4 ms·

Been running it myself for 5-6 months, and other than the occasional (actually, very rare) complaint from the Mrs. that a link she clicked won't go through due

Been running it myself for 5-6 months, and other than the occasional (actually, very rare) complaint from the Mrs. that a link she clicked won't go through due to a blocked tracker/analytics intermediary, it's been a peachy time VPNing into our home network so it works just as well on the go. Our install Pi-Hole points its upstream DNS to 1.1.1.1, with uBlock Origin where possible installed on our devices. Can't imagine going back.

xenophonf 8y ago
What advantage is there in using 1.1.1.1 instead of your own DNS resolver?
- a1369209993 8y ago
  Some ISP-provided resolvers fraudulently replace NXDOMAIN responses with NOERROR IN As pointing to (ironically, in this context) advertisment sites.
  - xenophonf 8y ago
    I'm aware of the problems with ISP-provided resolvers. I meant running your own resolver, like named, which queries the root zones itself, supports DNSSEC response authentication, etc.
    - a1369209993 8y ago
      In that case: local resolvers involve actually installing and configuring a recursive dns server, which isn't everyone's idea of fun, whereas 1.1/8.8.8.8 can be set up with a one line config file edit and then forgotten about.
- mikestew 8y ago
  To add to a1369209993's comment, an alternate DNS might be faster (as Cloudflare claims for 1.1.1.1), too. Or more stable than your default DNS. But for me, anyway, I made the switch after Frontier started pulling the NXDOMAIN stunt.
- fwn 8y ago
  ...also censorship. Even my German ISP (Vodafone) apparently reroutes some URLs to servers they control. Solved it with DNS66.