A lot of fediverse instances for some weird reason use Cloudflare for captchas and espionage. I assume it's a sort of "genre-blind" offloading hardware work moment, if not something like being Class Traitors, because one of the big reasons people come to the Fediverse is precisely to escape the grip and decision power of giants like CF.
Quad9 is only a DNS server and I do use that for all of my servers as do many others. It doesn't provide domain registration, domain dns configuration, proxies, tunnels, etc, that Cloudflare does.
I've never been able to chase it down, but Apple devices on my network always seem to have issues accessing some sites when using quad 9 for DNS. No problems with cloudflare, though. 🤷♂️
Thanks! I'll give that a shot. I didn't do much troubleshooting because other devices could access those sites just fine using 9.9.9.9, so I figured it was something weird in Apple's system.
I used to use quad 9 but stopped using it after running into too many issues where it provided completely wrong results. Like not even outdated results just straight up wrong values that never existed, with both public websites as well as customer dns entries that I have managed for over a decade.
That's odd, never had that issue and I've used it a long time. Even for my own domains changes propagate as quickly as any other DNS server I've used. Were your changes propagated to google, cloud flare, and the rest? Anyway, very weird since DNS propagation is pretty automated usually unless something is not propagating to any DNS server.
Everything else has correct results except for them. Some of the entries were years since being changed, then all of a sudden pointed elsewhere. Quick to troubleshoot but quite annoying.
I haven't used them since. Troubleshooting that kind of shit is not what I want to be spending my time on.
Yes, quad9 is a DNS provider, meaning the way to configure quad9 as your DNS provider is the same as configuring cloudflare but instead of 1.1.1.1 it's 9.9.9.9 (hence the name quad9)
edit: if you're using android or a browser (or really anything that uses DNS over https), the URLs are different, but you can find more info at https://quad9.net/
I had several cases where suddenly Websites not work. after a lot of tests. I was only able to solve it because I changed the DNS back to the provider DNS. I never found what it caused.
Then I changed it back. that worked some Weeks, then i had again Problems.
Now I use again and permanent the provider dns.
Cloudfare have many service a dns resolver is one of them. Quad9 only provide a dns resolver. When you visit a website and see Cloudfare thats has nothing to do with their dns resolver that is a complitly different service they provide to protect against ddos attacks.
37 Comments
Sanctus@anarchist.nexus · 33 pts · 6d
I use it for dns
DarkCloud@lemmy.world · 15 pts · 6d
Four 9s? How is anyone going to remember that?
pixeldaemon@sh.itjust.works · 8 pts · 6d
Quad9 for Quadruple Nine
WhoIzDisIz@lemmy.today · 8 pts · 6d
Zoom. (Or whoosh.)
hneerqe@lemmy.world · 1 pts · 5d
it's 1 more after 8! Is there no mercy?
xxxb@feddit.org · 1 pts · 4d
r/unexpectedfactorial and before you tell me: I know that this is not reddit. But 8! is a very large number and you probably didn't mean it like that.
unitedwithme@lemmy.today · 10 pts · 6d
IPv4:
IPv6:
All from memory lol. I set it up a lot for people at home and businesses. That's for DNSSEC, filtered, non ECS.
Edit: you can also use https://dns.quad9.net/dns-query for mobile iirc.
SnotFlickerman@lemmy.blahaj.zone · 26 pts · 6d
...for what, specifically?
Monkey@piefed.social · 13 pts · 6d
I think they mean Cloudflare captcha but I don’t know that Quad9 has something like that
veniasilente@lemmy.dbzer0.com · 20 pts · 6d
A lot of fediverse instances for some weird reason use Cloudflare for captchas and espionage. I assume it's a sort of "genre-blind" offloading hardware work moment, if not something like being Class Traitors, because one of the big reasons people come to the Fediverse is precisely to escape the grip and decision power of giants like CF.
zombiebikini@lemmy.zip · 8 pts · 6d
I guess if you have to defend against DDOS attacks going big is the only way.
moldy_rice@piefed.keyboardvagabond.com · 2 pts · 5d
It's not.
zombiebikini@lemmy.zip · 1 pts · 5d
Care to elaborate?
moldy_rice@piefed.keyboardvagabond.com · 1 pts · 5d
There's loads of DDoS alternatives.
It's a national security threat to give your httpa private keys to a US company. As a result, loads of alternatives exist for real DDoS attacks.
