related: dns4eu https://news.ycombinator.com/item?id=44255116

Does this DNS server block (censor) the domains of the CUII list as many German internet providers do?

> https://cuiiliste.de/domains

> https://de.wikipedia.org/wiki/Clearingstelle_Urheberrecht_im...

(both are German websites, but they should be easily understandable for everybody)

CIRA in Canada also provides a public DNS server. (CIRA is the non-profit administrator of the .ca TLD.)

They provide variants for unfiltered DNS, blocking malware/phishing, and malware/phishing + pornography.

All variants are provided over IPv4, IPv6, DoH, and DoT.

https://www.cira.ca/en/canadian-shield/configure/summary-cir...

They have not posted anything on social media in a long time and there was some downtime a few months ago. I would really like to use this primarily, but it is really a problem when your DNS suddenly becomes unavailable without any note from the devs ^^

Some context that might be overlooked by the non-eu visitors: the eu is passing a bunch of laws that forces/requires larger corporations and so called “critical entities” to invest in resilience. Amongst which of course also cyber resilience. This is a broad area, from security hardening to cataclysm preparation. The relevant eu guidelines are NIS2 and CER.

The laws don’t tell the entities what they should prepare for. Rather, they state that the entities must execute a proper risk assessment and prepare accordingly (obviously this is the rough summary. The actual legislations are a bit better worded than a 9pm forum post)

And given what’s going on in the world + the phrasing of the legislations, using eu based services is becoming a lot more attractive to these companies.

Which means that being a eu based company whose offer is “whatever US company X does, but a bit less mature atm, we’re working on it!” has gone from a pointless strategy to one that might just work.

Edit: BTW that last paragraph is not meant to imply that dns0 isn’t mature. I don’t know them. Just wanted to put in words the general vibe I’m picking up.

> A fast, distributed and resilient DNS infrastructure that's 100% European.

> dns0.eu is a French non‑profit organization founded in 2022 by Romain Cointepas and Olivier Poitrey — co-founders of NextDNS.

-> https://help.nextdns.io/t/y4hmv0n/who-is-behind-nextdns

> Who is behind NextDNS?

> NextDNS was founded in May 2019 in Delaware, USA by two French founders Romain Cointepas and Olivier Poitrey. Olivier has been working on Internet infrastructures for the last 20 years. In 2005, he founded Dailymotion, the largest video sharing service after Youtube and the most popular European website in the world at the time. He is currently Director of Engineering at Netflix, working on Open Connect, Netflix's home CDN also known as the CDN moving about 30% of the total US Internet traffic. Romain and Olivier closely worked for years at Dailymotion on many different projects. Romain ended up leading the mobile & TV department.

Brain gymnastics at work.

This is made and maintained by the same guy who made NextDNS, a Netflix CDN expert.

They know how to make low latency distributed network applications, but it isn't their day job and the pace of development of both Next and this shows it.

The only way my internet can be safer if i get a DNS that's fully outside of any government control(including soft power over private providers).

Similar to the service that has been up here a few times in the last days: https://www.joindns4.eu/

Doesnt seem to be directly related to the EU, but something I would consider if I had kids with personal devices.

Living in Germany, one of the things about DNS-level adblocking is: It SILENTLY obstructs a lot of the payback, reward and coupon programs.

For example, the biggest country-wide payback program is payback.de, and their most of their coupon multiplier links here – https://www.payback.de/coupons/info – will be clickable, but silently not work after you purchase.

Adblocking is good, but I prefer when it's controlled and I can just open an incognito window or disable it temporarily when I need them, for whatever reason.

This is neat. I wonder what the delta is between this and NextDNS (who funds/powers the non-profit). I imagine NextDNS blocks a superset of the baseline of dangerous domains blocked by dns0.eu? Is the main addition primarily advertising and analytics related?

edit: another key addition by NextDNS is a global infra footprint, rather than just in the EU. Oh it looks like there’s no anycast with the non-profit as well? And you have to pick your local resolver. I guess that makes sense because the main value prop of NextDNS (to me) is when I’m traveling and a local pi-hole won’t suffice.

Unfortunately, the setup instructions for "Linux" on the homepage only consider "systemd." Of course, every GNU/Linux user — or rather, administrator — who doesn't use systemd knows how to set it up the "old" UNIX way. However, assuming that Linux equals systemd is kind of offensive to a small group of systemd avoiders (such as myself).

"Nous distribuons notre infrastructure sur plusieurs hébergeurs dans chaque État membre de l'Union européenne. Notre pile logicielle sur mesure a été testée au combat pendant plus de 3 ans, répondant à des billions de requêtes et servant des centaines de milliers d'utilisateurs chez NextDNS."

Claims it's 100% european, can't even have proper french. :-/

Makes the internet safer? That usually means censorship.

No, thanks. I don't want a "safe" DNS, I want one that always returns the IP of the host, no matter the actual safety/censorship policies of the day.

Would there be latency for people far away from Europe?

Would be great if it has the option to block ads.

How does this differ from a service like quad9? Has someone done speed tests? One key difference is probably quad9 being under Swiss privacy laws and dns0 being under gdpr laws in the EU.

No DNS stamps to use this?

nice alternative to google or cloudflare in production.

