[AusNOG] 1.1.1.1 DNS resolvers

[Bill Walker]

Hey Gavin et al,

If anyone has a legitimate use for some credits, I'm happy to transfer 
some as I no longer use them, I have over 35 million :-)

Cheers,

Bill


On 2018-04-02 13:55, Gavin Tweedie wrote:
> I burnt a few of my RIPE Atlas credits last night and did a traceroute
> from every probe in AU & NZ (221 of them) to the following "popular"
> open resolvers.
> 
> (if you want to host one so you can earn some credits of your own and
> there's not one in your ASN yet then email me directly - or learn more
> at https://atlas.ripe.net)
> 
> Results:
> 
> 	* 1.1.1.1 (Cloudflare) @
> https://atlas.ripe.net/measurements/11899869/#!map
> 	* 8.8.8.8 (Google) @
> https://atlas.ripe.net/measurements/11899870/#!map
> 	* 9.9.9.9 (PCH) @ https://atlas.ripe.net/measurements/11899871/#!map
> 	* 208.67.222.222 (OpenDNS) @
> https://atlas.ripe.net/measurements/11899872/#!map
> 
> Interestingly ignoring all other metrics (and if centralising
> recursive DNS is a good idea) and just looking at number of probes
> with RTT over 100msec, a random number I picked - who wants a DNS
> server 100ms away?..
> 
> 	* 1.1.1.1 = None above 100ms (4** didn't get to the last hop -
> MAILSCANNER WARNING: NUMERICAL LINKS ARE OFTEN MALICIOUS: 1.0.0.0/8
> [9] issues perhaps?)
> 	* 8.8.8.8 = 5 above 100ms
> 	* 9.9.9.9 = 39 above 100ms (of which 1 was above 200ms!)
> 	* 208.67.222.222 = 6 above 100ms (of which 4 were above 200ms!)
> 
> ** One probe didn't get to the last hop on any of the traceroutes, so
> I excluded it from the above numbers.
> 
> If you do use one of these then choose carefully as you could end up
> with very high DNS RTTs  from some networks.
> 
> If anyone wants me to run the same against another public resolver let
> me know, and I'll post the results again. Maybe I'll run this again in
> a month and see who's improved and who hasn't if there is interest.
> 
> Gav
> 
> On 2 April 2018 at 09:02, James Deck <jdeck at 1300webpro.com.au> wrote:
> 
>> We've been using 9.9.9.9, which does not resolve some known "bad"
>> traffic (eg. phishing).
>> 
>> My understanding is that the have been unable to peer to the major
>> ISPs here, so their traffic routes aren't always direct, but I like
>> the security aspect of it.
>> 
>> https://www.quad9.net/
>> 
>> ​Kind Regards, ​
>> ​
>> 
>> James Deck
>> 
>> Managing Director
>> 
>> 1300 Web Pro
>> 
>> p
>> 
>> 1300 932 776 [4]
>> 
>> e
>> 
>> JDECK at 1300WEBPRO.COM.AU
>> 
>> w
>> 
>> 1300WEBPRO.COM.AU [5]
>> 
>> a
>> 
>> Unit 22, 489 South Street
>> 
>> Toowoomba
>> 
>> 4350
>> 
>> Unit 14, 17 Karp Court
>> 
>> Bundall
>> 
>> 4217
>> 
>> NEED HELP? CLICK HERE TO LOG A JOB ONLINE... [6]
>> 
>> [7]
>> 
>> [8]
>> [8]
>> 
>> On 2 Apr 2018, at 10:12 am, Andrew Yager <andrew at rwts.com.au> wrote:
>> 
>>> Hi All,
>>> 
>>> In case you missed it, despite Easter and April Fools day,
>>> CloudFlare, in conjunction APNIC have launched a new public DNS
>>> server at 1.1.1.1 and 1.0.0.1 (IPv4) and 2606:4700:4700::1111 and
>>> 2606:4700:4007::1001 (IPv6).
>>> 
>>> Details are:
>>> 
>>> MAILSCANNER WARNING: NUMERICAL LINKS ARE OFTEN MALICIOUS:
>>> https://1.1.1.1/ [1]
>>> https://blog.cloudflare.com/announcing-1111/ [2]
>>> 
>>> https://labs.apnic.net/?p=1127
>>> 
>>> Quick tests have suggested it is quite fast compared with Google's
>>> resolvers (seeing an average of 23ms on queries as opposed to an
>>> average of 700ms) and sensible results on CDN queries.
>>> 
>>> While initially a 5 year research project, it does look quite
>>> promising from my 20 minute digging around.
>>> 
>>> Happy easter all :)
>>> 
>>> Andrew
>> 
>>> _______________________________________________
>>> AusNOG mailing list
>>> AusNOG at lists.ausnog.net
>>> http://lists.ausnog.net/mailman/listinfo/ausnog [3]
>> 
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net
>> http://lists.ausnog.net/mailman/listinfo/ausnog [3]
> 
> --
> 
> Global Interconnection Director
> Megaport [10]
> 
> +61 498 498 458
> 
> 
> Links:
> ------
> [1] https://1.1.1.1/
> [2] https://blog.cloudflare.com/announcing-1111/
> [3] http://lists.ausnog.net/mailman/listinfo/ausnog
> [4] tel:1300932776
> [5] https://www.1300webpro.com.au/
> [6] https://www.1300webpro.com.au/support/
> [7] https://www.facebook.com/1300WebPro
> [8] https://www.1300webpro.com.au/our-webchat/
> [9] http://1.0.0.0/8
> [10] https://www.megaport.com
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog