71.5
  • 2610:A1:1018::5
  • 2610:A1:1019::5
Threat Protection (Malware, Ransomware, Spyware & Phishing):
  • 156.154.70.2
  • 156.154.71.2
  • 2610:A1:1018::2
  • 2610:A1:1019::2
Family Secure (Threat + Gambling, Pornography, Violence & Hate/Discrimination):
  • 156.154.70.3
  • 156.154.71.3
  • 2610:A1:1018::3
  • 2610:A1:1019::3
Business Secure (Family + Gaming, Adult, Drugs, Alcohol & Anonymous Proxies):
  • 156.154.70.4
  • 156.154.71.4
  • 2610:A1:1018::4
  • 2610:A1:1019::4
Quad9 free "Secure": filtering, logs only geoloc, does not send ecs, validating, DoT
"Unsecured": unfiltered, logs only geoloc, sends ecs, DoT		 "Secure":
  • 9.9.9.9
  • 149.112.112.112
  • 2620:FE::FE
  • 2620:FE::9
"Unsecured":
  • 9.9.9.10
  • 149.112.112.10
  • 2620:FE::10
  • 2620:FE::FE:10
TLS:
  • CN=dns.quad9.net
SafeDNS paid with free trial  
  • 195.46.39.39
  • 195.46.39.40
SecureDNS free validating, no logging, personally supported, DoH, DoT, dnscrypt on 5353/tcp, NameCoin & OpenNIC namespaces
  • 146.185.167.43
  • 2A03:B0C0:0:1010::E9A:3001

TLS: CN=securedns.eu/SAN=*.securedns.eu
SPKI Pin: h3mufC43MEqRD6uE4lz6gAgULZ5/riqH/E+U+jE3H8g=
DoH URL: https://doh.securedns.eu/dns-query
DoT Host: dot.securedns.eu
Verisign Public DNS free validating
  • 64.6.64.6
  • 64.6.65.6
  • 2620:74:1B::1:1
  • 2620:74:1C::2:2
Yandex.DNS free and paid filtering, unfiltered Basic (unfiltered):
  • 77.88.8.8
  • 77.88.8.1
  • 2A02:6B8::FEED:0FF
  • 2A02:6B8:0:1::FEED:0FF
Safe (Secure + "infected sites, fraudulent sites, and bots"):
  • 77.88.8.88
  • 77.88.8.2
  • 2A02:6B8::FEED:BAD
  • 2A02:6B8:0:1::FEED:BAD
Family (Safe + "adult sites and adult advertising"):
  • 77.88.8.7
  • 77.88.8.3
  • 2A02:6B8::FEED:A11
  • 2A02:6B8:0:1::FEED:A11

   Reading material

Resource Summary
RFC 1034 Domain names - concepts and facilities
RFC 1035 Domain names - implementation and specification
IANA DNS Parameters Compilation of DNS parameters with RFC references
IANA Protocol Registries Compilation of protocol registries, including among other things additional DNS and DNSSEC parameter compilations
Almost all DNS related RFCs Search rfc-editor.org for dns
Some DNS related RFCs Search rfc-editor.org for domain
An up to date list of Domain Name System RFCs Maintained by Frederic Cambus
Relevant Domain Name System RFCs Maintained by bert hubert
IANA Domain Name Services IANA maintains and operates several key aspects of the DNS
Blogged DNS links listing Compilation of blogged DNS links from Jan-Piet Mens
Alternative DNS Servers (Free) Book written by Jan-Piet Mens

   Why does this site exist?

The topic of #dns on freenode was growing too long, so here is all that info, and more.

This page is also hosted via GitHub with its source code available. Pull requests are welcome!

 

from http://dns-channel.github.io/#recsrv

-----

Known DNS Providers

 

AdGuard users can configure any DNS server to be used instead of the system default provided by the router or ISP. In this article you will find a list of popular DNS providers.

  

AdGuard DNS 

AdGuard DNS is an alternative solution for ad blocking, privacy protection, and parental control. It provides the number of necessary protection features against online ads, trackers, and phishing, no matter what platform and device you use.

