Serious Discussion DNS Providers for Home Users – Still Cloudflare/Quad9, or Did NextDNS/Control D Finally Win?

[aidunno]

Hi,

is better to setup dns into the router o per devices?

I don't know which to choose, could you suggest something?
Many years ago I used dnsJumper to control the speed, now I found dnsHop app

 

[lokamoka820]

Hi,

is better to setup dns into the router o per devices?

I don't know which to choose, could you suggest something?
Many years ago I used dnsJumper to control the speed, now I found dnsHop app

Use a well-known public DNS provider for your router, such as Cloudflare, Google, or Quad9. Then, configure a specific DNS for each device based on the user’s needs—for example, AdGuard or NextDNS. What exactly do you want from a DNS provider? Do you prioritize malware blocking, ad blocking, or privacy?

 

[Marko :)]

Use a well-known public DNS provider for your router, such as Cloudflare, Google, or Quad9. Then, configure a specific DNS for each device based on the user’s needs—for example, AdGuard or NextDNS. What exactly do you want from a DNS provider? Do you prioritize malware blocking, ad blocking, or privacy?

this!

Cloudflare with malware protection on router and then Control D Free per device. My brother prefers seeing ads. Rest of us at home do not.

 

[AFEH]

Cloudflare with malware protection

Has few FPs; also Quad 9; only ControlD hagezi lists.

 

[Marko :)]

Has few FPs; also Quad 9; only ControlD hagezi lists.

Been using it for a year on a router, and brother didn't complain.

 

[AFEH]

Been using it for a year on a router, and brother didn't complain.

Not visiting media piracy websites

 

[SeriousHoax]

Cloudflare Zero Trust DoH in Technitium DNS Server on the router with many policies in Zero Trust for blocking malicious, phishing, NSFW, gambling, remote access, crypto, dns rebind protection etc. many other categories are blocked, along with Hagezi Pro++, Hagezi Dynamic DNS and Hagezi DoH/VPN/Tor/Proxy Bypass filters in Zero Trust updated every few hours via GitHub Actions.
Also added Hagezi TIF Medium in router's Techinitium, and all popular DNS servers' IPs and Cloudflare WARP IPs are blocked in the router's Firewall.
Locked Down

 

[lokamoka820]

Cloudflare Zero Trust DoH in Technitium DNS Server on the router with many policies in Zero Trust for blocking malicious, phishing, NSFW, gambling, remote access, crypto, dns rebind protection etc. many other categories are blocked, along with Hagezi Pro++, Hagezi Dynamic DNS and Hagezi DoH/VPN/Tor/Proxy Bypass filters in Zero Trust updated every few hours via GitHub Actions.
Also added Hagezi TIF Medium in router's Techinitium, and all popular DNS servers' IPs and Cloudflare WARP IPs are blocked in the router's Firewall.
Locked Down

Are you working for a three-letter agency?

 

[stonjean633]

Cloudflare is the fastest in my region. But offers no configurations.

I use ControlD instead. I can edit it to my liking.

 

[SeriousHoax]

Are you working for a three-letter agency?

I'm not authorized to disclose that information

Most of them are necessary, since some apps use their own internal DNS to bypass your DNS blocking. So just having the DNS on the router or a device is often not enough.
Blocking other DNS providers and VPNs is an option in NextDNS also (Block Bypass Methods).
Some Android apps try to bypass DNS using "https://cloudflare-dns.com/dns-query" and "https://dns.google/dns-query" (Including Avast on PC) internally, but when these are blocked, they try direct IPs like "https://1.1.1.1/dns-query" and "https://8.8.8.8/dns-query". So, I had to block their IPs in the firewall to prevent this.
Also, Port 53 is redirected to the router's DNS and port 853 is blocked to prevent Android's Private DNS (DoT) from working.
I blocked Cloudflare WARP IPs for the guest_wifi (anyone but me) because the free WARP VPN simply cannot be blocked by blocking its related domains. It directly connects to the IPs when domains are blocked.

So, these are just methods to make bypassing difficult. Just having an adblocking DNS is not always enough.

 

[ErzCrz]

As router still locked to ISP (Sky), I've been using Quad9 which seems to be an effective set and forget system wide without any noticeable affect on speed. I have also looked at ControlD as a possibility.