{"slug": "quad9", "name": "Quad9", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 10, "commenters": 35, "warners": 8, "score": 6.237, "rising": 2.04, "first": "2025-11-10", "latest": "2026-10-23", "why": "The one i can think of my head that doesn't block is quad9: 9.9.9.9 & 149.112.112.112", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 10, "neutral": 15, "compare": 2, "warn": 8}, "spark": [1, 0, 0, 1, 2, 1, 0, 1, 0, 0, 1, 3], "listed": true, "loved": [], "caveat": "", "short_quote": "The one i can think of my head that doesn't block is quad9: 9.9.9.9 & 149.112.112.112", "kind": "", "icon": true, "domain": "quad9.net", "github_repo": null, "official_url": "https://quad9.net", "pricing": "", "aliases": ["Quad9"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 803257408, "item_id": 50203588, "url": "https://news.ycombinator.com/item?id=50203588", "by": "xbar", "date": "2026-10-23", "version": null, "stance": "recommend", "quote": "Sorry Quad9. I love you. I am sad France does not understand you the way I always have.", "excerpt": "Sorry Quad9. I love you. I am sad France does not understand you the way I always have. Stay Swiss, my friend.", "context": "", "use_case": "DNS resolver", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 803204528, "item_id": 50200283, "url": "https://news.ycombinator.com/item?id=50200283", "by": "monneyboi", "date": "2026-10-22", "version": null, "stance": "recommend", "quote": "If you want to support Quad9 in their dealing with this", "excerpt": "If you want to support Quad9 in their dealing with this, you can donate to the cause here: https://quad9.net/donate/ Quad9 is a Swiss-based not-for-profit organization whose operational budget comes entirely from sponsorships and donations.", "context": "", "use_case": "Secure DNS resolver", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 803203536, "item_id": 50200221, "url": "https://news.ycombinator.com/item?id=50200221", "by": "tommica", "date": "2026-10-22", "version": null, "stance": "recommend", "quote": "I use quad9 and it works great!", "excerpt": "Sorry that you guys have to go through this. I use quad9 and it works great!", "context": "", "use_case": "DNS resolver", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 793137840, "item_id": 49571115, "url": "https://news.ycombinator.com/item?id=49571115", "by": "Cider9986", "date": "2026-09-04", "version": null, "stance": "recommend", "quote": "quad9 is recommended by Privacy Guides.", "excerpt": "quad9 is recommended by Privacy Guides. There's also other recommendations. https://www.privacyguides.org/en/dns/#recommended-providers", "context": "", "use_case": "", "switched_from": "", "story": "An open DNS recursive service for free security and high privacy"}, {"id": 779318928, "item_id": 48707433, "url": "https://news.ycombinator.com/item?id=48707433", "by": "mzajc", "date": "2026-06-28", "version": null, "stance": "recommend", "quote": "This is great, thanks for the correction!", "excerpt": "This is great, thanks for the correction! I tried resolving dnssec-failed.org and it does indeed fail with EDE 6 (DNSSEC Bogus). I'm not sure why this hasn't been updated on the info page[0] yet, given that the change is about three months old. [0]: https://quad9.net/service/service-addresses-and-features/", "context": "", "use_case": "", "switched_from": "", "story": "Choosing a Public DNS Resolver"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 803220288, "item_id": 50201268, "url": "https://news.ycombinator.com/item?id=50201268", "by": "romaniitedomum", "date": "2026-10-22", "version": null, "stance": "warn", "quote": "It's strange that Quad9 openly does malicious domain filtering", "excerpt": "It's strange that Quad9 openly does malicious domain filtering [1] using what it terms \"threat intelligence feeds\", but apparently filtering piracy domains is technically impossible and not the right place for this to happen. I think courts rightly are suspicious of this kind of doublespeak from DNS companies. If DNS filtering is effective for protection against malware and ransomware, it will be at least somewhat ef", "context": "", "use_case": "", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 793256448, "item_id": 49578528, "url": "https://news.ycombinator.com/item?id=49578528", "by": "ek_erilaz", "date": "2026-09-05", "version": null, "stance": "warn", "quote": "I