5 ms·
The European public DNS that makes your Internet safer
- rikafurude21 1y agoDoesnt seem to be directly related to the EU, but something I would consider if I had kids with personal devices.
- qoez 1y agoThe cynic in me feels like 'safer' is code for censorship in this case.
- andreasley 1y agoThe service is run by a French non‑profit organization, not the EU.
- BillyTheMage 1y agoWhy would the French (or other) government not have agents planted in such a high-value place? It's almost without question that they do.
- cubefox 1y agoIt seems rather unlikely to me that they do.
- zx8080 1y agoare you French? just interesting.
- BillyTheMage 1y agoNo I'm American, which is why I can't comprehend anyone trusting a government or a public service
- BillyTheMage 1y agoIt seems unthinkable to me that someone wouldn't
- cubefox 1y agoSo you believe the French secret service to be omnipotent.
- BillyTheMage 1y agoWhat? Where did I say omnipotent? Governments put agents in places; this is a well known fact of life. DNS logs are a fantastic source of nefarious information-gathering.
- cubefox 1y agoYou said "unthinkable" which implies omnipotence.
- BillyTheMage 1y agoI said "it seems unthinkable to me". This means that I find it so unlikely that no reasonable person could ever think it to be the case. "I find it so unlikely that governments don't have agents in the public DNS service that I can't believe anyone would ever believe it to be the case that they don't"
- debugnik 1y agoI make myself the same question every time I use US services. Which is why I want to drop them.
- incomingpain 1y agoA french non-profit subject to the EU and France rules. Which means they absolutely abide the DSA and must block 'illegal content' which is pretty extensive these days. Includes 'hate speech' which isnt well defined, but only when ordered by a court. Not to mention various "disinformation" orders they must abide by now. They are also subject to orders from ARCOM? for copyright related stuff. They are also obligated to record and store all dns queries by ip essentially forever. This is literally why the title claims "safer". They are censoring.
- deleted 1y ago[deleted]
- perching_aix 1y agoWhat's the difference between moderation and censorship? Characterization. I'm certainly not aware of any possible ways of restricting things to make things safer where one couldn't just decide to call it censorship at least.
- graemep 1y ago> What's the difference between moderation and censorship? Control. If it is an optional service provided to users it is moderation. If it is not optional, then it is censorship.
- perching_aix 1y agoSounds poorly defined. I have no explicit obligation to participate on this forum or any other high profile tech forum, but should I feel inclined implicitly, now I'm beholden to the local moderation. I'm "free to leave the EU if I don't like it", as a certain kind of folk would say.
- graemep 1y ago> Sounds poorly defined. Issues like this always have exceptions and grey areas > I'm "free to leave the EU if I don't like it", A country is free to leave the EU. An individual can leave by moving elsewhere. I have never come across anyone saying they could give up EU membership as an individual, as individuals are not members of the EU. > I have no explicit obligation to participate on this forum or any other high profile tech forum, but should I feel inclined implicitly, now I'm beholden to the local moderation. That is exactly the point. Private spaces can have all kinds of rules stopping you doing things you are free to do in public.
- perching_aix 1y ago> Issues like this always have exceptions and grey areas That's my point. If that holds, then it will also hold that there will be individuals who can call moderation censorship. Either we accept these categories as equals from the get-go (content filtering), or this doesn't justify equating them, which is what GP said he'd be doing if he felt the cynic rise in them. For what it's worth, it's not that I don't recognize the ideas of moderation and censorship different. It's just that I think of them as different characterizations of the same thing - and then sometimes those characterizations I find fair, sometimes not so much. > I have never come across anyone saying they could give up EU membership as an individual, as individuals are not members of the EU. You're still yet to come across anyone like that, as you're misinterpreting the word "leave" for reasons beyond me. I can leave my home, I can leave my home country, why couldn't I leave [the area of] the EU? Why did you think I was talking about some ceremonial relinquishing of my EU "citizenship" that as you say does not exist? > you are free to do in public. There's nothing stopping anyone from claiming any area as theirs and then imposing rules on them, trivially bypassing this notion. Examples include: not in my backyard, not in front of my house, not in this city, not in this country, etc.
