Choosing a Public DNS Resolver

210 points · 85 comments on HN · read original →

Points and comments are a snapshot, not live.

An interactive guide compares 29 public DNS resolvers on privacy, filtering, speed, and jurisdiction.

The guide lets users filter 29 global public DNS resolvers by priorities like privacy, malware blocking, parental controls, speed, IPv6, and jurisdiction. It includes an interactive finder, a live latency test, and a full comparison table. Key options: AdGuard DNS (Cyprus, ad-blocking), CIRA Canadian Shield (nonprofit), Cloudflare 1.1.1.1 (US, audited no-logging), Quad9 (Switzerland, malware blocking, nonprofit), and DNS4EU (EU-funded, GDPR). It also covers Chinese resolvers (subject to local regulations) and smaller operators like Mullvad (Sweden, no logging) and CZ.NIC (Czech registry).

What commenters are saying

Commenters split on which DNS is best. Some champion Quad9 (9.9.9.9) for malware blocking, but others report false positives (e.g., blocked private torrent trackers, gist.github.com, Halo MCC achievements). A subthread clarifies Quad9 now enables DNSSEC on all endpoints. Some prefer Cloudflare 1.1.1.1 for speed and reliability, though one user avoids it for policy reasons. A few run their own Unbound or dnsdist setups for full control. One commenter notes that China-marked resolvers include disclaimers about local regulations, a concern extending beyond just those entries.