notice 2026 is not included in the 'list of years in which we have not received a request for data'", "excerpt": "Thanks for this! I was looking at your transparency report (https://quad9.net/about/transparency-report/) and I notice 2026 is not included in the 'list of years in which we have not received a request for data', despite the list being updated quarterly according to the text below it. When I saw the page earlier, I assumed that either the list isn't actually updated quarterly, or I'd discovered an exciting example of", "context": "", "use_case": "Encrypted DNS resolver", "switched_from": "", "story": "Shutting down our public encrypted DNS"}, {"id": 793120112, "item_id": 49570007, "url": "https://news.ycombinator.com/item?id=49570007", "by": "siramikvarze", "date": "2026-09-04", "version": null, "stance": "warn", "quote": "Please note this service is censored by the French and German authorities", "excerpt": "Please note this service is censored by the French and German authorities https://torrentfreak.com/dns-resolver-quad9-loses-global-pirate-site-blocking-case-against-sony-230308/", "context": "", "use_case": "", "switched_from": "", "story": "An open DNS recursive service for free security and high privacy"}, {"id": 793115584, "item_id": 49569724, "url": "https://news.ycombinator.com/item?id=49569724", "by": "assumed_throwaw", "date": "2026-09-04", "version": null, "stance": "warn", "quote": "Quad9 is censoring some domains in Europe", "excerpt": "Unfortunately, Quad9 is censoring some domains in Europe (notably in France and Italy) following injunctions issued by rights holders [1]. That was not the case with Mullvad's DNS. [1] https://quad9.net/news/blog/italian-blocking-demands-following-a-bad-example/", "context": "", "use_case": "", "switched_from": "", "story": "Shutting down our public encrypted DNS"}]}], "who": [{"by": "mooiedingen", "context": "in Belgium, blocks ads via DNS", "url": "https://news.ycombinator.com/item?id=45951544", "date": "2025-11-16"}], "tags": [], "use_cases": ["dns resolver", "public dns resolver", "secure dns resolver", "encrypted dns resolver", "upstream dns provider", "upstream dns resolver"], "compared": [{"slug": "cloudflare-dns-1-1-1-1", "name": "Cloudflare DNS 1.1.1.1", "co": 5, "switched_from": 1, "switched_to": 1}, {"slug": "pi-hole", "name": "Pi-hole", "co": 4, "switched_from": 0, "switched_to": 0}, {"slug": "mullvad-dns", "name": "Mullvad DNS", "co": 4, "switched_from": 0, "switched_to": 0}, {"slug": "dns4eu", "name": "DNS4EU", "co": 1, "switched_from": 0, "switched_to": 1}, {"slug": "openwrt", "name": "OpenWrt", "co": 3, "switched_from": 0, "switched_to": 0}], "makers": [{"id": 776784896, "item_id": 48549056, "url": "https://news.ycombinator.com/item?id=48549056", "by": "johnhtodd", "date": "2026-06-15", "version": null, "stance": "recommend", "quote": "Quad9 (9.9.9.9) consumes this feed from U Twente", "excerpt": "One approach to solving this for a very limited set of intervals is to actually block namespace that has been removed at the registry level. There is a paper on this from Raffaele Sommese: https://static.sched.com/hosted_files/icann83/5b/Rafaelle%20Sommese%20ICANN%2083%20Lost%20in%20Transit.pdf Quad9 (9.9.9.9) consumes this feed from U Twente of \"just deleted\" names, as most of them are malicious, and blocking them e", "context": "works for Quad9", "use_case": "", "switched_from": "", "story": "The ghost domain problem in DNS, and what we're doing about it"}, {"id": 773398656, "item_id": 48337416, "url": "https://news.ycombinator.com/item?id=48337416", "by": "johnhtodd", "date": "2026-05-30", "version": null, "stance": "neutral", "quote": "disclaimer: I work for Quad9.", "excerpt": "This is conflating BGP routes and DNS. DNS data: Root server data is available via AXFR (\"dig . AXFR @f.root-servers.net\") but this isn't what you're referencing. Second level TLD server data is available is available at CZDS. (https://czds.icann.org/home) but some TLDs don't participate, but this also isn't what you're referencing. What I think you want: There is no canonical list of all zones that exist - there is ", "context": "Works for Quad9", "use_case": "", "switched_from": "", "story": "Free full BGP feed. IPv4 and IPv6"}], "threads": [{"url": "https://news.ycombinator.com/item?id=50195959", "title": "Quad9 