====== List of Public DNS Servers ====== 

<WRAP center round tip 60%>
Порівняльна характеристика публічних DNS від wiki.ipfire.org\\
Потребує перекладу!
</WRAP>





During the process of dial-in, your ISP usually passes two to four DNS servers to the router or modem
for looking up IP addresses. They will be used if you have not set some other DNS servers.

However, it might be possible that these DNS servers are censored, compromised or don't provide DNSSEC validation which makes DNS replies more secure. In case you don't trust your ISPs DNS servers, feel free to use alternate DNS server from the list below.

^ Operator ^  Location  ^  DNSSEC  ^ Address(es) ^
| **[[https://alternate-dns.com/setup.html|Alternate DNS]]** |  US  |  <color orange>aware</color>  | 198.101.242.72 |
| |  US  |  <color orange>aware</color>  | 23.253.163.53 |
| **[[https://www.ccc.de/en/censorship/dns-howto|AS250 / Chaos Computer Club (CCC)]]** |  DE  |  <color green>validating</color>  | 194.150.168.168 |
| **[[http://censurfridns.dk/|censurfridns.dk]]** |  DK  |  <color green>validating</color>  | 89.233.43.71 |
| | | | 2001:67c:28a4:: |
| |  Anycast  |  <color green>validating</color>  | 91.239.100.100 |
| | | | 2002:d596:2a92:1:71:53:: |
| **[[https://securedns.dnsbycomodo.com/|Comodo Secure DNS]]** |  US  |  <color red>Strips RRSIG</color>  | 8.26.56.26 |
| |  US  |  <color red>Strips RRSIG</color>  | 8.20.247.20 |
| **[[https://1.1.1.1/|Cloudflare]]** |  Anycast  |  <color green>validating</color>  | 1.1.1.1 |
| |  | | 2606:4700:4700::1111 |
| |  Anycast  |  <color green>validating</color>  | 1.0.0.1 |
| |  | | 2606:4700:4700::1001 |
| **[[https://support.cyberghostvpn.com/hc/en-us/articles/214480265-CyberGhost-name-server-addresses-DNS-|CyberGhost]]** |   US  |  <color orange>aware</color>  | 38.132.106.139 |
| |  UK  |  <color orange>aware</color>  | 194.187.251.67 |
| **[[https://digitalcourage.de/support/zensurfreier-dns-server|Digitalcourage]]** |  DE  |  <color green>validating</color>  | 85.214.20.141 |
| | | | 2a01:238:42f6:ac00:2a29:4f7f:b6d:ef46 |
| |  DE  |  <color green>validating</color>  | 46.182.19.48 |
| **[[http://dnsreactor.net/|DNSReactor]]** |  US  |  <color red>Strips RRSIG</color>  | 45.55.155.25 |
| |  US  |  <color red>Strips RRSIG</color>  | 104.236.210.29 |
| **Dyn** |  US  |  <color green>validating</color>  | 216.146.35.35 |
| |  US  |  <color green>validating</color>  | 216.146.36.36 |
| **[[https://www.fdn.fr/actions/dns/|French Data Network (FDN)]]** |  FR  |  <color orange>aware</color>  | 80.67.169.12 |
| | | | 2001:910:800::12 |
| |  FR  |  <color green>validating</color>  | 80.67.169.40 |
| | | | 2001:910:800::40 |
| **[[https://freedns.zone/en/|FreeDNS]]** |  AT  |  <color red>Strips RRSIG</color>  | 37.235.1.174 |
| |  AT  |  <color red>Strips RRSIG</color>  | 37.235.1.177 |
| **[[https://www.freenom.world/en/index.html|Freenom World]]** |  NL  |  <color green>validating</color>  | 80.80.80.80 |
| |  NL  |  <color green>validating</color>  | 80.80.81.81 |
| **[[https://developers.google.com/speed/public-dns/|Google Public Free DNS]]** |  Anycast  |  <color green>validating</color>  | 8.8.8.8 |
| |  Anycast  |  <color green>validating</color>  | 8.8.4.4 |
| **[[http://www.greenteamdns.com/|GreenTeamDNS]]** |  IL  |  <color red>Strips RRSIG</color>  | 81.218.119.11 |
| |  IL  |  <color red>Strips RRSIG</color>  | 209.88.198.133 |
| **Hurricane Electric** |  Anycast  |  <color green>validating</color>  | 74.82.42.42 |
| | | | 2001:470:20::2 |
| **[[https://dns.lightningwirelabs.com/knowledge-base/specs/name-servers|Lightning Wire Labs]]** |  DE  |  <color green>validating + DNS over TLS</color>  | 81.3.27.54 |
| | | | 2001:470:7655::54 |
| **[[https://www.neustar.biz/security/dns-services/recursive-dns|Neustar DNS Advantage]]** |  US  |  <color green>validating</color>  | 156.154.70.1 |
| |  US  |  <color green>validating</color>  | 156.154.71.1 |
| **[[http://www.new-nations.net/en/join/showpage/id/16|New Nations]]** |  DE  |  <color orange>aware</color>  | 5.45.96.220 |
| |  DE  |  <color orange>aware</color>  | 185.82.22.133 |
| **[[https://dns.norton.com/faq.html|Norton DNS]]** |  US  |  <color green>validating</color>  | 199.85.126.10 |
| |  US  |  <color green>validating</color>  | 199.85.127.10 |
| **[[http://www.n-ix.net/mehrwertdienste/dns-server/|Nuernberg Internet Exchange (N-IX)]]** |  DE  |  <color red>Strips RRSIG</color>  | 194.8.57.12 |
| **[[https://www.opendns.com/setupguide/|OpenDNS]]** ([[.:dnssec:hosted-blacklists]]) |  Anycast  |  <color red>Strips RRSIG</color>  | 208.67.222.222 |
| |  Anycast  |  <color red>Strips RRSIG</color>  | 208.67.220.220 |
| |  Anycast  |  <color red>Strips RRSIG</color>  | 208.67.220.222 |
| |  Anycast  |  <color red>Strips RRSIG</color>  | 208.67.222.220 |
| **[[https://servers.opennicproject.org/|OpenNIC]]** |  AT  |  <color orange>aware</color>  | 5.132.191.104 |
| |  AU  |  <color red>Strips RRSIG</color>  | 111.67.20.8 |
| |  AU  |  <color orange>aware</color>  | 163.53.248.170 |
| |  AU  |  <color orange>aware</color>  | 103.236.162.119 |
