- Aug 21, 2020
- 609
300,000 queries is more than enough. Just don't do DNS spoofing tests which can be hundreds and even thousands in a minute.
NextDNS thoughts and experiences?
- Thread starter Jan Willy
- Start date
Please provide comments and solutions that are helpful to the author of this topic.
- Mar 16, 2019
- 3,872
It varies from location to location though. Even ISP to ISP. Here I get exact same ping for Cloudflare, NextDNS, OpenDNS, Adguard DNS, Cleanbrowsing DNS which 66 on average now. Pinging Google's main DNS server shows better at result at 39 but the server it actually connects if I use it is worse, 80+.
Sure that depends on own location. That's why the "World" statistic is nice.
klepto
Level 2
- Jun 14, 2020
- 77
I am moving away from VPNs and towards DoH/DoT. Sharing a network with very unsavory characters can lead to a very bad day. All I wanted from VPNs was to keep my ISP out of my business and making changes to secure my DNS traffic should have been priority #1.
- Aug 27, 2020
- 446
Hi, I use AdGuard DNS, am very happy with it, speed is just as fast as STOFA DNS can deliver(my ISP). 
This thread is about NextDNSHi, I use AdGuard DNS, am very happy with it, speed is just as fast as STOFA DNS can deliver(my ISP).
In my experience NextDNS is more reliable then AdGuard. Also they provide better security and privacy
- Jul 26, 2015
- 263
I am relatively new to NextDNS but a veteran in Networking.
What I like in terms of NextDNS allot is offloading the Adblock features from "PFblockerNG" / "Pihole" to NextDNS. That just gave my network a nice boost. Not that I run a potato Firewall but how PFblockerNG handles massive amounts of packets to look in to. Just imagine a Proxy to Proxy service - So traffic comes from one port and needs to travel thru the Rules and PFblockerNG then it can go to the Uplink servers.
In my case it was Cloudflare Sec. DNS over TLS - 1.1.1.2 and 1.0.0.2 @853 TCP
Had major DNS spikes from 10ms - xxxxxms
So the idea was to offload everything that has to do with DNS filtering to NextDNS -> Here is my Guide for Pfsense firewall boxes. <- MalwareTips Guides Forum
In the Guide I mention a Client that handles DNS over HTTPS very good without clogging Windows 10 Event logs! Offload DNS to your Router or other network device. That will handle Dynamic IP registration and verification to NextDNS services.
Why not use DNS over TLS like stated in the Guide I had DNS Leaks and will research this in the future. To make a second Guide with DNS over TLS config. Here for the MalwareTips Community!!!! ^^
If more information is needed I am happy to help out.
Sincerely
Val.
What I like in terms of NextDNS allot is offloading the Adblock features from "PFblockerNG" / "Pihole" to NextDNS. That just gave my network a nice boost. Not that I run a potato Firewall but how PFblockerNG handles massive amounts of packets to look in to. Just imagine a Proxy to Proxy service - So traffic comes from one port and needs to travel thru the Rules and PFblockerNG then it can go to the Uplink servers.
In my case it was Cloudflare Sec. DNS over TLS - 1.1.1.2 and 1.0.0.2 @853 TCP
Had major DNS spikes from 10ms - xxxxxms
So the idea was to offload everything that has to do with DNS filtering to NextDNS -> Here is my Guide for Pfsense firewall boxes. <- MalwareTips Guides Forum
In the Guide I mention a Client that handles DNS over HTTPS very good without clogging Windows 10 Event logs! Offload DNS to your Router or other network device. That will handle Dynamic IP registration and verification to NextDNS services.
Why not use DNS over TLS like stated in the Guide I had DNS Leaks and will research this in the future. To make a second Guide with DNS over TLS config. Here for the MalwareTips Community!!!! ^^
If more information is needed I am happy to help out.
Sincerely
Val.
PrivacyTools are correct. Encrypting your DNS does nothing to prevent your ISP from seeing which domains you're visiting, as SNI remains unencrypted and leaks the hostname of the server you're connecting to.
- Jul 26, 2015
- 263
Here is a Video that explains DoH and DoT:
->
AND
->
To sum it up DNS is Encrypted with DoH or DoT - What makes you anonymous? Not even VPNs are anonymous coz like DNS Traffic it has to come from somewhere? That is the reason I hate VPN Providers that claim it makes you anonymous that is not right!
Example:
PC ----> Router (VPN Client IP) ========VPN Tunnel====== (VPN IP Client Information) VPN Gateway Provider (Forwarding to Pulic IP of VPN Provider) -------- (Destination Server)
So the one that knows it all is the VPN Provider. Now if the VPN Provider supports DNS Encrypted traffic passing thru. It will look something like this.
Router (With DoH or DoT and VPN Client) =====VPNTunnel===(VPN IP Client Information) VPN Provider (Forwarding to Pulic IP of VPN Provider) ===DoH or DoT Traffic === DNS Provider === Site
Now the VPN Provider can not see DNS Requests since they are encrypted but as all things in the internet still can see from who it came from and were its going to.
My verdict is for Home use DoH or DoT is good enough. For Geo unblocking content VPN is the solution. Since the ISP can not look inside the DoH or DoT traffic. Plus the overhead for VPN is gone = Faster internet speeds...
If more information is needed I am here to help.
Best regards
Val.
NextDNS start experimenting with QUIC and HTTP3:
Last edited by a moderator:
klepto
Level 2
- Jun 14, 2020
- 77
My ISP throws up ads when I hit the wrong domain name and in general logging/profiling my actions starts at the DNS level.
- Mar 29, 2018
- 7,701
NextDNS is working with Edge and Brave Nightly because they both have the Secure DNS setting. It's not working in Brave Release with the secure DNS lookup flag enabled. It still shows my system DNS as Cloudfare. I'm using the Next DNS app but no go. Any ideas?
You can config your router using NextDNS. Even if encrypted DNS isn't supported, you still can use their system with filtering. Encrypted DNS is just a nice to have feature.NextDNS is working with Edge and Brave Nightly because they both have the Secure DNS setting. It's not working in Brave Release with the secure DNS lookup flag enabled. It still shows my system DNS as Cloudfare. I'm using the Next DNS app but no go. Any ideas?
- Mar 29, 2018
- 7,701
I can't customize my DNS since my ISP doesn't allow it.
But, I figured out the problem was OS hardening: disallowed Elevation of Unsigned Executables. Now the NextDNS app works.
Even simple OS hardening is not always problem-free.
That's very bad. I wouldn't even trust my router in that case then.
But yeah you can use "workarounds" like using a program/ app on OS or config at least your browser with their DNS. Edge support encrypted DNS already.
Same issue is for me with NextDNS App. You should use YogaDNS App or Adguard Home with NextDNS.
- Jul 26, 2015
- 263
Hi - Since some updates on Windows 10 ago.... Try to launch the NextDNS App as Admin in Windows. Then the issue should be gone. Or if you use a browser with its own DNS Settings try to point them to NextDNS first.
Sincerely
Val.
Similar threads