Default 

These servers provide blocking ads, tracking and phishing

Protocol Address  
DNS, IPv4 176.103.130.130 and 176.103.130.131 Add to AdGuard
DNS, IPv6 2a00:5a60::ad1:0ff and 2a00:5a60::ad2:0ff Add to AdGuard
DNSCrypt, IPv4 Provider: 2.dnscrypt.default.ns1.adguard.com IP: 176.103.130.130:5443 Add to AdGuard
DNSCrypt, IPv6 Provider: 2.dnscrypt.default.ns2.adguard.com IP: [2a00:5a60::ad2:0ff]:5443 Add to AdGuard
DNS-over-HTTPS https://dns.adguard.com/dns-query Add to AdGuard
DNS-over-TLS tls://dns.adguard.com Add to AdGuard

Family Protection 

These servers provide the Default features + Blocking adult websites + Safe search

Protocol Address  
DNS, IPv4 176.103.130.132 and 176.103.130.134 Add to AdGuard
DNS, IPv6 2a00:5a60::bad1:0ff and 2a00:5a60::bad2:0ff Add to AdGuard
DNSCrypt, IPv4 Provider: 2.dnscrypt.family.ns1.adguard.com IP: 176.103.130.132:5443 Add to AdGuard
DNSCrypt, IPv6 Provider: 2.dnscrypt.family.ns2.adguard.com IP: [2a00:5a60::bad2:0ff]:5443 Add to AdGuard
DNS-over-HTTPS https://dns-family.adguard.com/dns-query Add to AdGuard
DNS-over-TLS tls://dns-family.adguard.com Add to AdGuard

  

Yandex DNS 

Yandex.DNS is a free recursive DNS service. Yandex.DNS' servers are located in Russia, CIS countries, and Western Europe. Users' requests are processed by the nearest data center which provides high connection speeds.

Basic 

In "Basic" mode, there is no traffic filtering

Protocol Address  
DNS, IPv4 77.88.8.8 and 77.88.8.1 Add to AdGuard
DNS, IPv6 2a02:6b8::feed:0ff and 2a02:6b8:0:1::feed:0ff Add to AdGuard
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.browser.yandex.net IP: 77.88.8.78:15353 Add to AdGuard

Safe 

In "Safe" mode, protection from infected and fraudulent sites is provided

Protocol Address  
DNS, IPv4 77.88.8.88 and 77.88.8.2 Add to AdGuard
DNS, IPv6 2a02:6b8::feed:bad and 2a02:6b8:0:1::feed:bad Add to AdGuard

Family 

In "Family" mode, protection from infected, fraudulent and adult sites is provided

Protocol Address  
DNS, IPv4 77.88.8.3 and 77.88.8.7 Add to AdGuard
DNS, IPv6 2a02:6b8::feed:a11 and 2a02:6b8:0:1::feed:a11 Add to AdGuard

  

CleanBrowsing 

Cleanbrowsing is a DNS service which provides customizable filtering. This service offers a safe way to browse the web without inappropriate content.

Family Filter 

Blocks access to all adult, pornographic and explicit sites, including proxy & VPN domains and mixed content sites

Protocol Address  
DNS, IPv4 185.228.168.168 and 185.228.169.168 Add to AdGuard
DNS, IPv6 2a0d:2a00:1::1 and 2a0d:2a00:2::1 Add to AdGuard
DNSCrypt, IPv4 Provider: cleanbrowsing.org IP: 185.228.168.168:8443 Add to AdGuard
DNSCrypt, IPv6 Provider: cleanbrowsing.org IP: [2a0d:2a00:1::]:8443 Add to AdGuard
DNS-over-HTTPS https://doh.cleanbrowsing.org/doh/family-filter/ Add to AdGuard

Adult Filter 

Less restrictive than the Family filter, it only blocks access to adult content and malicious and phishing domains

