公共DNS

1 测试可用性

以 Google DNS 为例:

# DoH
curl -i https://dns.google/dns-query?dns=AAABAAABAAAAAAAAB2V4YW1wbGUDY29tAAABAAE
curl -i https://8.8.8.8/dns-query?dns=AAABAAABAAAAAAAAB2V4YW1wbGUDY29tAAABAAE
curl -s -H "accept: application/dns-json" "https://dns.google/resolve?name=example.com&type=A" | jq "." | grep data | cut -d '"' -f 4
curl -s -H "accept: application/dns-json" "https://8.8.8.8/resolve?name=example.com&type=A" | jq "." | grep data | cut -d '"' -f 4
# DoT
dig @dns.google -p 853 +tls +short A example.com
dig @8.8.8.8 -p 853 +tls +short A example.com

2 Public anycast resolvers

These are globally distributed, large-scale DNS resolvers that use anycast routing to direct your DNS queries to the nearest data center.

2.1 AdGuard DNS

AdGuard DNS is an alternative solution for ad blocking, privacy protection, and parental control. It provides the necessary number of protection features against online ads, trackers, and phishing, no matter what platform and device you use.

2.1.1 Default

These servers block ads, tracking, and phishing.

2.1.2 Family Protection

These servers provide the Default features + Blocking adult websites + Safe search.

2.1.3 Non-filtering

Each of these servers provides a secure and reliable connection, but unlike the “Standard” and “Family Protection” servers, they don’t filter anything.

2.2 Ali DNS

Ali DNS is a free recursive DNS service that committed to providing fast, stable and secure DNS resolution for the majority of Internet users. It includes AliGuard facility to protect users from various attacks and threats.

2.3 BebasDNS by BebasID

BebasDNS is a free and neutral public resolver based in Indonesia which supports OpenNIC domain. Created by Komunitas Internet Netral Indonesia (KINI) to serve Indonesian user with free and neutral internet connection.

2.3.1 Default

This is the default variant of BebasDNS. This variant blocks ads, malware, and phishing domains.

2.3.2 Unfiltered

This variant doesn’t filter anything.

2.3.3 Security

This is the security/antivirus variant of BebasDNS. This variant only blocks malware, and phishing domains.

2.3.4 Family

This is the family variant of BebasDNS. This variant blocks pornography, gambling, hate site, blocks malware, and phishing domains.

2.3.5 Family With Ad Filtering

This is the family variant of BebasDNS but with adblocker

2.3.6 OISD Filter

This is a custom BebasDNS variant with only OISD Big filter

2.3.7 Hagezi Multi Normal Filter

This is a custom BebasDNS variant with only Hagezi Multi Normal filter

2.4 0ms DNS

DNS is a global DNS resolution service provided by 0ms Group as an alternative to your current DNS provider.

It uses OISD Big as the basic filter to give everyone a more secure environment. It is designed with various optimizations, such as HTTP/3, caching, and more. It leverages machine learning to protect users from potential security threats while also optimizing itself over time.

2.5 CFIEC Public DNS

IPv6-based anycast DNS service with strong security capabilities and protection from spyware, malicious websites. It supports DNS64 to provide domain name resolution only for IPv6 users.

2.6 Cisco OpenDNS

Cisco OpenDNS is a service which extends the DNS by incorporating features such as content filtering and phishing protection with a zero downtime.

2.6.1 Standard

DNS servers with custom filtering that protects your device from malware.

2.6.2 FamilyShield

OpenDNS servers that provide adult content blocking.

2.6.3 Sandbox

Non-filtering OpenDNS servers.

:::info

OpenDNS’s servers remove the AUTHORITY sections from certain responses, including those with NODATA, which makes caching such responses impossible.

:::

2.7 CleanBrowsing

CleanBrowsing is a DNS service which provides customizable filtering. This service offers a safe way to browse the web without inappropriate content.

2.7.1 Family Filter

Blocks access to all adult, pornographic and explicit sites, including proxy & VPN domains and mixed content sites.

2.7.2 Adult Filter

Less restrictive than the Family filter, it only blocks access to adult content and malicious and phishing domains.

2.7.3 Security Filter

Blocks phishing, spam and malicious domains.

2.8 Cloudflare DNS

Cloudflare DNS is a free and fast DNS service which functions as a recursive name server providing domain name resolution for any host on the Internet.