- longstation 1y agoWould be great if it has the option to block ads.
- apples_oranges 1y agonot answering certain DNS queries would be something! lol
- Igrom 1y agoThat's what DNS filtering is for: https://www.cloudflare.com/learning/access-management/what-is-dns-filtering/ https://www.cloudflare.com/learning/access-management/what-i....
- cwassert 1y agoMullvad offers such a service for free. https://mullvad.net/en/help/dns-over-https-and-dns-over-tls https://mullvad.net/en/help/dns-over-https-and-dns-over-tls
- ale42 1y agoBut you can't set them as system DNS (UDP/53) AFAIK
- wsintra2022 1y agoTry it with a pihole
- UI_at_80x24 1y agoIf you use a 'pihole' or similar setup, change the default away from "127.0.0.1" to "NXDOMAIN".
- hans_castorp 1y agoYou can use https://dnsforge.de/ https://dnsforge.de/ (Sorry, page is in German)
- 1y ago
- aleph_minus_one 1y agoDoes this DNS server block (censor) the domains of the CUII list as many German internet providers do? > https://cuiiliste.de/domains https://cuiiliste.de/domains > https://de.wikipedia.org/wiki/Clearingstelle_Urheberrecht_im_Internet#Sperrempfehlungen https://de.wikipedia.org/wiki/Clearingstelle_Urheberrecht_im... (both are German websites, but they should be easily understandable for everybody)
- lode 1y agoDoesn't look like it, picking a random domain from this list gives the same result as from 1.1.1.1: dig bs.to @1.1.1.1 ;; ANSWER SECTION: bs.to. 164 IN A 190.115.31.20 dig bs.to @193.110.81.0 ;; ANSWER SECTION: bs.to. 300 IN A 190.115.31.20
- aleph_minus_one 1y agoTest in particular the very newest, and the still used domains from the Wikipedia list such as * nox.to * getrockmusic.net * libgen.gs * sci-hub.st
- tom1337 1y agoAlso resolves correctly - they do not seem to be doing censoring right now.
- aleph_minus_one 1y agoThanks for doing the tests. Another interesting test case are the following domains (Russian propaganda websites) that many German (European?) internet providers are prone to block: rt.com de.rt.com www.rt.com ria.ru radiosputnik.ria.ru radiosputnik.com For example in Germany, Vodafone blocks the first three ones. The reason for this blocking is not the CUII list, but ANNEX XV of "COUNCIL REGULATION (EU) 2022/350 of 1 March 2022 amending Regulation (EU) No 833/2014 concerning restrictive measures in view of Russia's actions destabilising the situation in Ukraine": https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A32022R0350 https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL...
- ape4 1y agoWould there be latency for people far away from Europe?
- martin_a 1y agoSimilar to the service that has been up here a few times in the last days: https://www.joindns4.eu/ https://www.joindns4.eu/
- torgeros 1y agoThey have not posted anything on social media in a long time and there was some downtime a few months ago. I would really like to use this primarily, but it is really a problem when your DNS suddenly becomes unavailable without any note from the devs ^^
- jaoane 1y agoThat’s why your computer allows you to set two DNS servers.
- nucleardog 1y agoCIRA in Canada also provides a public DNS server. (CIRA is the non-profit administrator of the .ca TLD.) They provide variants for unfiltered DNS, blocking malware/phishing, and malware/phishing + pornography. All variants are provided over IPv4, IPv6, DoH, and DoT. https://www.cira.ca/en/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses/ https://www.cira.ca/en/canadian-shield/configure/summary-cir...