| |  CA  |  <color orange>aware</color>  | 104.37.195.178 |
| |  CA  |  <color orange>aware</color>  | 192.99.85.244 |
| |  CH  |  <color orange>aware</color>  | 31.171.251.118 |
| |  CZ  |  <color orange>aware</color>  | 51.254.25.115 |
| |  DE  |  <color green>validating</color>  | 82.141.39.32 |
| |  DE  |  <color green>validating</color>  | 50.3.82.215 |
| |  DE  |  <color red>Strips RRSIG</color>  | 46.101.70.183 |
| |  DE  |  <color orange>aware</color>  | 94.16.114.254 |
| |  DE  |  <color green>validating</color>  | 173.212.234.232 |
| |  DE  |  <color green>validating</color>  | 173.249.7.187 |
| |  DE  |  <color green>validating</color>  | 130.255.78.223 |
| |  DE  |  <color orange>aware</color>  | 144.76.133.38 |
| |  DE  |  <color green>validating</color>  | 172.104.136.243 |
| |  DE  |  <color green>validating</color>  | 94.247.43.254 |
| |  EC  |  <color orange>aware</color>  | 45.71.112.70 |
| |  FR  |  <color green>validating</color>  | 163.172.185.51 |
| |  FR  |  <color orange>aware</color>  | 87.98.175.85 |
| |  FR  |  <color orange>aware</color>  | 51.255.48.78 |
| |  FR  |  <color green>validating</color>  | 188.165.200.156 |
| |  FR  |  <color orange>aware</color>  | 92.222.97.145 |
| |  FR  |  <color orange>aware</color>  | 37.59.40.15 |
| |  GB  |  <color green>validating</color>  | 159.89.249.249 |
| |  IN  |  <color green>validating</color>  | 139.59.18.213 |
| |  IT  |  <color green>validating</color>  | 193.183.98.66 |
| |  JP  |  <color green>validating</color>  | 108.61.201.119 |
| |  LT  |  <color green>validating</color>  | 212.24.98.54 |
| |  MD  |  <color orange>aware</color>  | 178.17.170.179 |
| |  NL  |  <color orange>aware</color>  | 185.208.208.141 |
| |  NL  |  <color orange>aware</color>  | 82.196.9.45 |
| |  NL  |  <color orange>aware</color>  | 146.185.176.36 |
| |  NL  |  <color orange>aware</color>  | 163.172.215.64 |
| |  RO  |  <color green>validating</color>  | 188.213.49.35 |
| |  RO  |  <color orange>aware</color>  | 89.35.39.64 |
| |  RO  |  <color green>validating</color>  | 89.18.27.167 |
| |  RU  |  <color orange>aware</color>  | 91.217.137.37 |
| |  RU  |  <color green>validating</color>  | 185.117.154.144 |
| |  RU  |  <color green>validating</color>  | 95.181.211.6 |
| |  SE  |  <color green>validating</color>  | 176.126.70.119 |
| |  SG  |  <color orange>aware</color>  | 139.99.96.146 |
| |  UA  |  <color green>validating</color>  | 217.12.210.54 |
| |  UK  |  <color green>validating</color>  | 185.164.136.225 |
| |  US  |  <color green>validating</color>  | 66.70.211.246 |
| |  US  |  <color orange>aware</color>  | 96.47.228.108 |
| |  US  |  <color green>validating</color>  | 128.52.130.209 |
| |  US  |  <color orange>aware</color>  | 172.98.193.42 |
| |  US  |  <color orange>aware</color>  | 162.248.241.94 |
| |  US  |  <color green>validating</color>  | 107.172.42.186 |
| |  US  |  <color green>validating</color>  | 66.165.251.19 |
| |  US  |  <color green>validating</color>  | 103.114.191.33 |
| |  US  |  <color green>validating</color>  | 103.114.191.44 |
| |  US  |  <color red>Strips RRSIG</color>  | 73.11.11.6 |
| |  US  |  <color green>validating</color>  | 198.206.14.241 |
| |  US  |  <color green>validating</color>  | 18.211.225.60 |
| **[[http://servidordenoms.cat/vull-aquest-dns/configuracio-a-windows/windows-7/|puntCAT]]** |  ES  |  <color green>validating</color>  | 109.69.8.51 |
| **[[https://www.quad9.net/|Quad9]]** |  Anycast  |  <color green>validating</color>  | 9.9.9.9 |
| |  Anycast  |  <color green>validating</color>  | 9.9.9.10 |
| **[[https://www.safedns.com/|SafeDNS]]** |  Anycast  |  <color orange>aware</color>  | 195.46.39.39 |
| |  Anycast  |  <color orange>aware</color>  | 195.46.39.40 |
| **SkyDNS** |  RU  |  <color orange>aware</color>  | 193.58.251.251 |
| **[[https://sprint.net/index.php?p=faq_dns|Sprintlink General DNS]]** |  US  |  <color orange>aware</color>  | 204.117.214.10 |
| |  US  |  <color orange>aware</color>  | 199.2.252.10 |
| |  US  |  <color orange>aware</color>  | 204.97.212.10 |
| **[[https://www.verisign.com/en_US/security-services/public-dns/index.xhtml|Verisign]]** |  US  |  <color green>validating</color>  | 64.6.64.6 |
| |  US  |  <color green>validating</color>  | 64.6.65.6 |
| **Verizon (Level 3)** |  Anycast  |  <color orange>aware</color>  | 4.2.2.1 |
| |  Anycast  |  <color orange>aware</color>  | 4.2.2.2 |
| |  Anycast  |  <color orange>aware</color>  | 4.2.2.3 |
| |  Anycast  |  <color orange>aware</color>  | 4.2.2.4 |
| |  Anycast  |  <color orange>aware</color>  | 4.2.2.5 |
| |  Anycast  |  <color orange>aware</color>  | 4.2.2.6 |
| **[[https://xiala.net/services/dns.html|Xiala.net]]** |  CH  |  <color green>validating</color>  | 77.109.148.136 |
| | | | 2001:1620:2078:136:: |
| |  CH  |  <color green>validating</color>  | 77.109.148.137 |
| | | | 2001:1620:2078:137:: |
| **[[https://dns.yandex.com/|Yandex.DNS]]** |  RU  |  <color red>Strips RRSIG</color>  | 77.88.8.88 |
| |  RU  |  <color red>Strips RRSIG</color>  | 77.88.8.2 |

