I feel kinda bad about feeding google with data. Is there some name server I can point my servers to that upholds my privacy and does not run analytics on the requests it gets?
Quad9, a Swiss public benefit, not-for-profit foundation. Main address is 9.9.9.9.
My own.
This is the correct answer if you trust that your ISP isn’t snooping on your traffic. Your DNS server will send unencrypted queries to the root name servers and the nameservers of the domains you search for. This traffic is easy to detect and parse, so you do need to trust your ISP, or the provider of wherever you host your DNS server.
If you don’t trust your ISP to that level you’ll need to trust whichever server you connect to. It’s a trade off to decide which is best for your use case.
Cloudflare at work, quad9 at home.
Honestly at work I mostly use the upstream dns
Quad9
9.9.9.9
How about dnscrypt-proxy?
Randomized dns servers and you can use your own blocklists
I use the DNS resolver in pfSense which connects directly to the DNS root servers.
I do the same in opnsense. According to dnsperfbench, running my own resolver benchmarked as slightly faster or at minimum about the same performance as using any of the big public resolvers. I think the only concern is to make sure you’re not using your local resolver if you’re trying to use a VPN.
You can do that?
Yes, as long as you don’t have a crappy ISP that interferes with your DNS traffic.
My ISP is crappy in other ways
OpenDNS, anyone?
Open DNS is run by Cisco now. And is directly used for their proprietary anti malware systems
Thanks for the info, I’ve started using Quad9 ever since I got fiber recently and tried a DNS benchmark tool and saw it’s even faster than Cloudflare at my network