to exit France", "mentions": 9}, {"url": "https://news.ycombinator.com/item?id=47474255", "title": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2", "mentions": 5}, {"url": "https://news.ycombinator.com/item?id=49568579", "title": "Shutting down our public encrypted DNS", "mentions": 4}, {"url": "https://news.ycombinator.com/item?id=49569663", "title": "An open DNS recursive service for free security and high privacy", "mentions": 3}, {"url": "https://news.ycombinator.com/item?id=48702273", "title": "Choosing a Public DNS Resolver", "mentions": 3}, {"url": "https://news.ycombinator.com/item?id=47610777", "title": "Quad9 Enables DNS over HTTP/3 and DNS over QUIC", "mentions": 3}], "sentiment_by_month": {"2025-11": {"warn": 2, "neutral": 1, "recommend": 1}, "2025-12": {"neutral": 1}, "2026-01": {"compare": 1, "neutral": 1}, "2026-02": {"recommend": 1}, "2026-03": {"recommend": 2, "compare": 1, "neutral": 1}, "2026-04": {"neutral": 3, "recommend": 1}, "2026-05": {}, "2026-06": {"warn": 1, "neutral": 1, "recommend": 1}, "2026-07": {}, "2026-08": {}, "2026-09": {"warn": 4, "neutral": 3, "recommend": 1}, "2026-10": {"neutral": 4, "recommend": 3, "warn": 1}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 803328608, "item_id": 50208038, "url": "https://news.ycombinator.com/item?id=50208038", "by": "dmantis", "date": "2026-10-23", "version": null, "stance": "neutral", "quote": "https://quad9.net/service/service-addresses-and-features/", "excerpt": "https://quad9.net/service/service-addresses-and-features/ You can use 9.9.9.10 - it has no filtering. But even malware filter is supposed to cut malware, not pirated content. Cutting piracy while saying that you cut malware is def lying because pirated resources might not provide anything malicious for the end user.", "context": "", "use_case": "", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 803304608, "item_id": 50206538, "url": "https://news.ycombinator.com/item?id=50206538", "by": "kickflipforever", "date": "2026-10-23", "version": null, "stance": "neutral", "quote": "Quad9 meanwhile have the remit to provide the best public resolver", "excerpt": "https://quad9.net/ lists as being founded by Global Cyber Alliance, which was founded by City of London police, Manhattan District Attorney\u2019s Office and Center for Internet Security. Quad9 openly operate in threat intelligence: https://quad9.net/news/blog/protecting-millions-in-asia-a-call-for-regional-threat-intelligence-partners/ City of London and Manhattan District Attorney\u2019s Office suggests finance is a factor, ", "context": "", "use_case": "", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 803257408, "item_id": 50203588, "url": "https://news.ycombinator.com/item?id=50203588", "by": "xbar", "date": "2026-10-23", "version": null, "stance": "recommend", "quote": "Sorry Quad9. I love you. I am sad France does not understand you the way I always have.", "excerpt": "Sorry Quad9. I love you. I am sad France does not understand you the way I always have. Stay Swiss, my friend.", "context": "", "use_case": "DNS resolver", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 803220288, "item_id": 50201268, "url": "https://news.ycombinator.com/item?id=50201268", "by": "romaniitedomum", "date": "2026-10-22", "version": null, "stance": "warn", "quote": "It's strange that Quad9 openly does malicious domain filtering", "excerpt": "It's strange that Quad9 openly does malicious domain filtering [1] using what it terms \"threat intelligence feeds\", but apparently filtering piracy domains is technically impossible and not the right place for this to happen. I think courts rightly are suspicious of this kind of doublespeak from DNS companies. If DNS filtering is effective for protection against malware and ransomware, it will be at least somewhat ef", "context": "", "use_case": "", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 803209344, "item_id": 50200584, "url": "https://news.ycombinator.com/item?id=50200584", "by": "johnhtodd", "date": "2026-10-22", "version": null, "stance": "neutral", "quote": "Quad9 is not a telecommunications service provider as defined by Swiss law", "excerpt": "Quad9 is not a telecommunications service provider as defined by Swiss law, which is where that application becomes enforced. Details