Protocol Address  
DNS, IPv4 185.228.168.10 and 185.228.169.10 Add to AdGuard
DNS, IPv6 2a0d:2a00:1:: and 2a0d:2a00:2:: Add to AdGuard
DNSCrypt, IPv4 Provider: cleanbrowsing.org IP: 185.228.168.10:8443 Add to AdGuard
DNSCrypt, IPv6 Provider: cleanbrowsing.org IP: [2a0d:2a00:1::1]:8443 Add to AdGuard
DNS-over-HTTPS https://doh.cleanbrowsing.org/doh/adult-filter/ Add to AdGuard

Security Filter 

Blocks phishing, spam and malicious domains

Protocol Address  
DNS, IPv4 185.228.168.9 and 185.228.169.9 Add to AdGuard
DNS, IPv6 2a0d:2a00:1::2 and 2a0d:2a00:2::2 Add to AdGuard
DNS-over-HTTPS https://doh.cleanbrowsing.org/doh/security-filter/ Add to AdGuard

  

Neustar Recursive DNS 

Neustar Recursive DNS is a free cloud-based recursive DNS service that delivers fast and reliable access to sites and online applications with built-in security and threat intelligence.

Reliability & Performance 1 

These servers provide reliable and fast DNS lookups without blocking any specific categories

Protocol Address  
DNS, IPv4 156.154.70.1 and 156.154.71.1 Add to AdGuard
DNS, IPv6 2610:a1:1018::1 and 2610:a1:1019::1 Add to AdGuard

Reliability & Performance 2* 

These servers provide reliable and fast DNS lookups without blocking any specific categories and also prevent redirecting NXDomain (Non-existent Domain) responses to a landing page

Protocol Address  
DNS, IPv4 156.154.70.5 and 156.154.71.5 Add to AdGuard
DNS, IPv6 2610:a1:1018::5 and 2610:a1:1019::5 Add to AdGuard

Threat Protection 

These servers provide protection against malicious domains and also include "Reliability & Performance" features

Protocol Address  
DNS, IPv4 156.154.70.2 and 156.154.71.2 Add to AdGuard
DNS, IPv6 2610:a1:1018::2 and 2610:a1:1019::2 Add to AdGuard

Family Secure 

These servers provide blocking access to mature content and also include "Reliability & Performance" + "Threat Protection" features

Protocol Address  
DNS, IPv4 156.154.70.3 and 156.154.71.3 Add to AdGuard
DNS, IPv6 2610:a1:1018::3 and 2610:a1:1019::3 Add to AdGuard

Business Secure 

These servers provide blocking unwanted and time-wasting content and also include "Reliability & Performance" + "Threat Protection" + "Family Secure" features

Protocol Address  
DNS, IPv4 156.154.70.4 and 156.154.71.4 Add to AdGuard
DNS, IPv6 2610:a1:1018::4 and 2610:a1:1019::4 Add to AdGuard

  

Cisco OpenDNS 

Cisco OpenDNS is a service which extends the DNS by incorporating features such as content filtering and phishing protection with a zero downtime.

Standard 

DNS servers with custom filtering that protects your device from malware

Protocol Address  
DNS, IPv4 208.67.222.222 and 208.67.220.220 Add to AdGuard
DNS, IPv6 2620:119:35::35 and 2620:119:53::53 Add to AdGuard
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.opendns.com IP: 208.67.220.220 Add to AdGuard
DNSCrypt, IPv6 Provider: 2.dnscrypt-cert.opendns.com IP: [2620:0:ccc::2] Add to AdGuard

FamilyShield 

OpenDNS servers that provide adult content blocking

Protocol Address  
DNS, IPv4 208.67.222.123 and 208.67.220.123 Add to AdGuard
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.opendns.com IP: 208.67.220.123 Add to AdGuard

  

Google DNS 

Google DNS is a free, global DNS resolution service that you can use as an alternative to your current DNS provider.

Protocol Address  
DNS, IPv4 8.8.8.8 and 8.8.4.4 Add to AdGuard
DNS, IPv6 2001:4860:4860::8888 and 2001:4860:4860::8844 Add to AdGuard
DNS-over-HTTPS https://dns.google.com/experimental Add to AdGuard
DNS-over-TLS tls://dns.google Add to AdGuard

  

Cloudflare DNS 

Cloudflare DNS is a free and fast DNS service which functions as a recursive name server providing domain name resolution for any host on the Internet.

