hey /g/
what dns server do you use and why?
8.8.8.8 because I don't know any better
>>55205370
I use 1.1.1.1
>>55205335
I don't know. Because it works.
>>55205370
I do to, but i'm worried because google would have to be crazy not to at least peak at what sites everyone is going on.
>>55205390
>>55205435
So i did some reading and 1.1.1.X block is actually unused. Some bad ISP's use this address range as a placeholder.
So the IP you are trying to go to is actually being spoofed by your Regional internet registry
>>55205335
the one my ISP uses by default
good enough, non-google botnet
>>55205514
No, nerd
it's just my router's ip
>>55205534
>mfw isp actually forwards queries to 8.8.8.8
>>55205552
what if some service will use that ip
>>55205552
thats fucking gross man
>>55205569
What kind of services, anon?
i dont use dns i do the conversions manually
>>55205585
inb4 4chan moves to 1.1.1.1
>>55205569
>Traffic in Network 1.0.0.0/8
http://www.potaroo.net/studies/1slash8/1slash8.html
>>55205627
The chances of a website moving to 1.1.1.1 are exactly nought
Recursive or authoritative?
Authoritative, for my and my friends' domains, I run my own, on a dedicated (primary) and a VPS (secondary), two different providers and countries. They run a fork of djbdns which supports DNSSEC using the widely-supported and (unlike RSA) small secp256r1 elliptic curve.
Recursive, the DMZ VLAN uses my ISP's nameservers (so as to not skew any metrics results), and the other VLANs via whatever routes use Google Public DNS (IPv4 and IPv6). I considered using unbound locally but following testing, Google consistently worked better.
I've been thinking of implementing DNSCurve but without an RFC, or even a live I-D, I don't consider it a high priority. My ISP already gets cut out of the loop with VPNs and Tor some of the time anyway (depending on the VLAN and tagged routing).
>>55205673
Not really, especially since IPv4 space is running out.
The registry that owns 1.1.1.X could use it if they wish.
8.8.8.8 and 8.8.4.4 were unused previously.
>>55205335
4.2.2.1
4.2.2.2
It is the fastest to update, and is never down, have used it for YEARS.
pi-hole with google dns
try me
https://github.com/pi-hole/pi-hole
https://tbds.github.io/FreeContributor
>>55205335
Bind9
It just werks
>>55205335
8.8.8.8 = Google, uses anycast to use a server near you.
4.2.2.1 = Level3. I have heard of them blocking access from some locations.
198.6.1.1 = old school uunet.
dnscrypt-proxy
4.2.2.2
>why
It's not Google's but it's about as easy to remember.
Got my own. In my own domain with a Win Server 2K8 R2 DNS on an AD, and any names I can't resolve are forwarded to 8.8.8.8
opendns
russians are cool.
192.168.8.1
opennic
