Skip to content

DNS Hop v2.4.5

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Aug 22:04
· 1 commit to main since this release
v2.4.5
6126336

Resolvers

Twenty-one further public DoH resolvers are now included in the benchmark. Each one was queried over HTTP/2 before being added and had to return a valid NOERROR answer to make the list, so nothing here is listed on the strength of a directory entry alone.

Large operators

  • AliDNS (Alibaba) - dns.alidns.com
  • DNSPod (Tencent) - dns.pub
  • NextDNS - dns.nextdns.io
  • Cisco Umbrella - doh.umbrella.com
  • Cloudflare (Mozilla endpoint) - mozilla.cloudflare-dns.com
  • Google's alternate hostname - 8888.google, probed separately because it can stay reachable where dns.google is filtered

Family / parental filtering

  • OpenDNS FamilyShield - doh.familyshield.opendns.com
  • AdGuard Family - family.adguard-dns.com
  • AdGuard Unfiltered - unfiltered.adguard-dns.com

Registry-, ISP- and hoster-operated

  • NIC.LV, run by the .lv registry - doh.nic.lv
  • Charter Spectrum - doh-01.spectrum.com, doh-02.spectrum.com
  • SafeServe, run by Namecheap - safeservedns.com

Regional and filtering projects

  • VIA Technologies (Taiwan), ad blocking on a Cloudflare upstream - doh.viatech.com.tw
  • HaGeZi DNS - root.hagezi.org
  • Blokada - dns.blokada.org
  • dnslow.me - dnslow.me
  • AdFilter Perth and Sydney - per.adfilter.net, syd.adfilter.net
  • digitalsize.net and flatuslifir.is, both non-filtering and non-logging

Thanks to the tester who suggested VIA and pointed at the curl DoH list.

A note on one suggestion we did not take

The curl DoH list includes nicsezcheckfbi.gov - the FBI's NICS E-Check service - as a public resolver, and it was suggested for the family-filtering category. It does answer DoH queries, and the host is genuinely the FBI's (the TLS certificate is issued to the Federal Bureau of Investigation), but the responses come back through a BlueCoat-Security-Appliance sitting in front of the background-check website rather than from any DNS service the FBI publishes.

That is an appliance answering requests it was never meant to serve, not a public resolver, so it is not included: it could stop or change at any moment, and sending your DNS traffic through a federal law enforcement appliance is not a sensible default for a privacy tool. If you want filtering for a family machine, use OpenDNS FamilyShield, AdGuard Family, CleanBrowsing or DNS4EU Child - all of which are in the list and are built for exactly that.

Assets

  • Windows installer: DNS-Hop-Setup-v2.4.5.exe
  • Windows portable: DNS-Hop-Portable-v2.4.5.zip
  • Linux: DNS-Hop-AppImage-v2.4.5-x86_64.AppImage (with .sha256)
Assets 6
Loading