of this (and many other things) can be found on the \"Compliance and Applicable Law\" section of the website. https://quad9.net/privacy/compliance-and-applicable-law/", "context": "", "use_case": "Public DNS resolver", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 803204528, "item_id": 50200283, "url": "https://news.ycombinator.com/item?id=50200283", "by": "monneyboi", "date": "2026-10-22", "version": null, "stance": "recommend", "quote": "If you want to support Quad9 in their dealing with this", "excerpt": "If you want to support Quad9 in their dealing with this, you can donate to the cause here: https://quad9.net/donate/ Quad9 is a Swiss-based not-for-profit organization whose operational budget comes entirely from sponsorships and donations.", "context": "", "use_case": "Secure DNS resolver", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 803203536, "item_id": 50200221, "url": "https://news.ycombinator.com/item?id=50200221", "by": "tommica", "date": "2026-10-22", "version": null, "stance": "recommend", "quote": "I use quad9 and it works great!", "excerpt": "Sorry that you guys have to go through this. I use quad9 and it works great!", "context": "", "use_case": "DNS resolver", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 803189632, "item_id": 50199352, "url": "https://news.ycombinator.com/item?id=50199352", "by": "sltkr", "date": "2026-10-22", "version": null, "stance": "neutral", "quote": "Quad9 doesn't obey it", "excerpt": "Switzerland has its own DNS blocklist that all ISPs obey. [1] Quad9 doesn't obey it but I never understood how they can get away with that legally. I'd be interested in an explanation if someone knows more! 1. https://www.gespa.ch/en/fighting-illegal-gambling/access-blocking", "context": "", "use_case": "", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 803164848, "item_id": 50197803, "url": "https://news.ycombinator.com/item?id=50197803", "by": "euio757", "date": "2026-10-22", "version": null, "stance": "neutral", "quote": "", "excerpt": "Seems they're following Cisco similar move 2y ago of exiting the market > Canal+ has been busy getting web-blocking injunctions in France against sports piracy sites which stream sporting events for which it has the exclusive broadcast rights within the French market. It previously targeted DNS resolvers operated by Google, Cloudflare and Cisco. > All three unsuccessfully opposed the web-blocking orders. Google and C", "context": "", "use_case": "", "switched_from": "", "story": "Quad9 to exit France"}, {"id": 793337488, "item_id": 49583593, "url": "https://news.ycombinator.com/item?id=49583593", "by": "wayofthepie", "date": "2026-09-06", "version": null, "stance": "neutral", "quote": "That was overturned", "excerpt": "That was overturned https://quad9.net/news/blog/quad9-turns-the-sony-case-around-in-dresden/", "context": "", "use_case": "", "switched_from": "", "story": "An open DNS recursive service for free security and high privacy"}, {"id": 793256448, "item_id": 49578528, "url": "https://news.ycombinator.com/item?id=49578528", "by": "ek_erilaz", "date": "2026-09-05", "version": null, "stance": "warn", "quote": "I notice 2026 is not included in the 'list of years in which we have not received a request for data'", "excerpt": "Thanks for this! I was looking at your transparency report (https://quad9.net/about/transparency-report/) and I notice 2026 is not included in the 'list of years in which we have not received a request for data', despite the list being updated quarterly according to the text below it. When I saw the page earlier, I assumed that either the list isn't actually updated quarterly, or I'd discovered an exciting example of", "context": "", "use_case": "Encrypted DNS resolver", "switched_from": "", "story": "Shutting down our public encrypted DNS"}, {"id": 793137840, "item_id": 49571115, "url": "https://news.ycombinator.com/item?id=49571115", "by": "Cider9986", "date": "2026-09-04", "version": null, "stance": "recommend", "quote": "quad9 is recommended by Privacy Guides.", "excerpt": "quad9 is recommended by Privacy Guides. There's also other recommendations. https://www.privacyguides.org/en/dns/#recommended-providers", "context": "", "use_case": "", "switched_from": "", "story": "An open DNS recursive service for free security and high privacy"}, {"id": 