Question NextDNS setups

[Brahman]

A subtle update regarding the age verification, not sure what it is supposed to do though.

View attachment 290222

OOps...Somebody in Nextdns Dev team was really pissed..

 

[Parkinsond]

NextDNS have their own threat intelligence option but it doesn't have Hagezi Threat Intelligence filter (TIF). So Hagezi himself said that anyone who cannot use his TIF filter should use OISD along with their preferred Hagezi filter as OISD apparently can block a few more malicious/phishing sites.

Based on your explanation, I have moved from NextDNS (not offering Hagezi TIF) to Adguard (offers Hagezi TIF).

 

[SeriousHoax]

Based on your explanation, I have moved from NextDNS (not offering Hagezi TIF) to Adguard (offers Hagezi TIF).

But then again, NextDNS also has some nice exclusive features that you won't find in AdGuard.
I am disappointed with NextDNS's latency. It's very unstable for me, especially at night times. It connects me to a 120 ms server quite often, even though there are other servers with lower latency (50 ms). Forcing the low latency server doesn't always work anymore for me.
AdGuard always has the same latency for me, but DoQ sometimes stops working. DoH & DoT always work well.
I have NextDNS DoT on the router for my family as the 120 ms latency doesn't matter to them. They are mostly on facebook and youtube.
I use AdGuard DNS on my phone (50 ms).
On the PC, I use Quad9 + Cloudflare Security (5-12 ms) running on the app Technitium DNS Server.

 

[Parkinsond]

But then again, NextDNS also has some nice exclusive features that you won't find in AdGuard.
I am disappointed with NextDNS's latency. It's very unstable for me, especially at night times. It connects me to a 120 ms server quite often, even though there are other servers with lower latency (50 ms). Forcing the low latency server doesn't always work anymore for me.
AdGuard always has the same latency for me, but DoQ sometimes stops working. DoH & DoT always work well.
I have NextDNS DoT on the router for my family as the 120 ms latency doesn't matter to them. They are mostly on facebook and youtube.
I use AdGuard DNS on my phone (50 ms).
On the PC, I use Quad9 + Cloudflare Security (5-12 ms) running on the app Technitium DNS Server.

I will give adguard a try (has the same free 300K) and find out if it is more responsive during the night; I have the same latency occasionally.

 

[Brahman]

But then again, NextDNS also has some nice exclusive features that you won't find in AdGuard.
I am disappointed with NextDNS's latency. It's very unstable for me, especially at night times. It connects me to a 120 ms server quite often, even though there are other servers with lower latency (50 ms). Forcing the low latency server doesn't always work anymore for me.
AdGuard always has the same latency for me, but DoQ sometimes stops working. DoH & DoT always work well.
I have NextDNS DoT on the router for my family as the 120 ms latency doesn't matter to them. They are mostly on facebook and youtube.
I use AdGuard DNS on my phone (50 ms).
On the PC, I use Quad9 + Cloudflare Security (5-12 ms) running on the app Technitium DNS Server.

I had the same issue with nextdns, most of the times it automatically latched on to some distant server and caused latency. It was more prevalent with doh and less prevalent on dot. But after using yogadns app on my pc to configure nextdns, it always connected to the nearest server and never had i noticed it connected to a distant server.

 

[KnownStormChaser]

For me, NextDNS works better than other providers. For several months this year, I was using Control D because I wanted to support more Canadian businesses. But I was having usability issues. I experienced fairly frequent but short-lived downtime, and overall, it wasn't the fastest resolver. I switched back to NextDNS, and it's much more stable, faster in my experience.

I also have less frequent false positives because NextDNS has an option to allow affiliate and tracking domains. Control D does not have that right now. NextDNS also has automatic bypass age verification, which I don't need that where I live currently, but nice to have just in case.

I have only used the basic free AdGuard servers, not the configurable one because they have less features and filters to play with.

 

[Parkinsond]

For me, NextDNS works better than other providers. For several months this year, I was using Control D because I wanted to support more Canadian businesses. But I was having usability issues. I experienced fairly frequent but short-lived downtime, and overall, it wasn't the fastest resolver. I switched back to NextDNS, and it's much more stable, faster in my experience.