2.8.1 Standard

2.8.2 Malware blocking only

2.8.3 Malware and adult content blocking

2.9 Comodo Secure DNS

Comodo Secure DNS is a domain name resolution service that resolves your DNS requests through worldwide network of DNS servers. Removes excessive ads and protects from phishing and spyware.

2.10 ControlD

ControlD is a customizable DNS service with proxy capabilities. This means it not only blocks things (ads, porn, etc.), but can also unblock websites and services.

2.10.1 Non-filtering

2.10.2 Block malware

2.10.3 Block malware + ads

2.10.4 Block malware + ads + social

| Protocol | Address | | | ————– | ——————————— | | DNS, IPv4 | 76.76.2.3 | | DNS-over-HTTPS | https://freedns.controld.com/p3 | | DNS-over-TLS | tls://p3.freedns.controld.com | [ |

2.11 DeCloudUs DNS

DeCloudUs DNS is a DNS service that lets you block anything you wish while by default protecting you and your family from ads, trackers, malware, phishing, malicious sites, and much more.

2.12 DNS Privacy

A collaborative open project to promote, implement, and deploy DNS Privacy.

2.12.1 DNS servers run by the Stubby developers

2.12.2 Other DNS servers with no-logging policy

2.12.3 DNS servers with minimal logging/restrictions

These servers use some logging, self-signed certs or no support for strict mode.

2.13 DNS.SB

DNS.SB provides free DNS service without logging and with DNSSEC enabled.

2.14 DNSPod Public DNS+

DNSPod Public DNS+ is a privacy-friendly DNS provider with years of experience in domain name resolution services development, it aims to provide users more rapid, accurate and stable recursive resolution service.

2.15 DNSWatchGO

DNSWatchGO is a DNS service by WatchGuard that prevents people from interacting with malicious content.

2.16 Dyn DNS

Dyn DNS is a free alternative DNS service by Dyn.

2.17 Freenom World

Freenom World is a free anonymous DNS resolver by Freenom World.

2.18 Google DNS

Google DNS is a free, global DNS resolution service that you can use as an alternative to your current DNS provider.

2.19 Hurricane Electric Public Recursor

Hurricane Electric Public Recursor is a free alternative DNS service by Hurricane Electric with anycast.

2.20 Mullvad

Mullvad provides publicly accessible DNS with QNAME minimization, endpoints located in Australia, Germany, Singapore, Sweden, United Kingdom and United States (New York and Los Angeles).

2.20.1 Non-filtering

2.20.2 Ad blocking

2.21 Nawala Childprotection DNS

Nawala Childprotection DNS is an anycast Internet filtering system that protects children from inappropriate websites and abusive contents.

2.22 Neustar Recursive DNS

Neustar Recursive DNS is a free cloud-based recursive DNS service that delivers fast and reliable access to sites and online applications with built-in security and threat intelligence.

2.22.1 Reliability & Performance 1

These servers provide reliable and fast DNS lookups without blocking any specific categories.

2.22.2 Reliability & Performance 2

These servers provide reliable and fast DNS lookups without blocking any specific categories and also prevent redirecting NXDomain (non-existent domain) responses to landing pages.

2.22.3 Threat Protection

These servers provide protection against malicious domains and also include “Reliability & Performance” features.

2.22.4 Family Secure

These servers provide adult content blocking and also include “Reliability & Performance” + “Threat Protection” features.

2.22.5 Business Secure

These servers provide blocking unwanted and time-wasting content and also include “Reliability & Performance” + “Threat Protection” + “Family Secure” features.

2.23 NextDNS

NextDNS provides publicly accessible non-filtering resolvers without logging in addition to its freemium configurable filtering resolvers with optional logging.

2.23.1 Ultra-low latency

2.23.2 Anycast

2.24 OpenBLD.net DNS

OpenBLD.net DNS - Anycast/GeoDNS DNS-over-HTTPS, DNS-over-TLS resolvers with blocking: advertising, tracking, adware, malware, malicious activities and phishing companies, blocks ~1M domains. Has 24h/48h logs for DDoS/Flood attack mitigation.

2.24.1 Adaptive Filtering (ADA)

Recommended for most users, very flexible filtering with blocking most ads networks, ad-tracking, malware and phishing domains.

