The following are services that have been announced by large organisations - they support DNS Privacy on anycast networks.
Details are provided in the Stubby config file for users who want to enable them.
|Hosted by||IP addresses||TLS Ports||Hostname for TLS|
|Base 64 encoded form of SPKI pin(s) for TLS |
|853||dns.quad9.net||Quad9 do NOT publish or recommend use of SPKI pins with their servers.|
See https://quad9.net and their FAQ for details of privacy, logging and filtering policies on the main and alternative addresses(1).
UDP and TCP service are also available on these addresses.
126.96.36.199 or 188.8.131.52
|853||cloudflare-dns.com||Cloudflare do NOT publish or recommend use of SPKI pins with their servers.|
https://www.cloudflare.com/privacypolicy/ (section of interest Public DNS Resolver Users )
UDP and TCP service are also available on these addresses. DNS-over-HTTPS is also available!
NOTE: To use this service by name only (i.e resolve the IP from the name) use 1dot1dot1dot1.cloudflare-dns.com.
184.108.40.206 or 220.127.116.11
|CleanBrowsing||Various, see the CleanBrowsing website||853||Various, see the CleanBrowsing website||Not published|
This service provides different end points with different filters (security, family, adult) so visit the website to select the end point with the filter you prefer. NOTE: also does DoH.
|Adguard||Various, see https://adguard.com/en/blog/adguard-dns-announcement/||853||Various, see https://adguard.com/en/blog/adguard-dns-announcement/||Not published|
This service provides different end points with different filters (default, family) so visit the website to select the end point with the filter you prefer.
NOTE: This is currently a Public Beta trial.
For a more up to date list of available of DoH severs you may want to look at https://github.com/curl/curl/wiki/DNS-over-HTTPS#publicly-available-servers
Details of a few anycast service and privacy policies:
AdGuard launched the first DoQ public resolver in 2020: https://adguard.com/en/blog/dns-over-quic.html