[AusNOG] 1.1.1.1 DNS resolvers

[Skeeve Stevens]

Never trust an ISPs DNS servers. Too easy to poison. Yes, Google et. al are
also vulnerable, but the attack vector is a lot harder.


...Skeeve

*Skeeve Stevens - Founder & Chief Architect - *eintellego Networks Pty Ltd
skeeve at eintellegonetworks.com ; www.eintellegonetworks.com

Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve

facebook.com/eintellegonetworks ;  <http://twitter.com/networkceoau>
linkedin.com/in/skeeve
Cumulus Linux / Open Networking - Cloud - Consulting - Juniper - Cisco - IPv4
Brokering

On Mon, Apr 2, 2018 at 10:32 AM, Terry Manderson <terry at terrym.net> wrote:

> I saw the blog post and already had some awareness that this was coming,
> but there is one question I have for Australian operators.
>
> How many operators promote services like 1.1.1.1 and 8.8.8.8 to their
> customers instead of operating their own recursive DNS infrastructure?
>
> And if you do, what was the driver and then risk mitigation position taken?
>
> Cheers,
> Terry
> --
> Mobile device, don't expect grammar.
>
> On 2 Apr 2018, at 10:12 am, Andrew Yager <andrew at rwts.com.au> wrote:
>
> Hi All,
>
> In case you missed it, despite Easter and April Fools day, CloudFlare, in
> conjunction APNIC have launched a new public DNS server at 1.1.1.1 and
> 1.0.0.1 (IPv4) and 2606:4700:4700::1111 and 2606:4700:4007::1001 (IPv6).
>
> Details are:
>
> https://1.1.1.1/
> https://blog.cloudflare.com/announcing-1111/
> https://labs.apnic.net/?p=1127
>
> Quick tests have suggested it is quite fast compared with Google's
> resolvers (seeing an average of 23ms on queries as opposed to an average of
> 700ms) and sensible results on CDN queries.
>
> While initially a 5 year research project, it does look quite promising
> from my 20 minute digging around.
>
> Happy easter all :)
>
> Andrew
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20180403/88eca9cb/attachment.html>