2.24.2 Strict Filtering (RIC)

More strictly filtering policies with blocking - ads, marketing, tracking, malware, clickbait, coinhive and phishing domains.

2.24.3 dns0.eu

dns0.eu is a free, sovereign and GDPR-compliant recursive DNS resolver with a strong focus on security to protect the citizens and organizations of the European Union.

2.25 Quad9 DNS

Quad9 DNS is a free, recursive, anycast DNS platform that provides high-performance, privacy, and security protection from phishing and spyware. Quad9 servers don’t provide a censoring component.

2.25.1 Standard

Regular DNS servers which provide protection from phishing and spyware. They include blocklists, DNSSEC validation, and other security features.

2.25.2 Unsecured

Unsecured DNS servers don’t provide security blocklists, DNSSEC, or EDNS Client Subnet.

2.25.3 ECS support

EDNS Client Subnet is a method that includes components of end-user IP address data in requests that are sent to authoritative DNS servers. It provides security blocklist, DNSSEC, EDNS Client Subnet.

2.26 RethinkDNS

RethinkDNS provides DNS-over-HTTPS service running as Cloudflare Worker and DNS-over-TLS service running as Fly.io Worker with configurable blocklists.

2.26.1 Non-filtering

2.27 Safe DNS

Safe DNS is a global anycast network which consists of servers located throughout the world — both Americas, Europe, Africa, Australia, and the Far East to ensure a fast and reliable DNS resolving from any point worldwide.

2.28 Safe Surfer

Safe Surfer is a DNS service that blocks 50+ categories like porn, ads, malware, and popular social media sites making web surfing safer.

2.29 360 Secure DNS

360 Secure DNS is a industry-leading recursive DNS service with advanced network security threat protection.

2.30 Verisign Public DNS

Verisign Public DNS is a free DNS service that offers improved DNS stability and security over other alternatives. Verisign respects users’ privacy: they neither sell public DNS data to third parties nor redirect users’ queries to serve them ads.

2.31 Wikimedia DNS

Wikimedia DNS is a caching, recursive, public DoH and DoT resolver service that is run and managed by the Site Reliability Engineering (Traffic) team at the Wikimedia Foundation on all six Wikimedia data centers with anycast.

3 Regional resolvers

Regional DNS resolvers are typically focused on specific geographic regions, offering optimized performance for users in those areas. These resolvers are often operated by non-profit organizations, local ISPs, or other entities.

3.1 Applied Privacy DNS

Applied Privacy DNS operates DNS privacy services to help protect DNS traffic and to help diversify the DNS resolver landscape offering modern protocols.

3.2 ByteDance Public DNS

ByteDance Public DNS is a free alternative DNS service by ByteDance at China. The only DNS currently provided by ByteDance supports IPV4. DOH, DOT, DOQ, and other encrypted DNS services will be launched soon.

3.3 CIRA Canadian Shield DNS

CIRA Shield DNS protects against theft of personal and financial data. Keep viruses, ransomware, and other malware out of your home.

3.3.1 Private

In “Private” mode, DNS resolution only.

3.3.2 Protected

In “Protected” mode, malware and phishing protection.

3.3.3 Family

In “Family” mode, Protected + blocking adult content.

3.4 Comss.one DNS

Comss.one DNS is a fast and secure DNS service with protection against ads, tracking, and phishing.

3.5 CZ.NIC ODVR

CZ.NIC ODVR CZ.NIC ODVR are Open DNSSEC Validating Resolvers. CZ.NIC neither collect any personal data nor gather information on pages where devices sends personal data.

3.6 Digitale Gesellschaft DNS

Digitale Gesellschaft is a public resolver operated by the Digital Society. Hosted in Zurich, Switzerland.

3.7 DNS for Family

DNS for Family aims to block adult websites. It enables children and adults to surf the Internet safely without worrying about being tracked by malicious websites.

3.8 Fondation Restena DNS

Restena DNS servers provided by Restena Foundation.

| DNS-over-TLS| tls://kaitain.restena.lu IP: 158.64.1.29 and IPv6: 2001:a18:1::29 |

3.9 114DNS

114DNS is a professional and high-reliability DNS service.

3.9.1 Normal

Block ads and annoying websites.

3.9.2 Safe

Blocks phishing, malicious and other unsafe websites.

3.9.3 Family

These servers block adult websites and inappropriate contents.