- yegor 1y agoTry this instead, also based in Canada: https://controld.com/free-dns https://controld.com/free-dns (self-promotion)
- nucleardog 1y agoYour offering really only seems comparable in the sense that it doesn't cost money and is based in Canada. I don't think it's bad to bring up alternatives, but if you're going to promote the company you're CEO of I think you could at least offer a little more by way of justification or explanation than just "try this instead". _Why_ should someone trust your company over a non-profit with a member-elected board and a strong commitment to transparency?
- yegor 1y agoSure, I'll go to court on your behalf, instead of selling you out: https://windscribe.com/blog/windscribe-greek-court-case/ https://windscribe.com/blog/windscribe-greek-court-case/ "a non-profit with a member-elected board" will 100% not do that.
- blurrybird 1y agoThis is made and maintained by the same guy who made NextDNS, a Netflix CDN expert. They know how to make low latency distributed network applications, but it isn't their day job and the pace of development of both Next and this shows it.
- nyarlathotep_ 1y agoI've been paying for NextDNS for at least 4 years now and use their DoH clients on mobile, and its the upstream for AdGuard at home + cloudflared for laptops on the go. It's a great service.
- sp0ck 1y agoBureaucracy at it finest in terms of user ease of use. 1.1.1.1, 9.9.9.9, 8.8.8.8 and they came up with IP's that can't be more random. Perfect example how one can destroy whole concept with bad user experience.
- NKosmatos 1y agoI totally agree. When you go into that much trouble of creating an alternative (safer) EU DNS, try at least to make it user memorable by using easy IPs. I don5 understand why other HN users have downvoted your comment.
- ale42 1y agoWould be cool, but it's very very hard to get such a memorable IP. And it costs a lot of money. Those who own such IPs wont give them away so easily. So unless you get a donation of such an IP address (actually more a block of IPs, like Quad9 who got 9.9.9.0/24 from IBM, see e.g. https://www.reddit.com/r/privacytoolsIO/comments/llqd7h/quad9_move_to_switzerland/ https://www.reddit.com/r/privacytoolsIO/comments/llqd7h/quad...), or have a lot of money... you'll probably be out of luck.
- kstrauser 1y agoBecause I set DNS approximately once per LAN that I build, when I configure its DHCP. The pretty IPs are cool, but this isn’t something I type more than once per year or so.
- nottorp 1y ago... a small non profit doesn't have eithe Google's or Cloudflare's money. Could you afford 4.4.4.4?
- klabb3 1y ago> Bureaucracy at it finest I truly don’t get this. Is it a Europe = bureaucracy take? > they came up with IP's that can't be more random Came up with? I imagine those novelty IPs are extremely difficult and expensive to acquire. That said I 100% agree memorable IPs is very useful for DNS config.
- rdsubhas 1y agoLiving in Germany, one of the things about DNS-level adblocking is: It SILENTLY obstructs a lot of the payback, reward and coupon programs. For example, the biggest country-wide payback program is payback.de, and their most of their coupon multiplier links here – https://www.payback.de/coupons/info https://www.payback.de/coupons/info – will be clickable, but silently not work after you purchase. Adblocking is good, but I prefer when it's controlled and I can just open an incognito window or disable it temporarily when I need them, for whatever reason.
- cyberbolt23 1y agoThen use a browser adblocker that you can disable when needed.
- Eduard 1y ago> For example, the biggest country-wide payback program is payback.de, and their most of their coupon multiplier links here – https://www.payback.de/coupons/info https://www.payback.de/coupons/info – will be clickable, but silently not work after you purchase. I don't understand this claim. Payback coupons have to be activated before purchase, so even if somehow that link wouldn't work anymore after a purchase it'd be too late anyway to have the coupon applied. Can you elaborate or provide links for more information?