Protocol Address  
DNS, IPv4 1.1.1.1 and 1.0.0.1 Add to AdGuard
DNS, IPv6 2606:4700:4700::1111 and 2606:4700:4700::1001 Add to AdGuard
DNS-over-HTTPS, IPv4 https://dns.cloudflare.com/dns-query Add to AdGuard
DNS-over-HTTPS, IPv6 https://dns.cloudflare.com/dns-query Add to AdGuard
DNS-over-TLS tls://1.1.1.1 Add to AdGuard

  

Quad9 DNS 

Quad9 DNS is a free, recursive, anycast DNS platform that provides high-performance, privacy, and security protection from phishing and spyware. Quad9 servers don't provide a censoring component.

Standard 

Regular and DNS-over-TLS servers which provide protection from phishing and spyware

Protocol Address  
DNS, IPv4 9.9.9.9 and 149.112.112.112 Add to AdGuard
DNS-over-TLS tls://dns.quad9.net Add to AdGuard

Encrypted DNSSec/no-log/filter 

Protocol Address  
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.quad9.net IP: 9.9.9.9:8443 Add to AdGuard
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.quad9.net IP: 149.112.112.9:8443 Add to AdGuard
DNSCrypt, IPv6 Provider: 2.dnscrypt-cert.quad9.net IP: [2620:fe::9]:8443 Add to AdGuard
DNSCrypt, IPv6 Provider: 2.dnscrypt-cert.quad9.net IP: [2620:fe::fe:9]:8443 Add to AdGuard
DNS-over-HTTPS, IPv4 dns9.quad9.net:443/dns-query Add to AdGuard
DNS-over-HTTPS, IPv4 dns9.quad9.net:443/dns-query Add to AdGuard
DNS-over-HTTPS, IPv6 dns9.quad9.net:443/dns-query Add to AdGuard
DNS-over-HTTPS, IPv6 dns9.quad9.net:443/dns-query Add to AdGuard

Encrypted no-DNSSec/no-log/no-filter 

Protocol Address  
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.quad9.net IP: 9.9.9.10:8443 Add to AdGuard
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.quad9.net IP: 149.112.112.10:8443 Add to AdGuard
DNSCrypt, IPv6 Provider: 2.dnscrypt-cert.quad9.net IP: [2620:fe::9]:8443 Add to AdGuard
DNSCrypt, IPv6 Provider: 2.dnscrypt-cert.quad9.net IP: [2620:fe::fe:9]:8443 Add to AdGuard
DNS-over-HTTPS, IPv4 dns9.quad9.net:443/dns-query Add to AdGuard
DNS-over-HTTPS, IPv4 dns9.quad9.net:443/dns-query Add to AdGuard
DNS-over-HTTPS, IPv6 dns9.quad9.net:443/dns-query Add to AdGuard
DNS-over-HTTPS, IPv6 dns9.quad9.net:443/dns-query Add to AdGuard

  

Verisign Public DNS 

Verisign Public DNS is a free DNS service that offers improved DNS stability and security over other alternatives. Verisign respects users' privacy: it doesn't sell public DNS data to third parties and redirect users' queries to serve them any ads.

Protocol Address  
DNS, IPv4 64.6.64.6 or 64.6.65.6 Add to AdGuard
DNS, IPv6 2620:74:1b::1:1 or 2620:74:1c::2:2 Add to AdGuard

  

DNS.WATCH 

DNS.WATCH is a fast and free server without logging with a privacy protection feature.

Protocol Address  
DNS, IPv4 84.200.69.80 and 84.200.70.40 Add to AdGuard
DNS, IPv6 2001:1608:10:25::1c04:b12f and 2001:1608:10:25::9249:d69b Add to AdGuard

  

Comodo Secure DNS 

Comodo Secure DNS is a domain name resolution service that resolves your DNS requests through worldwide network of DNS servers. Removes excessive ads and protects from phishing and spyware.

