Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




BDFL - Memuneh
67879 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

#232130 31-Mar-2018 11:21
Send private message

Saw a headline pointing to a Google cache for the (now empty) page at https://1.1.1.1/ 

 

The Google cache has now been removed. The headline was about this being a new DNS service by Cloudflare.





 

 

These links are referral codes

 

Geekzone broadband switch | Eletricity comparison and switch | Hatch investment (NZ$ 10 bonus if NZ$100 deposited within 30 days) | Sharesies | Mighty Ape | Backblaze | Amazon | My technology disclosure 


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2


BDFL - Memuneh
67879 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  #1986304 31-Mar-2018 11:30
Send private message

Wired has published an article about this service now: Cloudflare's New Encryption Service Adds Privacy Protection for Web Browsing.





 

 

These links are referral codes

 

Geekzone broadband switch | Eletricity comparison and switch | Hatch investment (NZ$ 10 bonus if NZ$100 deposited within 30 days) | Sharesies | Mighty Ape | Backblaze | Amazon | My technology disclosure 




BDFL - Memuneh
67879 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  #1986306 31-Mar-2018 11:32
Send private message




 

 

These links are referral codes

 

Geekzone broadband switch | Eletricity comparison and switch | Hatch investment (NZ$ 10 bonus if NZ$100 deposited within 30 days) | Sharesies | Mighty Ape | Backblaze | Amazon | My technology disclosure 


 
 
 
 


436 posts

Ultimate Geek
Inactive user


  #1986588 31-Mar-2018 22:05
Send private message

Are people really that worried about their DNS traffic?




BDFL - Memuneh
67879 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  #1986589 31-Mar-2018 22:06
Send private message

Some people maybe, as it can be used to identify some very private things.





 

 

These links are referral codes

 

Geekzone broadband switch | Eletricity comparison and switch | Hatch investment (NZ$ 10 bonus if NZ$100 deposited within 30 days) | Sharesies | Mighty Ape | Backblaze | Amazon | My technology disclosure 


436 posts

Ultimate Geek
Inactive user


  #1986600 31-Mar-2018 22:35
Send private message

freitasm:

 

Some people maybe, as it can be used to identify some very private things.

 

 

Just DNS queries, so sites you may be visiting. Which for the most part can be found fairly easily if someone is across your upstream traffic anyway.


/dev/null
9458 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  #1986626 1-Apr-2018 00:09
Send private message

Irony on the date:

 

We’ve built 1.1.1.1 to be the Internet’s fastest DNS directory. Don’t take our word for it. The independent DNS monitor DNSPerf ranks 1.1.1.1 the fastest DNS service in the world. As of April 1, 2018, we’re 53% faster than second place, which means we're at least 53% faster than whatever you're using today.

 

Anyway - I have tested this claim - response times are actually 40% faster (average) than using 2degrees DNS servers for me. This however won't be the same with Spark / BigPipe and potentially Vodafone* due to the fact they don't peer with Cloudflare in Auckland and instead go over to Sydney.

 

I've switched my DNS servers over to Cloudflare for now - I know it isn't launched but it is indeed resolving DNS. I do like their claims, I do trust them more with their claims than other providers (I know somebody who works for Cloudflare) and personally was using quad9 before due to their no-logging policy.

 

In the past, I used to use dnscrypt with success. For anyone interested I am currently using this on Linux combined with my local DNS server with Cloudflare's DNS over HTTPS service.

 

Even though the date is off this actually currently works (and very well with ISP's that peer) - there is a cached page Here.

 

*Not actually 100% sure if Vodafone peer via APE to Cloudflare yet.





436 posts

Ultimate Geek
Inactive user


  #1986665 1-Apr-2018 08:26
Send private message

I would've expected it to be slower given the HTTPS protocol is going to be far less efficient than UDP.

 

See here: https://www.dnsv6lab.net/2016/03/05/A-performance-test-of-DNS-over-different-transport-protocol/

 

Does cloudfare keep an HTTPS tunnel open or something?

 

 

 

 


 
 
 
 




BDFL - Memuneh
67879 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  #1987025 2-Apr-2018 08:59
Send private message

And 1.1.1.1 is live now - Cloudflare blog here.

 

vulcannz:

 

I would've expected it to be slower given the HTTPS protocol is going to be far less efficient than UDP.

 

See here: https://www.dnsv6lab.net/2016/03/05/A-performance-test-of-DNS-over-different-transport-protocol/

 

Does cloudfare keep an HTTPS tunnel open or something?

 

 

By default your system will use the old DNS lookup - unless you have a HTTP client. Developers (OS, browsers) can add this as a feature. Documentation here.