793120112, "item_id": 49570007, "url": "https://news.ycombinator.com/item?id=49570007", "by": "siramikvarze", "date": "2026-09-04", "version": null, "stance": "warn", "quote": "Please note this service is censored by the French and German authorities", "excerpt": "Please note this service is censored by the French and German authorities https://torrentfreak.com/dns-resolver-quad9-loses-global-pirate-site-blocking-case-against-sony-230308/", "context": "", "use_case": "", "switched_from": "", "story": "An open DNS recursive service for free security and high privacy"}, {"id": 793119793, "item_id": 49569987, "url": "https://news.ycombinator.com/item?id=49569987", "by": "LetsGetTechnicl", "date": "2026-09-04", "version": null, "stance": "neutral", "quote": "It uses Quad9 as the upstream provider", "excerpt": "I've been loving the Pihole setup I just set up. It uses Quad9 as the upstream provider and then I do all the blocking myself. I used to use NextDNS but this is so much better and free!", "context": "", "use_case": "upstream DNS provider", "switched_from": "", "story": "Shutting down our public encrypted DNS"}, {"id": 793115584, "item_id": 49569724, "url": "https://news.ycombinator.com/item?id=49569724", "by": "assumed_throwaw", "date": "2026-09-04", "version": null, "stance": "warn", "quote": "Quad9 is censoring some domains in Europe", "excerpt": "Unfortunately, Quad9 is censoring some domains in Europe (notably in France and Italy) following injunctions issued by rights holders [1]. That was not the case with Mullvad's DNS. [1] https://quad9.net/news/blog/italian-blocking-demands-following-a-bad-example/", "context": "", "use_case": "", "switched_from": "", "story": "Shutting down our public encrypted DNS"}, {"id": 793102976, "item_id": 49568936, "url": "https://news.ycombinator.com/item?id=49568936", "by": "Arainach", "date": "2026-09-04", "version": null, "stance": "neutral", "quote": "Not if Quad9 is using DNSSEC, no.", "excerpt": "Not if Quad9 is using DNSSEC, no. What's the specific threat you're envisioning? If it involves Quad9 themselves being malicious, what would DNSSEC on the forwarding prevent? This page explains how all of this works in detail: https://quad9.net/news/blog/quad9-enables-dnssec-on-all-service-endpoints/", "context": "", "use_case": "Public DNS resolver", "switched_from": "", "story": "Shutting down our public encrypted DNS"}, {"id": 792454768, "item_id": 49528423, "url": "https://news.ycombinator.com/item?id=49528423", "by": "arnefm", "date": "2026-09-01", "version": null, "stance": "warn", "quote": "Quad9 is now blocking this domain for some reason.", "excerpt": "Suddenly I couldn't resolve fastpotify.rocks in DNS. Quad9 is now blocking this domain for some reason. https://quad9.net/result/?url=fastpotify.rocks#domain-tester ThreatStop lists the following info: Severity Level: 5 of 5 Confidence Level: 5 of 5 Risk Level: 4 of 5 I assume this is a false positive, but who can be sure in this day and age...", "context": "", "use_case": "", "switched_from": "", "story": "Fastpotify"}, {"id": 779318928, "item_id": 48707433, "url": "https://news.ycombinator.com/item?id=48707433", "by": "mzajc", "date": "2026-06-28", "version": null, "stance": "recommend", "quote": "This is great, thanks for the correction!", "excerpt": "This is great, thanks for the correction! I tried resolving dnssec-failed.org and it does indeed fail with EDE 6 (DNSSEC Bogus). I'm not sure why this hasn't been updated on the info page[0] yet, given that the change is about three months old. [0]: https://quad9.net/service/service-addresses-and-features/", "context": "", "use_case": "", "switched_from": "", "story": "Choosing a Public DNS Resolver"}, {"id": 779303872, "item_id": 48706492, "url": "https://news.ycombinator.com/item?id=48706492", "by": "chopin", "date": "2026-06-28", "version": null, "stance": "neutral", "quote": "I use 9.9.9.9 but it failed me a couple of times in the past two months.", "excerpt": "I use 9.9.9.9 but it failed me a couple of times in the past two months. Cloudflare is very robust but I just don't like them. Falling back on them silently is not what I want. I am rather using them directly when quad9 fails.", "context": "", "use_case": "public DNS resolver", "switched_from": "", "story": "Choosing a Public DNS Resolver"}, {"id": 779276176, "item_id": 