3 ms·

What’s the DNS equivalent of using Yandex for search?

by alabastervlog 1y ago

miyuru 1y ago
I think you are looking might be https://dns.yandex.com/ https://dns.yandex.com/
- tux1968 1y ago
  That's brilliant. Thanks for the link.
  - LargoLasskhyfv 1y ago
    Hrm. Depending on your location, needs, and preferences, this might shine and sparkle even more brightly: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls https://mullvad.net/en/help/dns-over-https-and-dns-over-tls
subscribed 1y ago
Quad9, OpenDNS. I can recommend both. Take a look here for a good start: https://www.techradar.com/news/best-dns-server https://www.techradar.com/news/best-dns-server
- mqus 1y ago
  regarding OpenDNS (from the article): > When OpenDNS was first ordered to block pirate sites in France, the company made a simple but drastic decision to leave the country entirely, effectively affecting all French users. Last week, it repeated this response in Belgium following a similar court order.
  - devwastaken 1y ago
    which means opendns is a non solution and should not be used.
    - pixl97 1y ago
      The problem is we don't need a few big providers, we need thousands of smaller ones everywhere. Big providers are easy to attack with a single bullet (court case).
      - ratorx 1y ago
        Small providers can also be hit with the same bullet (depending on the wording), it’s whether the laws can actually be enforced, which is a cat-and-mouse game the same way piracy generally is. They are still providing a digital service in the country and are subject to the laws.
        pixl97 1y ago
        Small providers can, but when they are across many countries it takes a lot of work to actually accomplish that.
    - kaoD 1y ago
      DNS feels like it should be easy to proxy. Or just have more distributed resolvers. Why isn't it done more? Is it super expensive? Maybe due to UDP allowing traffic-amplification attacks?
      - ycombinatrix 1y ago
        What do you mean by "DNS proxy"? What is a DNS resolver if not a proxy for DNS requests?
        kaoD 1y ago
        > What is a DNS resolver if not a proxy for DNS requests? A DNS resolver... resolves (recursively). unbound[0] would be an example. A proxy instead only forwards to a trusted DNS server (or servers) and may cache their responses but won't do any resolution by themselves. dnsmasq[1] would be an example. My guess is a simple proxy is less vulnerable to UDP amplification attacks (and also vastly simpler to implement and maintain). The drawback is you need a resolver you trust, but that might be okay if you actually do have one. E.g. some DNS server that you know is safe but is not operating in your country (you might just want to proxy it so its closer to you for lower latency). [0] https://en.m.wikipedia.org/wiki/Unbound_(DNS_server) https://en.m.wikipedia.org/wiki/Unbound_(DNS_server) [1] https://en.m.wikipedia.org/wiki/Dnsmasq https://en.m.wikipedia.org/wiki/Dnsmasq
  - ycombinatrix 1y ago
    How exactly do they "leave the country"? Do they start blocking French & Belgian IPs?
    - betaby 1y ago
      That's how: $ dig kernel.org @208.67.220.220 ; <<>> DiG 9.18.33-1~deb12u2-Debian <<>> kernel.org @208.67.220.220 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 12644 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 2 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1410 ; EDE: 16 (Censored) ;; QUESTION SECTION: ;kernel.org. IN A ;; ADDITIONAL SECTION: kernel.org. 0 IN TXT "The OpenDNS service is currently unavailable in France and some French territories due to a court order under Article L.333-10 of the French Sport Code. See https://support.opendns.com/hc/en-us https://support.opendns.com/hc/en-us" ;; Query time: 8 msec ;; SERVER: 208.67.220.220#53(208.67.220.220) (UDP) ;; WHEN: Sun May 11 22:56:23 UTC 2025
- baery 1y ago
  [dead]
- tmtvl 1y ago
  What about LibreDNS? They see pretty cool.
- LargoLasskhyfv 1y ago
  Disagree, because of: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls https://mullvad.net/en/help/dns-over-https-and-dns-over-tls
AnthonyMouse 1y ago
Get a VPS in a jurisdiction that doesn't do this, install a recursive DNS server and a VPN on it and use it as your DNS server. Or use any service providing the equivalent thing; many VPN services also provide a DNS server.
encom 1y ago
$ kdig +tls +short @anycast.uncensoreddns.org streameast.app A 104.21.84.29 172.67.185.97
somat 1y ago
Run your own recursive server that directly gets it's data from the authoritative servers. .... On second thought that is a bad analogy, that is more like running your own search engine. The dns equivalent to yandex would be 77.88.8.8 https://gist.github.com/mutin-sa/5dcbd35ee436eb629db7872581093bc5 https://gist.github.com/mutin-sa/5dcbd35ee436eb629db78725810...
kdmtctl 1y ago
Using Yandex for DNS. You will get the same filters.

