Why is no one using Quad9 instead of Cloudfare?

7 days ago by Lavender Breton to c/privacy

Seems a little odd that the fediverse uses Cloudfare.

Sanctus 33 points 7 days ago

I use it for dns

path: 0 25267631, hotness: undefined, score: 33, children: 7
DarkCloud 15 points 7 days ago

Four 9s? How is anyone going to remember that?

path: 0 25267631 25267782, hotness: undefined, score: 15, children: 4
pixeldaemon 8 points 7 days ago

Quad9 for Quadruple Nine

path: 0 25267631 25267782 25267922, hotness: undefined, score: 8, children: 1
WhoIzDisIz 8 points 7 days ago

Zoom. (Or whoosh.)

path: 0 25267631 25267782 25267922 25269320, hotness: undefined, score: 8, children: 0
hneerqe 1 point 7 days ago

it's 1 more after 8! Is there no mercy?

path: 0 25267631 25267782 25276950, hotness: undefined, score: 1, children: 1
xxxb 1 point 5 days ago

r/unexpectedfactorial and before you tell me: I know that this is not reddit. But 8! is a very large number and you probably didn't mean it like that.

path: 0 25267631 25267782 25276950 25300442, hotness: undefined, score: 1, children: 0
unitedwithme 10 points 7 days ago

IPv4:

  1. 9.9.9.9
  2. 149.112.112.112

IPv6:

  1. 2620:fe::fe
  2. 2620:fe::9

All from memory lol. I set it up a lot for people at home and businesses. That's for DNSSEC, filtered, non ECS.

Edit: you can also use https://dns.quad9.net/dns-query for mobile iirc.

path: 0 25267631 25269484, hotness: undefined, score: 10, children: 0
adarza 1 point 13 hours ago

same. but i also use mullvad because it adds to encrypted dns (doh or dot only), several levels of filtering to choose from. this allows you to have some basic (can't edit filter lists yourself) 'pi-hole' functionality without having to have a pi-hole available.

path: 0 25267631 25381609, hotness: undefined, score: 1, children: 0
SnotFlickerman 26 points 7 days ago

...for what, specifically?

path: 0 25267601, hotness: undefined, score: 26, children: 1
Monkey 13 points 7 days ago

I think they mean Cloudflare captcha but I don’t know that Quad9 has something like that

path: 0 25267601 25267817, hotness: undefined, score: 13, children: 0
veniasilente 20 points 7 days ago

A lot of fediverse instances for some weird reason use Cloudflare for captchas and espionage. I assume it's a sort of "genre-blind" offloading hardware work moment, if not something like being Class Traitors, because one of the big reasons people come to the Fediverse is precisely to escape the grip and decision power of giants like CF.

path: 0 25269224, hotness: undefined, score: 20, children: 8
zombiebikini 8 points 7 days ago

I guess if you have to defend against DDOS attacks going big is the only way.

path: 0 25269224 25271413, hotness: undefined, score: 8, children: 7
melroy 2 points 7 days ago path: 0 25269224 25271413 25277463, hotness: undefined, score: 2, children: 2
zombiebikini 3 points 7 days ago

But this only covers layer 7, doesn't it?

path: 0 25269224 25271413 25277463 25278487, hotness: undefined, score: 3, children: 1
melroy 3 points 7 days ago path: 0 25269224 25271413 25277463 25278487 25281078, hotness: undefined, score: 3, children: 0
moldy_rice 2 points 7 days ago

It's not.

path: 0 25269224 25271413 25277302, hotness: undefined, score: 2, children: 3
zombiebikini 1 point 7 days ago

Care to elaborate?

path: 0 25269224 25271413 25277302 25278422, hotness: undefined, score: 1, children: 2
moldy_rice 1 point 6 days ago

There's loads of DDoS alternatives.

It's a national security threat to give your httpa private keys to a US company. As a result, loads of alternatives exist for real DDoS attacks.