48704761, "url": "https://news.ycombinator.com/item?id=48704761", "by": "johnhtodd", "date": "2026-06-27", "version": null, "stance": "neutral", "quote": "Quad9 employs DNSSEC on all endpoints now.", "excerpt": "Quad9 employs DNSSEC on all endpoints now. https://quad9.net/news/blog/quad9-enables-dnssec-on-all-service-endpoints/", "context": "", "use_case": "", "switched_from": "", "story": "Choosing a Public DNS Resolver"}, {"id": 776786976, "item_id": 48549186, "url": "https://news.ycombinator.com/item?id=48549186", "by": "saint_yossarian", "date": "2026-06-15", "version": null, "stance": "warn", "quote": "", "excerpt": "It's on a malware list: https://quad9.net/result/?url=rsgm.dev#domain-tester", "context": "", "use_case": "DNS resolver", "switched_from": "", "story": "My Homelab AI Dev Platform"}, {"id": 763117027, "item_id": 47694814, "url": "https://news.ycombinator.com/item?id=47694814", "by": "TheIPW", "date": "2026-04-08", "version": null, "stance": "neutral", "quote": "I use this instance directly with Quad9 as the upstream.", "excerpt": "I wrote this because I got tired of my home DNS being a single point of failure. The setup is a mix of hardware: one local instance runs on Proxmox/Docker, and the second is on a Raspberry Pi running OpenWrt. Having that split across different host OSs ensures that a single hypervisor update doesn't take out the whole network. The third instance is on a Debian VPS for mobile filtering. To avoid the battery drain of a", "context": "", "use_case": "upstream DNS resolver", "switched_from": "", "story": "I run three AdGuard Home instances (two local, one on a VPS)"}, {"id": 762021424, "item_id": 47626339, "url": "https://news.ycombinator.com/item?id=47626339", "by": "wpm", "date": "2026-04-03", "version": null, "stance": "recommend", "quote": "I've been using Quad9 at home for years as my only upstream DNS resolver and your comment does not track at all with my experience.", "excerpt": "I've been using Quad9 at home for years as my only upstream DNS resolver and your comment does not track at all with my experience. My ISP goes out more often.", "context": "", "use_case": "Home DNS resolver", "switched_from": "", "story": "Quad9 Enables DNS over HTTP/3 and DNS over QUIC"}, {"id": 761917616, "item_id": 47619851, "url": "https://news.ycombinator.com/item?id=47619851", "by": "itchingsphynx", "date": "2026-04-02", "version": null, "stance": "neutral", "quote": "Quad9 has no plans to provide content filtering.", "excerpt": "\"Does Quad9 offer content filtering? No. Quad9 has no plans to provide content filtering. Quad9 is dedicated solely to internet security and the blocking of malicious domains, such as phishing, malware, and exploit kits.\" https://quad9.net/support/faq/#dns_crypt", "context": "", "use_case": "", "switched_from": "", "story": "Quad9 Enables DNS over HTTP/3 and DNS over QUIC"}, {"id": 761831473, "item_id": 47614467, "url": "https://news.ycombinator.com/item?id=47614467", "by": "b3lvedere", "date": "2026-04-02", "version": null, "stance": "neutral", "quote": "I used the Quad9 resolvers in the past", "excerpt": "I used the Quad9 resolvers in the past, but i've been using the DNS4EU for a while now [1] [1] https://joindns4.eu/", "context": "", "use_case": "DNS resolver", "switched_from": "", "story": "Quad9 Enables DNS over HTTP/3 and DNS over QUIC"}, {"id": 760413936, "item_id": 47525871, "url": "https://news.ycombinator.com/item?id=47525871", "by": "Terretta", "date": "2026-03-25", "version": null, "stance": "neutral", "quote": "quad9 is on this critical infra", "excerpt": "Thanks for the disclosure. This isn't really a press release site, which is how that \"this is a meaningful signal\" reads. OTOH, I completely coincidentally found this by searching i3D.net thanks to stumbling across the new-to-me information that quad9 is on this critical infra owned by ... checks notes ... Ubisoft? Acquired by Ubisoft, i3D.net operates a large fleet of servers worldwide and provides a global infrastr", "context": "", "use_case": "", "switched_from": "", "story": "SIDN chooses European-based infrastructure for .nl DNS anycast (i3D.net)"}, {"id": 759669216, "item_id": 47479326, "url": "https://news.ycombinator.com/item?id=47479326", "by": "ck2", "date": "2026-03-22", "version": null, "stance": "recommend", "quote": "quad9 dnscrypt for the