News for hackers. Stuff that matters.

A comment on DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8.8.8 x Quad9 x OpenDNS. Parent comment

Re:DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8... by spc476 on Monday April 02, 2018 @07:33PM (#16740455)
Does no one bother to run their own DNS server? It's not hard---in fact, it's easier than running an authoritative DNS server, since you are only using it for local resolving.

I ran the provided script, added my own local resolver, and after the first run, got incredibly fast results.

                   test1   test2   test3   test4   test5   test6   test7   test8   test9   test10  Average 
    cloudflare     35 ms   38 ms   39 ms   33 ms   34 ms   39 ms   28 ms   33 ms   28 ms   39 ms     34.60
    cloudflare2nd  34 ms   27 ms   34 ms   34 ms   34 ms   27 ms   34 ms   28 ms   28 ms   28 ms     30.80
    google         42 ms   27 ms   27 ms   40 ms   28 ms   40 ms   28 ms   40 ms   40 ms   28 ms     34.00
    google2nd      42 ms   27 ms   28 ms   43 ms   41 ms   39 ms   28 ms   41 ms   41 ms   28 ms     35.80
    quad9          65 ms   64 ms   54 ms   65 ms   63 ms   53 ms   59 ms   52 ms   60 ms   53 ms     58.80
    opendns        45 ms   32 ms   56 ms   51 ms   29 ms   74 ms   32 ms   48 ms   45 ms   32 ms     44.40
    norton         92 ms   73 ms   56 ms   152 ms  48 ms   144 ms  68 ms   40 ms   77 ms   83 ms     83.30
    cleanbrowsing  33 ms   28 ms   33 ms   28 ms   33 ms   35 ms   28 ms   32 ms   33 ms   29 ms     31.20
    yandex         174 ms  174 ms  185 ms  178 ms  184 ms  179 ms  179 ms  199 ms  176 ms  186 ms    181.40
    adguard        143 ms  147 ms  146 ms  142 ms  148 ms  143 ms  130 ms  130 ms  138 ms  137 ms    140.40
    neustar        62 ms   63 ms   70 ms   80 ms   40 ms   74 ms   73 ms   151 ms  58 ms   65 ms     73.60
    comodo         60 ms   137 ms  59 ms   60 ms   59 ms   59 ms   64 ms   62 ms   60 ms   59 ms     67.90
    localhost      0 ms    0 ms    0 ms    0 ms    0 ms    0 ms    0 ms    0 ms    0 ms    0 ms      0
[ Parent | on HN ]
Re:DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8... by Godel_unicode on Monday April 02, 2018 @11:49PM (#16741753)
Most people are not very interested in testing how fast their local machine can talk to itself; regardless of how fast your local cache is, it will have to talk outside pretty often (for expiring TTL if nothing else).
[ Parent | on HN ]
Re:DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8... by spc476 on Tuesday April 03, 2018 @12:04AM (#16741835)
People are praising CloudFlare for not bothering to log requests. Yes, well ... you get the same results by using your own DNS resolver, and you don't have to be shocked when five years later a different governing team running CloudFlare decide to reverse their stance and log everything ...

But what do I know? Apparently I'm in the minority for running my own infrastructure (DNS, web, mail).

[ Parent | on HN ]
Re:DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8... by Godel_unicode on Saturday April 07, 2018 @12:20AM (#16779343)
Where do you think your DNS resolver gets the answers it gives you? You're just introducing a caching layer between you and whatever external resolver you're using. The first time a machine requests a domain (and every time a TTL expires; look at CDN TTLs sometime) you are effectively talking to the internet just like everyone else.
[ Parent | on HN ]
Re:DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8... by ragequitta on Tuesday April 03, 2018 @07:27AM (#16743603)
Do you ever wonder if such activity (basically trying to be invisible) will put you under far more scrutiny than if you were to just 'be normal'? Thinking from the other side of it you would be a high value target to monitor as closely as possible if I were law enforcement. I know it sounds ridiculous but you may actually have more privacy (unless you're actually breaking the law) by hiding in plain sight with the rest of us.
[ Parent | on HN ]
Re:DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8... by enneff on Tuesday April 03, 2018 @07:20AM (#16743570)
If you talk to an upstream resolver through an encrypted link (both CloudFlare and Google support DNSoverTLS and DNSoverHTTPS, at least) then you at least limit the potential privacy threats.
[ Parent | on HN ]
Re:DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8... by dx034 on Tuesday April 03, 2018 @05:14AM (#16743027)
If you live close to a peering point, both CF and Google will have mean ping times <10ms, often even <5ms. I doubt there's any real world difference between using localhost and either of them. As they cache results, using them could actually be faster than your own server.
[ Parent | on HN ]