DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8.8.8 x Quad9 x OpenDNS

Re:DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8... by pavs on Monday April 02, 2018 @06:40AM (#16733532)

You can query DNS root server. https://www.iana.org/domains/root/servers

And use long TTL time with large cache size.

Other than some small edge cases, this is pretty much the most secure and fastest DNS performance you will have, in most instances getting about 1 or <1ms speed. Depending on DNS server you can even have both root servers and resolver configured.

I have been using unbound for at least 4 years. Simple and fast.

[ Parent | on HN ]

Re:DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8... by arca_vorago on Monday April 02, 2018 @12:27PM (#16736031)

It is also very easy to do this with dnsmasq or powerdns, djbdns, etc.

I'm increasingly beginning to think that every node should be it's own dns so it's cache blacklist can be verified (checksums?) per node instead of per request to the dns provider.

[ Parent | on HN ]

Re:DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8... by jamra on Monday April 02, 2018 @10:59AM (#16734988)

Ok I'm going to try and set up Cloudflare's DNS setup in Go to point to those root servers and see what I get.

Is there a different DNS server you would recommend? I don't think my usage requires anything special.

[ Parent | on HN ]

Re:DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8... by pavs on Monday April 02, 2018 @12:22PM (#16735965)

BIND is the industry standard - but insanely overkill for your use case. Unbound is very easy and lightweight. Dnsmasq is another option, but I don't think you can setup root server with it.

[ Parent | on HN ]