But also, almost any nonprofit social media site can just get away with a self hosted pow solution.
zombiebikini@lemmy.zip · 4 pts · 5d
Ok, seems we have different ideas of what a real ddos attack is. I was thinking level 3 attacks.
melroy@kbin.melroy.org · 2 pts · 5d
No, that is why I created https://angieguardian.org/
zombiebikini@lemmy.zip · 3 pts · 5d
But this only covers layer 7, doesn't it?
melroy@kbin.melroy.org · 3 pts · 5d
That is right. I tried to be transparent what is it NOT: https://angieguardian.org/guide/threat-model#what-guardian-does-not-defend-against
irotsoma@piefed.blahaj.zone · 14 pts · 6d
Quad9 is only a DNS server and I do use that for all of my servers as do many others. It doesn't provide domain registration, domain dns configuration, proxies, tunnels, etc, that Cloudflare does.
yaroto98@lemmy.world · 10 pts · 6d
I use it as my upstream DNS setup on my two piholes.
Brujones@lemmy.world · 5 pts · 6d
I've never been able to chase it down, but Apple devices on my network always seem to have issues accessing some sites when using quad 9 for DNS. No problems with cloudflare, though. 🤷♂️
twkm@programming.dev · 11 pts · 6d
1.1.1.1 does no filtering. 9.9.9.9 does, similar to 1.1.1.2. To skip filtering use 9.9.9.10.
Brujones@lemmy.world · 4 pts · 6d
Thanks! I'll give that a shot. I didn't do much troubleshooting because other devices could access those sites just fine using 9.9.9.9, so I figured it was something weird in Apple's system.
normonator@lemmy.ml · 4 pts · 6d
I used to use quad 9 but stopped using it after running into too many issues where it provided completely wrong results. Like not even outdated results just straight up wrong values that never existed, with both public websites as well as customer dns entries that I have managed for over a decade.
irotsoma@piefed.blahaj.zone · 2 pts · 6d
That's odd, never had that issue and I've used it a long time. Even for my own domains changes propagate as quickly as any other DNS server I've used. Were your changes propagated to google, cloud flare, and the rest? Anyway, very weird since DNS propagation is pretty automated usually unless something is not propagating to any DNS server.
normonator@lemmy.ml · 3 pts · 5d
Everything else has correct results except for them. Some of the entries were years since being changed, then all of a sudden pointed elsewhere. Quick to troubleshoot but quite annoying.
I haven't used them since. Troubleshooting that kind of shit is not what I want to be spending my time on.
MonkderVierte@lemmy.zip · 2 pts · 6d
What, cloudflare is a registrar?
Agent641@lemmy.world · 3 pts · 5d
Registrar, nameserver, hosting provider, reverse proxy, authentication provider, they do lots of things now.
normonator@lemmy.ml · 2 pts · 5d
Yes but I wasn't using CloudFlare at all. The domains were registered with Tucows and only quad9 had incorrect DNS lookups.
warmaster@lemmy.world · 2 pts · 6d
Is Q9 as easy to use?
Admirable_Bagel_0989@lemmy.ml · 3 pts · 6d
Yes, quad9 is a DNS provider, meaning the way to configure quad9 as your DNS provider is the same as configuring cloudflare but instead of 1.1.1.1 it's 9.9.9.9 (hence the name quad9)
edit: if you're using android or a browser (or really anything that uses DNS over https), the URLs are different, but you can find more info at https://quad9.net/
Zoma@sh.itjust.works · 1 pts · 3d
Used to use it buts it doesn't feel a good idea to change your vpn's default dns
sudoer777@lemmy.ml · 1 pts · 5d
IDK but Cloudflare has an ODoH endpoint
MangoPenguin@lemmy.blahaj.zone · 1 pts · 1d
For DNS? It's an alternative for that, but not for the huge amount of other services Cloudflare provides.
ratatouille@feddit.org · 1 pts · 1d
I had several cases where suddenly Websites not work. after a lot of tests. I was only able to solve it because I changed the DNS back to the provider DNS. I never found what it caused. Then I changed it back. that worked some Weeks, then i had again Problems. Now I use again and permanent the provider dns.
Eggman@thelemmy.club · 1 pts · 4d
Cloudfare have many service a dns resolver is one of them. Quad9 only provide a dns resolver. When you visit a website and see Cloudfare thats has nothing to do with their dns resolver that is a complitly different service they provide to protect against ddos attacks.
Undertaker@feddit.org · 0 pts · 6d
I don't think, that many people use Cloudflare. Why not Quad9? There are Vetter options