What’s the DNS equivalent of using Yandex for search?

miyuru 1y ago

I think you are looking might be https://dns.yandex.com/ https://dns.yandex.com/

tux1968 1y ago
That's brilliant. Thanks for the link.
- LargoLasskhyfv 1y ago
  Hrm. Depending on your location, needs, and preferences, this might shine and sparkle even more brightly: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls https://mullvad.net/en/help/dns-over-https-and-dns-over-tls

subscribed 1y ago

Quad9, OpenDNS. I can recommend both. Take a look here for a good start: https://www.techradar.com/news/best-dns-server https://www.techradar.com/news/best-dns-server

mqus 1y ago
regarding OpenDNS (from the article): > When OpenDNS was first ordered to block pirate sites in France, the company made a simple but drastic decision to leave the country entirely, effectively affecting all French users. Last week, it repeated this response in Belgium following a similar court order.
- devwastaken 1y ago
  which means opendns is a non solution and should not be used.
  - pixl97 1y ago
    The problem is we don't need a few big providers, we need thousands of smaller ones everywhere. Big providers are easy to attack with a single bullet (court case).
    - ratorx 1y ago
      Small providers can also be hit with the same bullet (depending on the wording), it’s whether the laws can actually be enforced, which is a cat-and-mouse game the same way piracy generally is. They are still providing a digital service in the country and are subject to the laws.
      - pixl97 1y ago
        Small providers can, but when they are across many countries it takes a lot of work to actually accomplish that.
  - kaoD 1y ago
    DNS feels like it should be easy to proxy. Or just have more distributed resolvers. Why isn't it done more? Is it super expensive? Maybe due to UDP allowing traffic-amplification attacks?
    - ycombinatrix 1y ago
      What do you mean by "DNS proxy"? What is a DNS resolver if not a proxy for DNS requests?
      - kaoD 1y ago
        > What is a DNS resolver if not a proxy for DNS requests? A DNS resolver... resolves (recursively). unbound[0] would be an example. A proxy instead only forwards to a trusted DNS server (or servers) and may cache their responses but won't do any resolution by themselves. dnsmasq[1] would be an example. My guess is a simple proxy is less vulnerable to UDP amplification attacks (and also vastly simpler to implement and maintain). The drawback is you need a resolver you trust, but that might be okay if you actually do have one. E.g. some DNS server that you know is safe but is not operating in your country (you might just want to proxy it so its closer to you for lower latency). [0] https://en.m.wikipedia.org/wiki/Unbound_(DNS_server) https://en.m.wikipedia.org/wiki/Unbound_(DNS_server) [1] https://en.m.wikipedia.org/wiki/Dnsmasq https://en.m.wikipedia.org/wiki/Dnsmasq
- ycombinatrix 1y ago
  How exactly do they "leave the country"? Do they start blocking French & Belgian IPs?
  - betaby 1y ago
    That's how: $ dig kernel.org @208.67.220.220 ; <<>> DiG 9.18.33-1~deb12u2-Debian <<>> kernel.org @208.67.220.220 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 12644 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 2 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1410 ; EDE: 16 (Censored) ;; QUESTION SECTION: ;kernel.org. IN A ;; ADDITIONAL SECTION: kernel.org. 0 IN TXT "The OpenDNS service is currently unavailable in France and some French territories due to a court order under Article L.333-10 of the French Sport Code. See https://support.opendns.com/hc/en-us https://support.opendns.com/hc/en-us" ;; Query time: 8 msec ;; SERVER: 208.67.220.220#53(208.67.220.220) (UDP) ;; WHEN: Sun May 11 22:56:23 UTC 2025
baery 1y ago
[dead]
tmtvl 1y ago
What about LibreDNS? They see pretty cool.
LargoLasskhyfv 1y ago
Disagree, because of: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls https://mullvad.net/en/help/dns-over-https-and-dns-over-tls

AnthonyMouse 1y ago

Get a VPS in a jurisdiction that doesn't do this, install a recursive DNS server and a VPN on it and use it as your DNS server. Or use any service providing the equivalent thing; many VPN services also provide a DNS server.

encom 1y ago

$ kdig +tls +short @anycast.uncensoreddns.org streameast.app A 104.21.84.29 172.67.185.97

somat 1y ago

Run your own recursive server that directly gets it's data from the authoritative servers. .... On second thought that is a bad analogy, that is more like running your own search engine. The dns equivalent to yandex would be 77.88.8.8 https://gist.github.com/mutin-sa/5dcbd35ee436eb629db7872581093bc5 https://gist.github.com/mutin-sa/5dcbd35ee436eb629db78725810...

kdmtctl 1y ago

Using Yandex for DNS. You will get the same filters.