- em-bee 1y agorelated: dns4eu https://news.ycombinator.com/item?id=44255116 https://news.ycombinator.com/item?id=44255116
- tomhow 1y agoThanks! Full details of this and others: How much EU is in DNS4EU? - https://news.ycombinator.com/item?id=44255116 https://news.ycombinator.com/item?id=44255116 - June 2025 (108 comments) DNS4EU, an EU-based DNS resolution service - https://news.ycombinator.com/item?id=44254610 https://news.ycombinator.com/item?id=44254610 - June 2025 (50 comments) DNS4EU for Public Is Available - https://news.ycombinator.com/item?id=44190071 https://news.ycombinator.com/item?id=44190071 - June 2025 (78 comments)
- jedisct1 1y agoNo DNS stamps to use this?
- mtremsal 1y agoThis is neat. I wonder what the delta is between this and NextDNS (who funds/powers the non-profit). I imagine NextDNS blocks a superset of the baseline of dangerous domains blocked by dns0.eu? Is the main addition primarily advertising and analytics related? edit: another key addition by NextDNS is a global infra footprint, rather than just in the EU. Oh it looks like there’s no anycast with the non-profit as well? And you have to pick your local resolver. I guess that makes sense because the main value prop of NextDNS (to me) is when I’m traveling and a local pi-hole won’t suffice.
- jamiedumont 1y agoI thought the two sounded similar, then I saw at the bottom they both have come from the same two founders. Nice to have a straightforward alternative to NextDNS to recommend to relatives.
- smartmic 1y agoUnfortunately, the setup instructions for "Linux" on the homepage only consider "systemd." Of course, every GNU/Linux user — or rather, administrator — who doesn't use systemd knows how to set it up the "old" UNIX way. However, assuming that Linux equals systemd is kind of offensive to a small group of systemd avoiders (such as myself).
- throwaway5833 1y agoAfter about a decade Linux on desktop is semi stable and semi secure thanks to Wayland and Systemd. You can stick to fiddling your way with sysv and x11 if you like. The world has moved on.
- weberer 1y agoThere are still various server distros not using systemd. I ran into it recently on a system deployed on Alpine.
- 9dev 1y agoAnd for every one of these, there tens of thousands that do.
- pezezin 1y agoIsn't Alpine only used as a base image for containers?
- msgodel 1y agoNo it runs well on hardware. I ran it as my primary OS for years. It actually has a few neat features that are only useful when booting into it like LBU. That was great for getting the last couple years out of my old macbook pro. The hard disk connector stopped working after the nth time I had to replace the little flex cable so I switched to running Alpine from a ram disk using LBU to handle changes to /etc.
- ryao 1y ago
- miroljub 1y agoMakes the internet safer? That usually means censorship. No, thanks. I don't want a "safe" DNS, I want one that always returns the IP of the host, no matter the actual safety/censorship policies of the day.
- JodieBenitez 1y ago"Nous distribuons notre infrastructure sur plusieurs hébergeurs dans chaque État membre de l'Union européenne. Notre pile logicielle sur mesure a été testée au combat pendant plus de 3 ans, répondant à des billions de requêtes et servant des centaines de milliers d'utilisateurs chez NextDNS." Claims it's 100% european, can't even have proper french. :-/
- makeitdouble 1y agoI'm not sure where you see the bad french. It's not traditional idiomatic, but we're also in 2025 and most people won't even understand the old idioms.
- nbernard 1y agoTo a french ear, it sounds like a (bad) translation from English. For instance, "a été testée au combat" is meaningless in French. The same idea in idiomatic French would be "a subi l'épreuve du feu". And I guess the "billions" should be only "milliards" (French uses the long scale, so the word "billion" exists but corresponds to a thousand billions as understood in (US?) English)...
- makeitdouble 1y agoI hear you, but it's also a reality that more people in our field have heard "battle tested", know what it means and understand the French translation than "épreuve du feu" (I genuinely only ever read that idiom, and not once since the horrible movie which got that as the French name). That's where I'm saying going back to an older idiom just makes it classic, and doesn't help communication in itself IMHO.