3.10 IIJ.JP DNS

IIJ.JP is a public DNS service operated by Internet Initiative Japan. It also blocks child abuse content.

3.11 JupitrDNS

JupitrDNS is a a free recursive DNS service that blocks ads, trackers, and malware. It has DNSSEC support and does not store logs.

3.12 LibreDNS

LibreDNS is a public encrypted DNS service run by LibreOps.

3.13 OneDNS

OneDNS is a secure, fast, free niche DNS service with malicious domains blocking facility.

3.13.1 Pure Edition

3.13.2 Block Edition

3.14 OpenNIC DNS

OpenNIC DNS is a free alternative DNS service by OpenNIC Project.

This is just one of the available servers, the full list can be found here.

3.15 Quad101

Quad101 is a free alternative DNS service without logging by TWNIC (Taiwan Network Information Center).

3.16 SkyDNS RU

SkyDNS solutions for content filtering and internet security.

3.17 SWITCH DNS

SWITCH DNS is a Swiss public DNS service provided by switch.ch.

3.18 Yandex DNS

Yandex.DNS is a free recursive DNS service. Yandex.DNS’ servers are located in Russia, CIS countries, and Western Europe. Users’ requests are processed by the nearest data center which provides high connection speeds.

3.18.1 Basic

In “Basic” mode, there is no traffic filtering.

3.18.2 Safe

In “Safe” mode, protection from infected and fraudulent sites is provided.

3.18.3 Family

In “Family” mode, protection from infected, fraudulent and adult sites is provided.

4 Small personal resolvers

These are DNS resolvers usually run by enthusiasts or small groups. While they may lack the scale and redundancy of larger providers, they often prioritize privacy, transparency, or offer specialized features.

We won’t be able to proper monitor their availability. Use them at your own risk.

4.1 AhaDNS

AhaDNS A zero-logging and ad-blocking DNS service provided by Fredrik Pettersson.

4.1.1 Netherlands

4.1.2 Los Angeles

4.2 Arapurayil

Arapurayil is a personal DNS service hosted in Mumbai, India.

Non-logging | Filters ads, trackers, phishing, etc. | DNSSEC | QNAME Minimization | No EDNS Client Subnet.

4.3 Captnemo DNS

Captnemo DNS is a server running off of a Digital Ocean droplet in BLR1 region. Maintained by Abhay Rana aka Nemo.

4.4 Dandelion Sprout’s Official DNS Server

Dandelion Sprout’s Official DNS Server is a personal DNS service hosted in Trondheim, Norway, using an AdGuard Home infrastructure.

Blocks more ads and malware than AdGuard DNS thanks to more advanced syntax, but goes easier on trackers, and blocks alt-right tabloids and most imageboards. Logging is used to improve its used filterlists (e.g. by unblocking sites that shouldn’t have been blocked), and to determine the least bad times for server system updates.

4.5 DNS Forge

DNS Forge is a redundant DNS resolver with an ad blocker and no logging provided by adminforge.

4.6 dnswarden

You can also configure custom DNS server to block ads or filter adult content.

4.7 FFMUC DNS

FFMUC free DNS servers provided by Freifunk München.

4.8 fvz DNS

fvz DNS is a Fusl’s public primary OpenNIC Tier2 Anycast DNS Resolver.

4.9 ibksturm DNS

ibksturm DNS testing servers provided by ibksturm. OPENNIC, DNSSEC, no filtering, no logging.

4.10 Lelux DNS

Lelux.fi is run by Elias Ojala, Finland.

4.11 OSZX DNS

OSZX DNS is a small Ad-Blocking DNS hobby project.

4.11.1 OSZX DNS

This service ia a small ad blocking DNS hobby project with D-o-H, D-o-T & DNSCrypt v2 support.

4.11.2 PumpleX

These servers provide no ad blocking, keep no logs, and have DNSSEC enabled.

4.12 Privacy-First DNS

Privacy-First DNS blocks over 140K ads, ad-tracking, malware and phishing domains. No logging, no ECS, DNSSEC validation, free!

4.12.1 Singapore DNS Server

4.12.2 Japan DNS Server

4.13 Seby DNS

Seby DNS is a privacy focused DNS service provided by Sebastian Schmidt. No Logging, DNSSEC validation.

4.13.1 DNS Server 1