win", "excerpt": "quad9 dnscrypt for the win https://quad9.net/service/service-addresses-and-features/ Secured w/ECS: Malware blocking, DNSSEC Validation, ECS enabled IPv4 9.9.9.11 149.112.112.11 IPv6 2620:fe::11 2620:fe::fe:11 HTTPS https://dns11.quad9.net/dns-query TLS tls://dns11.quad9.net", "context": "", "use_case": "DNS resolver with malware blocking", "switched_from": "", "story": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2"}, {"id": 759632640, "item_id": 47477040, "url": "https://news.ycombinator.com/item?id=47477040", "by": "Kwpolska", "date": "2026-03-22", "version": null, "stance": "compare", "quote": "I\u2019m not sure if it can be considered 100% safe from US government intervention", "excerpt": "Quad9 is based in Switzerland, but the three founders-sponsors are US-based [0], so I\u2019m not sure if it can be considered 100% safe from US government intervention. [0] https://quad9.net/about/sponsors/", "context": "", "use_case": "", "switched_from": "", "story": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2"}, {"id": 759626769, "item_id": 47476673, "url": "https://news.ycombinator.com/item?id=47476673", "by": "surgical_fire", "date": "2026-03-22", "version": null, "stance": "recommend", "quote": "and it has been great ever since", "excerpt": "No, I do not keep any logs from domain name resolution from the DNS service I used from 7+ years ago. If you do, I commend you. I used the term \"blocking\" in a loose sense. I have no idea if Cloudflare was failing to resolve certain domains because it is a shitty service, or if it was ordered to block those domain names by its government, or if it was actively not resolving domain names because it thought a good idea", "context": "", "use_case": "", "switched_from": "Cloudflare DNS", "story": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2"}, {"id": 759625041, "item_id": 47476565, "url": "https://news.ycombinator.com/item?id=47476565", "by": "surgical_fire", "date": "2026-03-22", "version": null, "stance": "recommend", "quote": "Quad9 behaves exactly as I expect a DNS to work", "excerpt": "I used to use 1.1.1.1. I still had issues. Quad9 behaves exactly as I expect a DNS to work, in the sense that I only remember I use it when the topic of DNS pops up.", "context": "", "use_case": "", "switched_from": "", "story": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2"}, {"id": 759621504, "item_id": 47476344, "url": "https://news.ycombinator.com/item?id=47476344", "by": "surgical_fire", "date": "2026-03-22", "version": null, "stance": "recommend", "quote": "Quad9.", "excerpt": "Quad9. Many years ago I used Cloudflare, and more than once I had issues with them blocking websites I wanted to access. I absolutely despise that. I want my DNS to resolve domain names, nothing else. For blocking things I have Pi-Hole, which is under my control for that reason. I can blacklist or whitelist addresses to my needs, not to the whims of a corporation that wants to play gatekeeper to what I can browse.", "context": "", "use_case": "DNS resolver", "switched_from": "", "story": "Cloudflare flags archive.today as \"C&C/Botnet\"; no longer resolves via 1.1.1.2"}, {"id": 752950000, "item_id": 47059375, "url": "https://news.ycombinator.com/item?id=47059375", "by": "mckirk", "date": "2026-02-18", "version": null, "stance": "recommend", "quote": "using a different DNS (such as Quad9) solves that issue", "excerpt": "This is only done at the DNS level, so using a different DNS (such as Quad9) solves that issue. For background info, I can recommend [1, 2]. [1]: https://www.youtube.com/watch?v=Uxmu25mUZgg [2]: https://cuiiliste.de/", "context": "", "use_case": "bypass DNS blocking", "switched_from": "", "story": "If you're an LLM, please read this"}, {"id": 748042002, "item_id": 46752625, "url": "https://news.ycombinator.com/item?id=46752625", "by": "madduci", "date": "2026-01-25", "version": null, "stance": "neutral", "quote": "using Quad9 as my main DNS provider", "excerpt": "I own a FTTH connection to Telekom since 2018, as the only provider in my street, allowed to install an internet connection (only glass fiber). Since then, I have always used my own device and I maintain a GitHub Snippet in how to connect OpenWRT modem (and by extension, any other modem that supports pppoe), rather than their Huawei SpeedPort crap or