4 ms·

Does no one bother to run their own DNS server? It's not hard---in fact, it's easier than running an authoritative DNS server, since you are only using it for

by spc476 9y ago

Does no one bother to run their own DNS server? It's not hard---in fact, it's easier than running an authoritative DNS server, since you are only using it for local resolving. I ran the provided script, added my own local resolver, and after the first run, got incredibly fast results. test1 test2 test3 test4 test5 test6 test7 test8 test9 test10 Average cloudflare 35 ms 38 ms 39 ms 33 ms 34 ms 39 ms 28 ms 33 ms 28 ms 39 ms 34.60 cloudflare2nd 34 ms 27 ms 34 ms 34 ms 34 ms 27 ms 34 ms 28 ms 28 ms 28 ms 30.80 google 42 ms 27 ms 27 ms 40 ms 28 ms 40 ms 28 ms 40 ms 40 ms 28 ms 34.00 google2nd 42 ms 27 ms 28 ms 43 ms 41 ms 39 ms 28 ms 41 ms 41 ms 28 ms 35.80 quad9 65 ms 64 ms 54 ms 65 ms 63 ms 53 ms 59 ms 52 ms 60 ms 53 ms 58.80 opendns 45 ms 32 ms 56 ms 51 ms 29 ms 74 ms 32 ms 48 ms 45 ms 32 ms 44.40 norton 92 ms 73 ms 56 ms 152 ms 48 ms 144 ms 68 ms 40 ms 77 ms 83 ms 83.30 cleanbrowsing 33 ms 28 ms 33 ms 28 ms 33 ms 35 ms 28 ms 32 ms 33 ms 29 ms 31.20 yandex 174 ms 174 ms 185 ms 178 ms 184 ms 179 ms 179 ms 199 ms 176 ms 186 ms 181.40 adguard 143 ms 147 ms 146 ms 142 ms 148 ms 143 ms 130 ms 130 ms 138 ms 137 ms 140.40 neustar 62 ms 63 ms 70 ms 80 ms 40 ms 74 ms 73 ms 151 ms 58 ms 65 ms 73.60 comodo 60 ms 137 ms 59 ms 60 ms 59 ms 59 ms 64 ms 62 ms 60 ms 59 ms 67.90 localhost 0 ms 0 ms 0 ms 0 ms 0 ms 0 ms 0 ms 0 ms 0 ms 0 ms 0

Godel_unicode 9y ago
Most people are not very interested in testing how fast their local machine can talk to itself; regardless of how fast your local cache is, it will have to talk outside pretty often (for expiring TTL if nothing else).
- spc476 9y ago
  People are praising CloudFlare for not bothering to log requests. Yes, well ... you get the same results by using your own DNS resolver, and you don't have to be shocked when five years later a different governing team running CloudFlare decide to reverse their stance and log everything ... But what do I know? Apparently I'm in the minority for running my own infrastructure (DNS, web, mail).
  - enneff 9y ago
    If you talk to an upstream resolver through an encrypted link (both CloudFlare and Google support DNSoverTLS and DNSoverHTTPS, at least) then you at least limit the potential privacy threats.
  - ragequitta 9y ago
    Do you ever wonder if such activity (basically trying to be invisible) will put you under far more scrutiny than if you were to just 'be normal'? Thinking from the other side of it you would be a high value target to monitor as closely as possible if I were law enforcement. I know it sounds ridiculous but you may actually have more privacy (unless you're actually breaking the law) by hiding in plain sight with the rest of us.
  - Godel_unicode 9y ago
    Where do you think your DNS resolver gets the answers it gives you? You're just introducing a caching layer between you and whatever external resolver you're using. The first time a machine requests a domain (and every time a TTL expires; look at CDN TTLs sometime) you are effectively talking to the internet just like everyone else.
dx034 9y ago
If you live close to a peering point, both CF and Google will have mean ping times <10ms, often even <5ms. I doubt there's any real world difference between using localhost and either of them. As they cache results, using them could actually be faster than your own server.

by spc476 9y ago

Godel_unicode 9y ago

Most people are not very interested in testing how fast their local machine can talk to itself; regardless of how fast your local cache is, it will have to talk outside pretty often (for expiring TTL if nothing else).

spc476 9y ago
People are praising CloudFlare for not bothering to log requests. Yes, well ... you get the same results by using your own DNS resolver, and you don't have to be shocked when five years later a different governing team running CloudFlare decide to reverse their stance and log everything ... But what do I know? Apparently I'm in the minority for running my own infrastructure (DNS, web, mail).
- enneff 9y ago
  If you talk to an upstream resolver through an encrypted link (both CloudFlare and Google support DNSoverTLS and DNSoverHTTPS, at least) then you at least limit the potential privacy threats.
- ragequitta 9y ago
  Do you ever wonder if such activity (basically trying to be invisible) will put you under far more scrutiny than if you were to just 'be normal'? Thinking from the other side of it you would be a high value target to monitor as closely as possible if I were law enforcement. I know it sounds ridiculous but you may actually have more privacy (unless you're actually breaking the law) by hiding in plain sight with the rest of us.
- Godel_unicode 9y ago
  Where do you think your DNS resolver gets the answers it gives you? You're just introducing a caching layer between you and whatever external resolver you're using. The first time a machine requests a domain (and every time a TTL expires; look at CDN TTLs sometime) you are effectively talking to the internet just like everyone else.

dx034 9y ago

If you live close to a peering point, both CF and Google will have mean ping times <10ms, often even <5ms. I doubt there's any real world difference between using localhost and either of them. As they cache results, using them could actually be faster than your own server.