Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't use Cloudflare by default #1116

Closed
ameshkov opened this issue Oct 24, 2019 · 6 comments
Closed

Don't use Cloudflare by default #1116

ameshkov opened this issue Oct 24, 2019 · 6 comments

Comments

@ameshkov
Copy link
Member

Cloudflare DOH might be problematic because of the EDNS padding extension they add.

See #1110 (comment) for instance. Also, I suppose that #1109 was also caused by the very same thing.

Let's change it to Quad9 instead: https://dns.quad9.net/dns-query

Also, don't forget to change the text and examples: https://uploads.adguard.com/up04_1kfna_AdGuard_Home.png

Q&A

  • Q: Why not Cloudflare DoT?

  • A: DoH is less likely to be blocked on the ISP level.

  • Q: Why not Google DNS?

  • A: While I have nothing against it, people tend to hate everything made by Google

  • Q: Why not AdGuard DNS?

  • A: AdGuard DNS blocks ad trackers by itself. AdGuard Home users should decide what to block by themselves, they don't need a resolver to do it for them. Also, we don't have as many servers as Quad/Google/Cloudflare do so routing might be worse.

  • Q: Why not any other resolver?

  • A: Other public resolvers are considerably smaller than Cloudflare.

@ameshkov
Copy link
Member Author

Well, we can consider using AdGuard DNS by default in one ane only case -- if we add an endpoint that does no ad & tracking filtering. But it kinda defeats the purpose, the idea of AdGuard DNS is to block this stuff:)

@ibksturm
Copy link

spasiba siem ot agh 0.99.1 :)

@ghost
Copy link

ghost commented Dec 30, 2019

Just wanted to add that Quad is a great choice in my opinion. Non-profits (don’t really care if one of the founders is a government organization) are great as defaults when we are talking about critical web services such as DNS 🚀

@hoshsadiq
Copy link

Very happy with the new choice

AdGuard Home users should decide what to block by themselves, they don't need a resolver to do it for them

Just an FYI, just for completeness, Quad9 also blocks entries, specifically it blocks malicious domains.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

6 participants
@hoshsadiq @IldarKamalov @ameshkov @ibksturm @szolin and others