New DNS over HTTPS service: Cloudflare

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › New DNS over HTTPS service: Cloudflare

1 | 2

amanzi

Amanzi
1292 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#1987771 3-Apr-2018 17:04

I've been running some DNS tests every minute today to look at performance. Unsurprisingly the Vodafone DNS servers are fastest for me on a FibreX (cable) connection. I used the DNS servers listed here for the test. Here are the results from the test which resolves 10 domain names from each provider every minute over 8 hours:

DNS Provider - Address - Average (ms)

VFPrimary2 - 203.109.191.1 - 11
VFSecondary2 - 203.118.191.1 - 14
VFPrimary1 - 203.109.129.67 - 24
VFSecondary1 - 203.109.129.68 - 28
cloudflare - 1.1.1.1 - 45
cleanbrowsing - 185.228.168.168 - 55
adguard - 176.103.130.132 - 56
quad9 - 9.9.9.9 - 65
opendns - 208.67.222.123 - 78
google - 8.8.8.8 - 129

(edited for better layout...)

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#1987774 3-Apr-2018 17:11

amanzi:

I've been running some DNS tests every minute today to look at performance. Unsurprisingly the Vodafone DNS servers are fastest for me on a FibreX (cable) connection. I used the DNS servers listed here for the test. Here are the results from the test which resolves 10 domain names from each provider every minute over 8 hours:

surprising actually. Vodafone must have improved their dns nodes.

Historically in testing, vodafones actual response times were so poor on adsl...

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1987824 3-Apr-2018 18:58

hio77:

You won't hit those content servers.

Slightly untrue - you won't hit those content servers on Spark and Vodafone due to their peering arrangements. On other ISP's that peer via the APE you'll hit NZ content servers for everything including Akamai.

amanzi:

DNS Provider - Address - Average (ms) <snip>

Again - on Vodafone you will be routed via Australia for almost everything whereas on 2degrees you get the following. Need I explain once more why all ISP's should peer and stop being antisocial?

First ms count is ping | 2nd is average time to resolve a domain name (tested against a random list of 20 domain names):

As we can see Cloudflare DNS actually wins despite having a bit of a higher ping compared to the 2degrees DNS servers.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#1987842 3-Apr-2018 19:45

michaelmurfy:

hio77:

You won't hit those content servers.

Slightly untrue - you won't hit those content servers on Spark and Vodafone due to their peering arrangements. On other ISP's that peer via the APE you'll hit NZ content servers for everything including Akamai.

only meant in terms of direct resolution. if some other system points it sure.

I'm not aware of many rsps that publicly offer their content servers at APE. (happy to be proven wrong, but as a provider not sure why you would want to risk an untangle hit on content more than your own customers)

YMMV, my spark connection will happily hit Vodafone content servers (when served that IP)

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1987846 3-Apr-2018 19:54

hio77:

I'm not aware of many rsps that publicly offer their content servers at APE. (happy to be proven wrong, but as a provider not sure why you would want to risk an untangle hit on content more than your own customers)

I often get a mix of Callplus + Orcon for Akamai + Steam where the route goes via the APE (if the content isn't coming from "Snap"). Netflix I can't test as I have some hacks in place and YouTube comes from 2degrees still. Essentially, despite me using Cloudflare DNS I am still getting content from within NZ.

When I tested this on a BigPipe connection most stuff (excluding YouTube, Steam and Netflix) was coming from Sydney.

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#1987853 3-Apr-2018 20:15

michaelmurfy:

hio77:

I'm not aware of many rsps that publicly offer their content servers at APE. (happy to be proven wrong, but as a provider not sure why you would want to risk an untangle hit on content more than your own customers)

I often get a mix of Callplus + Orcon for Akamai + Steam where the route goes via the APE (if the content isn't coming from "Snap"). Netflix I can't test as I have some hacks in place and YouTube comes from 2degrees still. Essentially, despite me using Cloudflare DNS I am still getting content from within NZ.

When I tested this on a BigPipe connection most stuff (excluding YouTube, Steam and Netflix) was coming from Sydney.

Steam is a bit of a unique one because of how it requests servers...

http://valve2004.steamcontent.com/serverlist/22/20/

Here is an example request for steampipe, essentially the region you give it tells it where to pick from then it's 20 servers to request.

The gotcha here is akamai. that's where much of the RSP server hits end up.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

1 | 2