===== Legend =====

^ DNSSEC ^ Explanation ^
| <color green>validating</color> | The server is able to validate DNS records. |
| <color orange>aware</color> | The server is able to provide RRSIG, DNSKEY and DS records, but does not validate any records. |
| <color red>not supported</color> or <color red>Strips RRSIG</color> | The server doesn't know anything about DNSSEC and cannot be used by IPFire at all. If configured, a self-test will skip these servers and IPFire will potentially fall back into recursor mode. |

===== About location and DNSSEC status =====
The location of the servers has been stated by using [[https://geoiptool.com/|GeoIP Tool]] and the [[http://geoip.ipfire.org/|IPFire GeoIP server]]. [[configuration:firewall:geoip-block|However, it might be possible that the location is wrong (or has been changed meanwhile).]]

The servers that are marked with "Anycast" are using anycasts so that traffic will be routed to the nearest of the many instances that are there on the network. Thereof the exact location of the server(s)
cannot be determined. Worse, different configurations of Anycast instances cannot be determined reliable.

A name server can be checked with the following command:

  /etc/init.d/unbound test-name-server ADDRESS

===== Security Considerations =====

A DNS server has a very powerful function in network topology. Please keep in mind that it might log your queries (which is a huge information leak).

Further, not all of the DNS servers below return correct answers in any case. Some of them return failures for harmful or malicious sites. Check the operators website for more information on this topic.

For security reasons, it is recommended to use DNS servers which support DNSSEC (i.e. have a green "validating" in the table above), if possible. Yellow "aware" servers will also work, leaving the task of validating DNS responses up to your IPFire machine. As mentioned above, "red" servers will not be used by IPFire.

For privacy and availability reasons, avoid using just one providers' DNS servers.

<WRAP center round tip 60%>
Оригінальна стаття англійською знаходиться [[https://wiki.ipfire.org/dns/public-servers|тут]]
</WRAP>