- JodieBenitez 1y ago"testée au combat" is a dumb and lazy translation for "battle-tested". Also, we don't have billions here, it's "milliards". The fact that it comes from a french non-profit organization makes it even worse. Such a lack of respect for their own culture makes me sad.
- rubycollect4812 1y agoHow does this differ from a service like quad9? Has someone done speed tests? One key difference is probably quad9 being under Swiss privacy laws and dns0 being under gdpr laws in the EU.
- giantg2 1y agoThis post currently has 53 comments. Iykyk
- reify 1y agoI have just put the DNS server 193.110.81.0 into the network manager on a manjaro machine and an MX-linux machine and the DNS works perfectly. Added it to Librewolf and it works fine, Just put the kids.dns0.eu on my grandkids phone and again it works perfectly. I have of course already done this in the past with the Mullvad DNS with the family filter: I would rather use an EU DNS server than any US shite. dnsleaktest; on the Mx-linux machine IP: 217.156.17.129 M247 Europe Brussels, Belgium I do hope that the EU can slowly disconnnect from all USA services and have our own. https://nlnet.nl/project/current.html https://nlnet.nl/project/current.html https://european-alternatives.eu/ https://european-alternatives.eu/ You cannot have someone like TRump instruct/pressure/force microsoft to delete emails and accounts of the International war crimes investigators, who were investigating Israel for war crimes.
- Xelbair 1y agoThe only way my internet can be safer if i get a DNS that's fully outside of any government control(including soft power over private providers).
- ck2 1y agohow about quad9, what are the feelings on them now? on paper it looks great https://en.wikipedia.org/wiki/Quad9 https://en.wikipedia.org/wiki/Quad9 https://news.ycombinator.com/item?id=43469457 https://news.ycombinator.com/item?id=43469457
- Eduard 1y ago> A fast, distributed and resilient DNS infrastructure that's 100% European. > dns0.eu is a French non‑profit organization founded in 2022 by Romain Cointepas and Olivier Poitrey — co-founders of NextDNS. -> https://help.nextdns.io/t/y4hmv0n/who-is-behind-nextdns https://help.nextdns.io/t/y4hmv0n/who-is-behind-nextdns > Who is behind NextDNS? > NextDNS was founded in May 2019 in Delaware, USA by two French founders Romain Cointepas and Olivier Poitrey. Olivier has been working on Internet infrastructures for the last 20 years. In 2005, he founded Dailymotion, the largest video sharing service after Youtube and the most popular European website in the world at the time. He is currently Director of Engineering at Netflix, working on Open Connect, Netflix's home CDN also known as the CDN moving about 30% of the total US Internet traffic. Romain and Olivier closely worked for years at Dailymotion on many different projects. Romain ended up leading the mobile & TV department. Brain gymnastics at work.
- exiguus 1y agonice alternative to google or cloudflare in production.
- jauco 1y agoSome context that might be overlooked by the non-eu visitors: the eu is passing a bunch of laws that forces/requires larger corporations and so called “critical entities” to invest in resilience. Amongst which of course also cyber resilience. This is a broad area, from security hardening to cataclysm preparation. The relevant eu guidelines are NIS2 and CER. The laws don’t tell the entities what they should prepare for. Rather, they state that the entities must execute a proper risk assessment and prepare accordingly (obviously this is the rough summary. The actual legislations are a bit better worded than a 9pm forum post) And given what’s going on in the world + the phrasing of the legislations, using eu based services is becoming a lot more attractive to these companies. Which means that being a eu based company whose offer is “whatever US company X does, but a bit less mature atm, we’re working on it!” has gone from a pointless strategy to one that might just work. Edit: BTW that last paragraph is not meant to imply that dns0 isn’t mature. I don’t know them. Just wanted to put in words the general vibe I’m picking up.