Protocol Address  
DNS, IPv4 8.26.56.26 and 8.20.247.20 Add to AdGuard
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.shield-2.dnsbycomodo.com IP: 8.20.247.2 Add to AdGuard

  

Dyn DNS 

Dyn DNS is a free alternative DNS service by Dyn

Protocol Address  
DNS, IPv4 216.146.35.35 and 216.146.35.36 Add to AdGuard

  

OpenNIC DNS 

OpenNIC DNS is a free alternative DNS service by OpenNIC Project

Protocol Address  
DNS, IPv4 185.121.177.177 and 169.239.202.202 Add to AdGuard
DNS, IPv6 2a05:dfc7:5::53 and 2a05:dfc7:5353::53 Add to AdGuard

  

Quad101 

Quad101 is a free alternative DNS service without logging by TWNIC (Taiwan Network Information Center)

Protocol Address  
DNS, IPv4 101.101.101.101 and 101.102.103.104 Add to AdGuard
DNS, IPv6 2001:de4::101 and 2001:de4::102 Add to AdGuard

  

Freenom World 

Freenom World is a free anonymous DNS resolver by Freenom World

Protocol Address  
DNS, IPv4 80.80.80.80 and 80.80.81.81 Add to AdGuard

  

Fortinet Secure 

Fortinet Secure is a free alternative DNS service by FortiGuard

Protocol Address  
DNS, IPv4 208.91.112.220 and 80.85.69.54 Add to AdGuard

  

Safe DNS 

Safe DNS is a global anycast network which consists of servers located throughout the world — both Americas, Europe, Africa, Australia, and the Far East to ensure a fast and reliable DNS resolving from any point worldwide.

Protocol Address  
DNS, IPv4 195.46.39.39 and 195.46.39.40 Add to AdGuard

  

Strongarm DNS 

Strongarm DNS is a DNS service by Strongarm that prevents people from interacting with malicious content

Protocol Address  
DNS, IPv4 54.174.40.213 and 52.3.100.184 Add to AdGuard

  

SafeSurfer DNS 

SafeSurfer DNS is a DNS service by SafeSurfer that protects your device from harmful content

Protocol Address  
DNS, IPv4 104.155.237.225 and 104.197.28.121 Add to AdGuard

  

Captnemo DNS 

Captnemo DNS is a server running out of a Digital Ocean droplet in BLR1 region. Maintained by Abhay Rana aka Nemo.

Protocol Address  
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.captnemo.in IP: 139.59.48.222:4434 Add to AdGuard

  

fvz DNS 

fvz DNS is a Fusl's public primary OpenNIC Tier2 Anycast DNS Resolver

Protocol Address  
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.dnsrec.meo.ws IP: 185.121.177.177:5353 Add to AdGuard
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.dnsrec.meo.ws IP: 169.239.202.202:5353 Add to AdGuard

  

Nawala Childprotection DNS 

Nawala Childprotection DNS is an anycast Internet filtering system that protects children from inappropriate websites and abusive contents.

Protocol Address  
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.nawala.id IP: 180.131.144.144 Add to AdGuard

  

securedns.eu: DNS-over-TLS, DNS-over-HTTPS and DNSCrypt Provider 

securedns.eu DNS-over-TLS, DNS-over-HTTPS and DNSCrypt Provider

Protocol Address  
DNS-over-TLS Hostname: dot.securedns.eu IP: 146.185.167.43:853 and IPv6: [2a03:b0c0:0:1010::e9a:3001]:853 Add to AdGuard
DNS-over-HTTPS, IPv4 Hostname: https://doh.securedns.eu/dns-query IP: 146.185.167.43:443 Add to AdGuard
DNS-over-HTTPS, IPv6 Hostanme: https://doh.securedns.eu/dns-query IPv6: [2a03:b0c0:0:1010::e9a:3001]:443 Add to AdGuard
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.securedns.eu IP: 146.185.167.43:5353 Add to AdGuard
DNSCrypt, IPv6 Provider: 2.dnscrypt-cert.securedns.eu IP: [2a03:b0c0:0:1010::e9a:3001]:5353 Add to AdGuard

  

blahdns (germany) 

blahdns (germany) A small hobby ads block dns project with DNS-over-TLS, DNS-over-HTTPS and DNSCrypt support.

