Public DNS 2021


Include DNS-over-HTTPS, DNS-over-TLS, DNS-over-Quic

CZ.NIC
Czech NIC
IPv4 DNS Server:
193.17.47.1
185.43.135.1

IPv6 DNS Server:
2001:148f:ffff::1
2001:148f:fffe::1

Dns.watch
Germany
DNSSEC, QNAME Minimisation
IPv4 DNS Server:
84.200.69.80
84.200.70.40

IPv6 DNS Server:
2001:1608:10:25::1c04:b12f
2001:1608:10:25::9249:d69b

Fourth Estate
US, JP
DNSSEC
IPv4: 45.77.165.194 
IPv4: 45.32.36.36
Quad9
Anycast, Threat protection, DNSSEC
DoT, DoH, Dnscrypt
IPv4: 9.9.9.9, 149.112.112.112
IPv6: 2620:fe::fe, 2620:fe::9
** Unfiltered
IPv4: 9.9.9.10, 149.112.112.10
IPv6: 2620:fe::fe:10, 2620:fe::10
Cloudflare with Malware filtered
Anycast, DNSSEC, QNAME Minimisation
DoT, DoH
IPv4: 1.0.0.2
IPv4: 1.1.1.2
IPv6: 2606:4700:4700::1002
IPv6: 2606:4700:4700::1112
OpenNIC
Anycast, OpenNIC, DNSSEC
169.239.202.202, 185.121.177.177
2a05:dfc7:5::53, 2a05:dfc7:5::5353
cleanbrowsing.org
Anycast, Security, Adult, Family
DoT, DoH, Dnscrypt
Port 53, 5353 ( Plain DNS)
Return NXDOMAIN
* Security
185.228.168.9, 185.228.169.9
2a0d:2a00:1::2, 2a0d:2a00:2::2
* Adult
185.228.168.10, 185.228.169.11
2a0d:2a00:1::1, 2a0d:2a00:2::1
* Family
185.228.168.10, 185.228.169.11
2a0d:2a00:1::1, 2a0d:2a00:2::1
Swiztzerland DNS
DoT, DoH

Supported protocols:
DNS over TLS (DoT) on port 853/TCP
DNS over HTTPS (DoH) on port 443/TCP
URL: dns.switch.ch
IP addresses:
130.59.31.248
130.59.31.251
2001:620:0:ff::2
2001:620:0:ff::3
Hurricane Electric
Anycast, No filter
DNSSEC
74.82.42.42
2001:470:20::2 
DNS Warden
** DoT, DoH only**
Germany
Ads block, DNSSEC, OpenNIC
Return NXDOMAIN

*DoT, port 853
213.136.85.253
2a02:c207:2020:2249::1
213.136.83.50
2a02:c207:2019:9676::1
* DoH
https://doh1.dnswarden.com
https://doh2.dnswarden.com
Freenom
Anycast, No filter, DNSSEC, QNAME Minimisation
Lack of privacy policy
** China-friendly (HK)

80.80.80.80
80.80.81.81
PdoMo-DNS
https://pdomo.me
https://pdomo.net
** China friendly
DNSSEC, Adblock
101.132.183.99
193.112.15.186
* TCP, UDP, port 53, 2323

Quad 101
Taiwan
DNSSEC,
** China friendly
DoT, port 853
DoH: https://dns.twnic.tw/dns-query
101.101.101.101
101.102.103.104
2001:de4::101
2001:de4::102
AliDNS 阿里DNS
China, (Anycast in Chinese Intranet)
DoH: https://223.5.5.5/dns-query
https://223.6.6.6/dns-query
223.5.5.5.5
223.6.6.6
2400:3200::1
2400:3200:baba::1

Anti-censorship friendly related projects

  1. https://github.com/Dreamacro/clash (A rule-based tunnel in Go.)
  2. 紅魚DNS: https://www.v2ex.com/t/535553#reply11 (iOS app)
  3. https://mosucloud.info (SS, V2ray)
  4. https://mosu.icu (SS)
  5. https://pymumu.github.io/smartdns/ (Smart DNS)
  6. https://github.com/Jrohy/multi-v2ray
  7. https://github.com/lennylxx/ipv6-hosts
  8. https://github.com/hongwenjun/doubi_backup
  9. https://github.com/felixonmars/dnsmasq-china-list
  10. https://github.com/aturl/awesome-anti-gfw
  11. https://github.com/pexcn/daily
  12. https://github.com/humanetech-community/awesome-humane-tech
  13. https://prism-break.org/en/
  14. https://www.privacytools.io/
  15. https://github.com/fatedier/frp

Personal opinion

Why not just use OpenDNS or Google DNS?

OpenDNS’s entire business model is to manipulate DNS. They used to do NXDOMAIN redirection, an advertising trick where misspelled domains get redirected to a search page. Google runs a decent DNS service but I don’t think it is a good idea to give them all DNS lookups in addition to all the other data they have on everyone.

What is blahdns.com

It’s my personal project, I enjoyed to try out the latest DNS tech to offer more security and privacy concern. such as DNS-over-https and DNS-over-TLS and DNSCrypt v2

I do block Ads, tracker, malware, phishing No log and free to use. Donation is welcome.
Enjoy ~~

Some awesome DNS project for you
1. https://github.com/semihalev/sdns
2. https://www.nlnetlabs.nl/projects/unbound/about/
3. https://www.knot-resolver.cz/
4. https://github.com/AdguardTeam/AdGuardHome
5. https://github.com/AdguardTeam/dnsproxy