I'd like to use it because I support the creator's stated mission, but for me, performance seems very slow and unreliability is lacking

  192.168.  1.  1 |  Min  |  Avg  |  Max  |Std.Dev|Reliab%|
  ----------------+-------+-------+-------+-------+-------+
  - Cached Name   | 0.000 | 0.002 | 0.002 | 0.001 | 100.0 |
  - Uncached Name | 0.025 | 0.080 | 0.304 | 0.059 | 100.0 |
  - DotCom Lookup | 0.027 | 0.039 | 0.129 | 0.026 | 100.0 |
  ---<-------->---+-------+-------+-------+-------+-------+
           Non-routable local internet address
                Local Network Nameserver


    1.  1.  1.  1 |  Min  |  Avg  |  Max  |Std.Dev|Reliab%|
  ----------------+-------+-------+-------+-------+-------+
  + Cached Name   | 0.027 | 0.029 | 0.039 | 0.001 | 100.0 |
  + Uncached Name | 0.028 | 0.037 | 0.080 | 0.016 | 100.0 |
  + DotCom Lookup | 0.029 | 0.034 | 0.059 | 0.007 | 100.0 |
  ---<-------->---+-------+-------+-------+-------+-------+
                     one.one.one.one
                    CLOUDFLARENET, US


    1.  0.  0.  1 |  Min  |  Avg  |  Max  |Std.Dev|Reliab%|
  ----------------+-------+-------+-------+-------+-------+
  + Cached Name   | 0.029 | 0.030 | 0.050 | 0.003 | 100.0 |
  + Uncached Name | 0.029 | 0.049 | 0.196 | 0.031 | 100.0 |
  + DotCom Lookup | 0.029 | 0.035 | 0.070 | 0.009 | 100.0 |
  ---<-------->---+-------+-------+-------+-------+-------+
                     one.one.one.one
                    CLOUDFLARENET, US


    8.  8.  4.  4 |  Min  |  Avg  |  Max  |Std.Dev|Reliab%|
  ----------------+-------+-------+-------+-------+-------+
  - Cached Name   | 0.059 | 0.066 | 0.151 | 0.015 | 100.0 |
  - Uncached Name | 0.059 | 0.080 | 0.290 | 0.045 | 100.0 |
  - DotCom Lookup | 0.059 | 0.063 | 0.089 | 0.006 | 100.0 |
  ---<-------->---+-------+-------+-------+-------+-------+
                       dns.google
                       GOOGLE, US


    8.  8.  8.  8 |  Min  |  Avg  |  Max  |Std.Dev|Reliab%|
  ----------------+-------+-------+-------+-------+-------+
  - Cached Name   | 0.059 | 0.066 | 0.105 | 0.011 | 100.0 |
  - Uncached Name | 0.059 | 0.091 | 0.319 | 0.061 | 100.0 |
  - DotCom Lookup | 0.058 | 0.064 | 0.089 | 0.008 | 100.0 |
  ---<-------->---+-------+-------+-------+-------+-------+
                       dns.google
                       GOOGLE, US


  193.110. 81.  0 |  Min  |  Avg  |  Max  |Std.Dev|Reliab%|
  ----------------+-------+-------+-------+-------+-------+
  - Cached Name   | 0.058 | 0.068 | 0.102 | 0.014 |  73.0 |
  - Uncached Name | 0.057 | 0.103 | 0.239 | 0.057 |  70.4 |
  - DotCom Lookup | 0.059 | 0.072 | 0.089 | 0.013 |  57.9 |
  ---<-------->---+-------+-------+-------+-------+-------+
                         dns0.eu
                       DNS0EU, FR


  185.253.  5.  0 |  Min  |  Avg  |  Max  |Std.Dev|Reliab%|
  ----------------+-------+-------+-------+-------+-------+
  - Cached Name   | 0.066 | 0.071 | 0.110 | 0.007 |  98.0 |
  - Uncached Name | 0.069 | 0.103 | 0.289 | 0.057 |  97.9 |
  - DotCom Lookup | 0.067 | 0.075 | 0.130 | 0.011 |  97.9 |
  ---<-------->---+-------+-------+-------+-------+-------+
                         dns0.eu
                       DNS0EU, FR


  UTC: 2025-06-13, from 20:10:13 to 20:11:18, for 01:05.419

how about quad9, what are the feelings on them now?

on paper it looks great

https://en.wikipedia.org/wiki/Quad9

https://news.ycombinator.com/item?id=43469457

I have just put the DNS server 193.110.81.0 into the network manager on a manjaro machine and an MX-linux machine and the DNS works perfectly.

Added it to Librewolf and it works fine,

Just put the kids.dns0.eu on my grandkids phone and again it works perfectly.

I have of course already done this in the past with the Mullvad DNS with the family filter:

I would rather use an EU DNS server than any US shite.

dnsleaktest; on the Mx-linux machine

IP: 217.156.17.129 M247 Europe Brussels, Belgium

I do hope that the EU can slowly disconnnect from all USA services and have our own.

https://nlnet.nl/project/current.html

https://european-alternatives.eu/

You cannot have someone like TRump instruct/pressure/force microsoft to delete emails and accounts of the International war crimes investigators, who were investigating Israel for war crimes.

This post currently has 53 comments. Iykyk

The cynic in me feels like 'safer' is code for censorship in this case.

Bureaucracy at it finest in terms of user ease of use. 1.1.1.1, 9.9.9.9, 8.8.8.8 and they came up with IP's that can't be more random.

Perfect example how one can destroy whole concept with bad user experience.