the more expensive Fritz Box). Link to Gist : https://gist.github.c", "context": "", "use_case": "DNS provider", "switched_from": "", "story": "Deutsche Telekom is violating Net Neutrality"}, {"id": 747285120, "item_id": 46705320, "url": "https://news.ycombinator.com/item?id=46705320", "by": "Bender", "date": "2026-01-21", "version": null, "stance": "compare", "quote": "to see if Quad9 stands out", "excerpt": "Try testing many of the open recursive servers with dnsperftest [1] to see if Quad9 stands out. not my repo Also run it from other servers/VM's to compare and contrast if you can. [1] - https://github.com/cleanbrowsing/dnsperftest", "context": "", "use_case": "public DNS resolver", "switched_from": "", "story": "Quad9 9.9.9.9 DNS queries *from Germany* slow today"}, {"id": 741571378, "item_id": 46348211, "url": "https://news.ycombinator.com/item?id=46348211", "by": "m01", "date": "2025-12-21", "version": null, "stance": "neutral", "quote": "Quad9 apparently uses 2620:fe::fe", "excerpt": "> It's hard to tell someone to connect to 2601:3c7:4f80:1a01:4d2:3b7a:9c10:6f5e. If you would like your IPv6 addresses to be more human-friendly, you could use DHCPv6 (in addition to/instead of SLAAC) and end up with addresses like 2001:db8:3c7:4f80::123. Sure, it's 5 groups of e.g. 3-4 hex digits rather than 4 groups of up to 3 digits, but I think it's much easier than your example. You might set your router to use ", "context": "", "use_case": "", "switched_from": "", "story": "I spent a week without IPv4 (2023)"}, {"id": 735224704, "item_id": 45951544, "url": "https://news.ycombinator.com/item?id=45951544", "by": "mooiedingen", "date": "2025-11-16", "version": null, "stance": "recommend", "quote": "The one i can think of my head that doesn't block is quad9: 9.9.9.9 & 149.112.112.112", "excerpt": "Imho it is sad that it is happening!, However in many cases it is just a DNS level ban which has been put in place by governments. That means in a country like mine Belgium where government controls DNS through an entity DNS-Belgium they make it act as the GFW for both incomming as outgoing traffic. For one that knows what that means, One knows how to bypass this which is as simple as letting another provider resolve", "context": "in Belgium, blocks ads via DNS", "use_case": "uncensored DNS resolver", "switched_from": "", "story": "Ask HN: Why so many sites block traffic from Russia?"}, {"id": 734417344, "item_id": 45901084, "url": "https://news.ycombinator.com/item?id=45901084", "by": "dengolius", "date": "2025-11-12", "version": null, "stance": "warn", "quote": "Unsecured: No Malware blocking, no DNSSEC validation (for experts only!)", "excerpt": "https://dns10.quad9.net/dns-query Unsecured: No Malware blocking, no DNSSEC validation (for experts only!) Maybe it is fast because it is not secured at all? :D", "context": "", "use_case": "", "switched_from": "", "story": "DNS Provider Quad9 Sees Piracy Blocking Orders as \"Existential Threat\""}, {"id": 734063936, "item_id": 45878996, "url": "https://news.ycombinator.com/item?id=45878996", "by": "0xbadcafebee", "date": "2025-11-10", "version": null, "stance": "neutral", "quote": "I don't know what is unique about Quad9 that they couldn't do this", "excerpt": "There are multiple free and paid geoip databases, from $0 to $1000 a year, depending. Then an hour to write a script to add iptables rules from the database for the country of choice. (Example: https://gist.github.com/asheroto/934e056a302adda334077f0c85cfe4b4) I don't know what is unique about Quad9 that they couldn't do this, but it's possible they have some technical limitation", "context": "", "use_case": "", "switched_from": "", "story": "DNS Provider Quad9 Sees Piracy Blocking Orders as \"Existential Threat\""}, {"id": 734022336, "item_id": 45876396, "url": "https://news.ycombinator.com/item?id=45876396", "by": "df0b9f169d54", "date": "2025-11-10", "version": null, "stance": "warn", "quote": "I wasn't able to send any query", "excerpt": "I used quad9 as the primary upstream DNS for my home. about 11 days ago I wasn't able to send any query to quad9, kinda blocking. Their status page was green I suspected my ip was blocked. Now I'm on quad1 :(", "context": "", "use_case": "", "switched_from": "", "story": "DNS Provider Quad9 Sees Piracy Blocking Orders as \"Existential Threat\""}]}