 

 

These links are referral codes

 

Geekzone broadband switch | Eletricity comparison and switch | Hatch investment (NZ$ 10 bonus if NZ$100 deposited within 30 days) | Sharesies | Mighty Ape | Backblaze | Amazon | My technology disclosure 


436 posts

Ultimate Geek
Inactive user


  #1987103 2-Apr-2018 10:30
Send private message

freitasm:

 

And 1.1.1.1 is live now - Cloudflare blog here.

 

vulcannz:

 

I would've expected it to be slower given the HTTPS protocol is going to be far less efficient than UDP.

 

See here: https://www.dnsv6lab.net/2016/03/05/A-performance-test-of-DNS-over-different-transport-protocol/

 

Does cloudfare keep an HTTPS tunnel open or something?

 

 

By default your system will use the old DNS lookup - unless you have a HTTP client. Developers (OS, browsers) can add this as a feature. Documentation here.

 

 

I understand that, but the UDP based process of each DNS lookup is simply going to be faster than establishing an HTTPS connection (UDP vs TCP, no secure handshake/security negotiation) . So I would expect the only way for it to be faster is if it is opening a persistent HTTPS session to the HTTPS/DNS server.


/dev/null
9458 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  #1987459 3-Apr-2018 10:07
Send private message

An interesting read: https://medium.com/@nykolas.z/dns-resolvers-performance-compared-cloudflare-x-google-x-quad9-x-opendns-149e803734e5

 

Cloudflare performs very well compared to the other players. Just note, if you're on Spark, Skinny, BigPipe or Vodafone it is best to use your providers DNS due to their anti-peering policies.





'That VDSL Cat'
12463 posts

Uber Geek

Trusted
Spark
Subscriber

  #1987462 3-Apr-2018 10:16
Send private message

over HTTPS compared to TLS? seems like alot of overhead...

 

 

 

Anyone done a head to head compassion?





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

 


1180 posts

Uber Geek

Lifetime subscriber

  #1987469 3-Apr-2018 10:27
Send private message

How does this work in terms of being served off your ISP's local CDN/whatever e.g. Netflix etc if you moved away from using ISP DNS?


'That VDSL Cat'
12463 posts

Uber Geek

Trusted
Spark
Subscriber

  #1987472 3-Apr-2018 10:27
Send private message

nas:

 

How does this work in terms of being served off your ISP's local CDN/whatever e.g. Netflix etc if you moved away from using ISP DNS?

 

 

You won't hit those content servers.





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

 


1180 posts

Uber Geek

Lifetime subscriber

  #1987512 3-Apr-2018 11:05
Send private message

Whats the benefit in using it then, other than privacy?


16226 posts

Uber Geek

Trusted
Subscriber

  #1987515 3-Apr-2018 11:08
Send private message

nas:

 

Whats the benefit in using it then, other than privacy?

 

 

Well, privacy that you've excluded is a significant advantage for many, but performance and reliability are also advantages.


 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic




News »

Freeview On Demand app launches on Sony Android TVs
Posted 6-Aug-2020 13:35


UFB hits more than one million connections
Posted 6-Aug-2020 09:42


D-Link A/NZ extends COVR Wi-Fi EasyMesh System series with new three-pack
Posted 4-Aug-2020 15:01


New Zealand software Rfider tracks coffee from Colombia all the way to New Zealand businesses
Posted 3-Aug-2020 10:35


Logitech G launches Pro X Wireless gaming headset
Posted 3-Aug-2020 10:21


Sony Alpha 7S III provides supreme imaging performance
Posted 3-Aug-2020 10:11


Sony introduces first CFexpress Type A memory card
Posted 3-Aug-2020 10:05


Marsello acquires Goody consolidating online and in-store marketing position
Posted 30-Jul-2020 16:26


Fonterra first major customer for Microsoft's New Zealand datacentre
Posted 30-Jul-2020 08:07


Everything we learnt at the IBM Cloud Forum 2020
Posted 29-Jul-2020 14:45


Dropbox launches native HelloSign workflow and data residency in Australia
Posted 29-Jul-2020 12:48


Spark launches 5G in Palmerston North
Posted 29-Jul-2020 09:50


Lenovo brings speed and smarter features to new 5G mobile gaming phone
Posted 28-Jul-2020 22:00


Withings raises $60 million to enable bridge between patients and healthcare
Posted 28-Jul-2020 21:51


QNAP integrates Catalyst Cloud Object Storage into Hybrid Backup solution
Posted 28-Jul-2020 21:40



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.