I also have less frequent false positives because NextDNS has an option to allow affiliate and tracking domains. Control D does not have that right now. NextDNS also has automatic bypass age verification, which I don't need that where I live currently, but nice to have just in case.

I have only used the basic free AdGuard servers, not the configurable one because they have less features and filters to play with.

The major shortcoming of NextDNS is lack of Hagezi TIF list.

 

[KnownStormChaser]

The major shortcoming of NextDNS is lack of Hagezi TIF list.

According to NextDNS they use most of the same source feeds. If you do want Hagezi TIF, that list is included with Multi Ultimate.

Hagezi Threat Intelligence Feeds only

i wonder can nextdns include TiF only, i don't want breakpage while use Hagezi ultimate

help.nextdns.io

 

[Parkinsond]

According to NextDNS they use most of the same source feeds. If you do want Hagezi TIF, that list is included with Multi Ultimate.

Hagezi Threat Intelligence Feeds only

i wonder can nextdns include TiF only, i don't want breakpage while use Hagezi ultimate

help.nextdns.io

Partially.

 

[KnownStormChaser]

Partially.

View attachment 291915

Oh right, well if you use both NextDNS's and Hagezi's filters I'm sure that will still block most threats.

 

[Parkinsond]

Oh right, well if you use both NextDNS's and Hagezi's filters I'm sure that will still block most threats.

I am trying Adguard currently with OISD big plus Hagezi TIF.

 

[SeriousHoax]

I had the same issue with nextdns, most of the times it automatically latched on to some distant server and caused latency. It was more prevalent with doh and less prevalent on dot. But after using yogadns app on my pc to configure nextdns, it always connected to the nearest server and never had i noticed it connected to a distant server.

Interesting. From what I know, NextDNS DoT usually give priority to ultra-low-latency servers first before checking anycast. YogaDNS app has an ultra-low-latency option for NextDNS. Maybe YogaDNS is making it always choose that servers for you, so your experience improved. For me, anycast1 is the fastest, not ultra-low. If I force NextDNS to use anycast or anycast1 sometimes randomly it connects to anycast2 which typically is more than 2x higher.
Their EDNS feature never worked for me. It works for many but not for me. AdGuard's EDNS feature works even with their free public DNS.
So performance can vary location to location. Out of NextDNS, AdGuard and ControlD, NextDNS has the best reputation and also the most amount of DNS servers around the world. Indian users are requesting for Indian servers for AdGuard for many years but nothing yet. ControlD has only one which is not enough, while NextDNS has quite a few.

 

[KnownStormChaser]

I am trying Adguard currently with OISD big plus Hagezi TIF.

Let me know if it works well.

Also, I remember this from earlier this year, dns0.eu which is owned by NextDNS and thus use similar filters was able to block most threats: Public DNS malware filters to be tested in 2025

 

[SeriousHoax]

I am trying Adguard currently with OISD big plus Hagezi TIF.

Add another Hagezi filter. Pro or Pro++.

 

[Parkinsond]

Indian users are requesting for Indian servers for AdGuard for many years but nothing yet.

Here is the same; the nearest is in Istanbul; however, I cannot feel AG slower compared to NextDNS.

 

[Parkinsond]

Let me know if it works well.

Also, I remember this from earlier this year, dns0.eu which is owned by NextDNS and thus use similar filters was able to block most threats: Public DNS malware filters to be tested in 2025

DNS0 is NextDNS minus customizability; I do not know which filters they use.

 

[Parkinsond]

Add another Hagezi filter. Pro or Pro++.

OISD is updated more frequently compared to Hagezi.

 

[KnownStormChaser]

I do not know which filters they use.

I assume the same NextDNS's threat intelligence feeds, which include data from these partners:

 

[Parkinsond]

I assume the same NextDNS's threat intelligence feeds, which include data from these partners:

View attachment 291916

May be that is why NextDNS refuses to add Hagezi TIF to blocklists.

 

[SeriousHoax]

OISD is updated more frequently compared to Hagezi.

Yes but OISD is overall weaker than Hagezi filters. OISD cares a bit too much about not blocking things that most users would want to be blocked. Let's say that it's very noob friendly, A bit too much for my liking. Hagezi has multiple filters, so his filters are for every group of people you can think of. From noobs to privacy paranoids. He is also quicker to fix false positives. I use both of Hagezi and OISD.