Protocol Address  
DNS-over-TLS, IPv4 Hostname: dot-de.blahdns.com IP: 159.69.198.101 Add to AdGuard
DNS-over-HTTPS, IPv4 Hostname: https://doh-de.blahdns.com/dns-query IP: 159.69.198.101 Add to AdGuard
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.blahdns.com IP: 159.69.198.101:8443 Add to AdGuard

  

ibksturm 

ibksturm DNS-over-TLS, DNS-over-HTTPS and DNSCrypt Testing server by ibksturm. OPENNIC, DNSSEC, No Filter, No Logging

Protocol Address  
DNS-over-TLS, IPv4 Hostname: ibksturm.synology.me IP: 178.82.102.190 Add to AdGuard
DNS-over-HTTPS, IPv4 Hostname: https://ibksturm.synology.me/dns-query IP: 178.82.102.190 Add to AdGuard
DNSCrypt, IPv4 Provider: 2.dnscrypt-cert.ibksturm IP: 178.82.102.190 Add to AdGuard

  

DNS-over-TLS Servers by switch.ch 

DNS-over-TLS Provider by switch.ch swiss DNS-over-TLS and Plain DNS Server.

Protocol Address  
DNS, IPv4 Provider: dns.switch.ch IP: 130.59.31.248 Add to AdGuard
DNS, IPv6 Provider: dns.switch.ch IPv6: 2001:620:0:ff::2 Add to AdGuard
DNS-over-TLS Hostname: dns.switch.ch IP: 130.59.31.248 and IPv6: 2001:620:0:ff::2 Add to AdGuard

  

DNS-over-TLS Servers by dnsprivacy.org 

DNS-over-TLS Provider by dnsprivacy.org List of PUblic DNS-over-TLS Testing Servers.

Protocol Address  
DNS-over-TLS Provider: Surfnet Hostname dnsovertls.sinodun.com IP: 145.100.185.15and IPv6: 2001:610:1:40ba:145:100:185:15 Add to AdGuard
DNS-over-TLS Provider: Surfnet Hostname dnsovertls1.sinodun.com IP: 145.100.185.16and IPv6: 2001:610:1:40ba:145:100:185:16 Add to AdGuard
DNS-over-TLS Hostname: getdnsapi.net IP: 185.49.141.37 and IPv6: 2a04:b900:0:100::37 Add to AdGuard
DNS-over-TLS Provider: UncensoredDNS Hostname unicast.censurfridns.dk IP: 89.233.43.71 and IPv6: 2a01:3a0:53:53::0 Add to AdGuard
DNS-over-TLS Provider: Fondation RESTENA Hostname kaitain.restena.lu IP: 158.64.1.29and IPv6: 2001:a18:1::29 Add to AdGuard
DNS-over-TLS Provider: dkg Hostname dns.cmrg.net IP: 199.58.81.218and IPv6: 2001:470:1c:76d::53 Add to AdGuard
DNS-over-TLS, IPv4 Hostname: dns.larsdebruin.net IP: 51.15.70.167 Add to AdGuard
DNS-over-TLS Hostname dns-tls.bitwiseshift.net IP: 81.187.221.24 and IPv6: 2001:8b0:24:24::24 Add to AdGuard
DNS-over-TLS Hostname ns1.dnsprivacy.at IP: 94.130.110.185 and IPv6: 2a01:4f8:c0c:3c03::2 Add to AdGuard
DNS-over-TLS Hostname ns2.dnsprivacy.at IP: 94.130.110.178 and IPv6: 2a01:4f8:c0c:3bfc::2 Add to AdGuard
DNS-over-TLS, IPv4 Hostname: dns.bitgeek.in IP: 139.59.51.46 Add to AdGuard
DNS-over-TLS Hostname dns.neutopia.org IP: 89.234.186.112 and IPv6: 2a00:5884:8209::2 Add to AdGuard