- ferongr 1y agoI'd like to use it because I support the creator's stated mission, but for me, performance seems very slow and unreliability is lacking 192.168. 1. 1 | Min | Avg | Max |Std.Dev|Reliab%| ----------------+-------+-------+-------+-------+-------+ - Cached Name | 0.000 | 0.002 | 0.002 | 0.001 | 100.0 | - Uncached Name | 0.025 | 0.080 | 0.304 | 0.059 | 100.0 | - DotCom Lookup | 0.027 | 0.039 | 0.129 | 0.026 | 100.0 | ---<-------->---+-------+-------+-------+-------+-------+ Non-routable local internet address Local Network Nameserver 1. 1. 1. 1 | Min | Avg | Max |Std.Dev|Reliab%| ----------------+-------+-------+-------+-------+-------+ + Cached Name | 0.027 | 0.029 | 0.039 | 0.001 | 100.0 | + Uncached Name | 0.028 | 0.037 | 0.080 | 0.016 | 100.0 | + DotCom Lookup | 0.029 | 0.034 | 0.059 | 0.007 | 100.0 | ---<-------->---+-------+-------+-------+-------+-------+ one.one.one.one CLOUDFLARENET, US 1. 0. 0. 1 | Min | Avg | Max |Std.Dev|Reliab%| ----------------+-------+-------+-------+-------+-------+ + Cached Name | 0.029 | 0.030 | 0.050 | 0.003 | 100.0 | + Uncached Name | 0.029 | 0.049 | 0.196 | 0.031 | 100.0 | + DotCom Lookup | 0.029 | 0.035 | 0.070 | 0.009 | 100.0 | ---<-------->---+-------+-------+-------+-------+-------+ one.one.one.one CLOUDFLARENET, US 8. 8. 4. 4 | Min | Avg | Max |Std.Dev|Reliab%| ----------------+-------+-------+-------+-------+-------+ - Cached Name | 0.059 | 0.066 | 0.151 | 0.015 | 100.0 | - Uncached Name | 0.059 | 0.080 | 0.290 | 0.045 | 100.0 | - DotCom Lookup | 0.059 | 0.063 | 0.089 | 0.006 | 100.0 | ---<-------->---+-------+-------+-------+-------+-------+ dns.google GOOGLE, US 8. 8. 8. 8 | Min | Avg | Max |Std.Dev|Reliab%| ----------------+-------+-------+-------+-------+-------+ - Cached Name | 0.059 | 0.066 | 0.105 | 0.011 | 100.0 | - Uncached Name | 0.059 | 0.091 | 0.319 | 0.061 | 100.0 | - DotCom Lookup | 0.058 | 0.064 | 0.089 | 0.008 | 100.0 | ---<-------->---+-------+-------+-------+-------+-------+ dns.google GOOGLE, US 193.110. 81. 0 | Min | Avg | Max |Std.Dev|Reliab%| ----------------+-------+-------+-------+-------+-------+ - Cached Name | 0.058 | 0.068 | 0.102 | 0.014 | 73.0 | - Uncached Name | 0.057 | 0.103 | 0.239 | 0.057 | 70.4 | - DotCom Lookup | 0.059 | 0.072 | 0.089 | 0.013 | 57.9 | ---<-------->---+-------+-------+-------+-------+-------+ dns0.eu DNS0EU, FR 185.253. 5. 0 | Min | Avg | Max |Std.Dev|Reliab%| ----------------+-------+-------+-------+-------+-------+ - Cached Name | 0.066 | 0.071 | 0.110 | 0.007 | 98.0 | - Uncached Name | 0.069 | 0.103 | 0.289 | 0.057 | 97.9 | - DotCom Lookup | 0.067 | 0.075 | 0.130 | 0.011 | 97.9 | ---<-------->---+-------+-------+-------+-------+-------+ dns0.eu DNS0EU, FR UTC: 2025-06-13, from 20:10:13 to 20:11:18, for 01:05.419