But also, almost any nonprofit social media site can just get away with a self hosted pow solution.

path: 0 25269224 25271413 25277302 25278422 25287069, hotness: undefined, score: 1, children: 1
irotsoma 14 points 7 days ago

Quad9 is only a DNS server and I do use that for all of my servers as do many others. It doesn't provide domain registration, domain dns configuration, proxies, tunnels, etc, that Cloudflare does.

path: 0 25271197, hotness: undefined, score: 14, children: 0
yaroto98 10 points 7 days ago

I use it as my upstream DNS setup on my two piholes.

path: 0 25268838, hotness: undefined, score: 10, children: 0
Brujones 5 points 7 days ago

I've never been able to chase it down, but Apple devices on my network always seem to have issues accessing some sites when using quad 9 for DNS. No problems with cloudflare, though. 🤷‍♂️

path: 0 25267891, hotness: undefined, score: 5, children: 2
twkm 11 points 7 days ago

1.1.1.1 does no filtering. 9.9.9.9 does, similar to 1.1.1.2. To skip filtering use 9.9.9.10.

path: 0 25267891 25268859, hotness: undefined, score: 11, children: 1
Brujones 4 points 7 days ago

Thanks! I'll give that a shot. I didn't do much troubleshooting because other devices could access those sites just fine using 9.9.9.9, so I figured it was something weird in Apple's system.

path: 0 25267891 25268859 25269821, hotness: undefined, score: 4, children: 0
normonator 4 points 7 days ago

I used to use quad 9 but stopped using it after running into too many issues where it provided completely wrong results. Like not even outdated results just straight up wrong values that never existed, with both public websites as well as customer dns entries that I have managed for over a decade.

path: 0 25269511, hotness: undefined, score: 4, children: 5
MonkderVierte 2 points 7 days ago

What, cloudflare is a registrar?

path: 0 25269511 25273698, hotness: undefined, score: 2, children: 2
Agent641 3 points 7 days ago

Registrar, nameserver, hosting provider, reverse proxy, authentication provider, they do lots of things now.

path: 0 25269511 25273698 25278623, hotness: undefined, score: 3, children: 0
normonator 2 points 6 days ago

Yes but I wasn't using CloudFlare at all. The domains were registered with Tucows and only quad9 had incorrect DNS lookups.

path: 0 25269511 25273698 25283362, hotness: undefined, score: 2, children: 0
irotsoma 2 points 7 days ago

That's odd, never had that issue and I've used it a long time. Even for my own domains changes propagate as quickly as any other DNS server I've used. Were your changes propagated to google, cloud flare, and the rest? Anyway, very weird since DNS propagation is pretty automated usually unless something is not propagating to any DNS server.

path: 0 25269511 25271235, hotness: undefined, score: 2, children: 1
normonator 3 points 6 days ago

Everything else has correct results except for them. Some of the entries were years since being changed, then all of a sudden pointed elsewhere. Quick to troubleshoot but quite annoying.

I haven't used them since. Troubleshooting that kind of shit is not what I want to be spending my time on.

path: 0 25269511 25271235 25283484, hotness: undefined, score: 3, children: 0
warmaster 2 points 7 days ago

Is Q9 as easy to use?

path: 0 25267501, hotness: undefined, score: 2, children: 1
Admirable_Bagel_0989 3 points 7 days ago

Yes, quad9 is a DNS provider, meaning the way to configure quad9 as your DNS provider is the same as configuring cloudflare but instead of 1.1.1.1 it's 9.9.9.9 (hence the name quad9)

edit: if you're using android or a browser (or really anything that uses DNS over https), the URLs are different, but you can find more info at https://quad9.net/

path: 0 25267501 25268062, hotness: undefined, score: 3, children: 0
Zoma 1 point 4 days ago

Used to use it buts it doesn't feel a good idea to change your vpn's default dns

path: 0 25319466, hotness: undefined, score: 1, children: 0
ratatouille 1 point 3 days ago

I had several cases where suddenly Websites not work. after a lot of tests. I was only able to solve it because I changed the DNS back to the provider DNS. I never found what it caused. Then I changed it back. that worked some Weeks, then i had again Problems. Now I use again and permanent the provider dns.

path: 0 25346744, hotness: undefined, score: 1, children: 0
Eggman 1 point 5 days ago

Cloudfare have many service a dns resolver is one of them. Quad9 only provide a dns resolver. When you visit a website and see Cloudfare thats has nothing to do with their dns resolver that is a complitly different service they provide to protect against ddos attacks.

path: 0 25302273, hotness: undefined, score: 1, children: 0
sudoer777 1 point 6 days ago

IDK but Cloudflare has an ODoH endpoint

path: 0 25288803, hotness: undefined, score: 1, children: 0
MangoPenguin 1 point 2 days ago

For DNS? It's an alternative for that, but not for the huge amount of other services Cloudflare provides.

path: 0 25346973, hotness: undefined, score: 1, children: 0
Undertaker 0 points 7 days ago

I don't think, that many people use Cloudflare. Why not Quad9? There are Vetter options

path: 0 25271281, hotness: undefined, score: 0, children: 0
privacy
privacy

@lemmy.ml

login for more options
50454
5105
5160

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
  • Don't promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

go to feed...