A public recursive name server (also called public DNS resolver) is a name server service that networked computers may use to query the Domain Name System (DNS), the decentralized Internet naming system, in place of (or in addition to) name servers operated by the local Internet service provider (ISP) to which the devices are connected. Reasons for using these services include:

Public DNS resolver operators often cite increased privacy as an advantage of their services; critics of public DNS services have cited the possibility of mass data collection targeted at the public resolvers as a potential risk of using these services. Most services now support secure DNS lookup transport services such as DNS over TLS (DoT), DNS over HTTPS (DoH) and DNS over QUIC (DoQ).

Public DNS resolvers are operated either by commercial companies, offering their service for free use to the public, or by private enthusiasts to help spread new technologies and support non-profit communities.

Notable public DNS service operators

ProviderPrivacy policyDNS over UDP/TCP (Do53)DNSSECDNS over TLS (DoT)DNS over HTTPS (DoH)DNS over QUIC (DoQ)EDNS PaddingDNSCryptHostnameIPv4 addressesIPv6 addressesFiltersRemarks
Alibaba?YesNoYesYesYesNoNodns.alidns.com223.5.5.5 223.6.6.62400:3200::1 2400:3200:baba::1?Chinese regulations
AdGuardYesYesYesYesYesYesNoYesdns.adguard-dns.com94.140.14.14 94.140.15.152a10:50c0::ad1:ff 2a10:50c0::ad2:ffDefault: ads and trackers
family.adguard-dns.com94.140.14.15 94.140.15.162a10:50c0::bad1:ff 2a10:50c0::bad2:ffFamily: ads, trackers, and adult content
unfiltered.adguard-dns.com94.140.14.140 94.140.14.1412a10:50c0::1:ff 2a10:50c0::2:ffNone
CloudflareYesYesYesYesYesNoYesNoone.one.one.one 1dot1dot1dot1.cloudflare-dns.com1.1.1.1 1.0.0.12606:4700:4700::1111 2606:4700:4700::1001None
security.cloudflare-dns.com1.1.1.2 1.0.0.22606:4700:4700::1112 2606:4700:4700::1002Malware, Phishing
family.cloudflare-dns.com1.1.1.3 1.0.0.32606:4700:4700::1113 2606:4700:4700::1003Malware, Phishing, Adult content
dns64.cloudflare-dns.com—N/a2606:4700:4700::64 2606:4700:4700::6400NoneIntended to be IPv6-only. See NAT64 and DNS64.
DNS4EU?YesYesYesYesNoYesNoprotective.joindns4.eu86.54.11.1 86.54.11.2012a13:1001::86:54:11:1 2a13:1001::86:54:11:201Malware, phishingDeveloped for EU citizens
child-noads.joindns4.eu86.54.11.11 86.54.11.2112a13:1001::86:54:11:11 2a13:1001::86:54:11:211Malware, phishing, adult content, ads
child.joindns4.eu86.54.11.12 86.54.11.2122a13:1001::86:54:11:12 2a13:1001::86:54:11:212Malware, phishing, adult content
noads.joindns4.eu86.54.11.13 86.54.11.2132a13:1001::86:54:11:13 2a13:1001::86:54:11:213Malware, phishing, ads
unfiltered.joindns4.eu86.54.11.100 86.54.11.2002a13:1001::86:54:11:100 2a13:1001::86:54:11:200None
GoogleYesYesYesYesYesNoYesNodns.google8.8.8.8 8.8.4.42001:4860:4860::8888 2001:4860:4860::8844None
dns64.dns.google—N/a2001:4860:4860::6464 2001:4860:4860::64NoneIntended for networks with NAT64 gateway.
GcoreYesYesYesNoNoNoNoNo—N/a95.85.95.85 2.56.220.22a03:90c0:999d::1 2a03:90c0:9992::1None
MullvadOnly for VPN service availableNoYesYesYesNoYesNodns.mullvad.net194.242.2.22a07:e340::2NoneCan be used without its VPN service
adblock.dns.mullvad.net194.242.2.32a07:e340::3Ads, and trackers
base.dns.mullvad.net194.242.2.42a07:e340::4Ads, trackers, and malware
extended.dns.mullvad.net194.242.2.52a07:e340::5Ads, trackers, malware, and social media
all.dns.mullvad.net194.242.2.92a07:e340::9Ads, trackers, malware, social media, gambling and adult content
Vercara (formerly Neustar Security Services)YesYesYesNoNoNoNoNo?64.6.64.6 64.6.65.62620:74:1b::1:1 2620:74:1c::2:2NoneVerisign transferred its public DNS to Neustar.
156.154.70.1 156.154.71.12610:a1:1018::1 2610:a1:1019::1
156.154.70.2 156.154.71.22610:a1:1018::2 2610:a1:1019::2Malware, ransomware, spyware, phishing
156.154.70.3 156.154.71.32610:a1:1018::3 2610:a1:1019::3Low security + gambling, pornography, violence, hate
156.154.70.4 156.154.71.42610:a1:1018::4 2610:a1:1019::4Medium security + gaming, adult, drugs, alcohol, anonymous proxies
156.154.70.5 156.154.71.52610:a1:1018::5 2610:a1:1019::5NoneWill not redirect non-existent domains to a landing page.
Cisco Umbrella (OpenDNS)YesYesYesYesNoNoYesYesdns.opendns.com dns.umbrella.com208.67.222.222 208.67.220.2202620:119:35::35 2620:119:53::53Basic Security filtering + user defined policies
familyshield.opendns.com208.67.222.123 208.67.220.1232620:119:35::123 2620:119:53::123FamilyShield: adult content
sandbox.opendns.com208.67.222.2 208.67.220.22620:0:ccc::2 2620:0:ccd::2NoneSandbox addresses that provide no filtering.
Oracle (formerly Dyn)YesYesYesNoNoNoNoNoresolver1.dyndnsinternetguide.com resolver2.dyndnsinternetguide.com rdns.dynect.net216.146.35.35 216.146.36.36—N/aNone
Quad9YesYesYesYesYesNoNoYesdns.quad9.net9.9.9.9 149.112.112.1122620:fe::9 2620:fe::fePhishing, malware, and exploit kit domains
Yesdns11.quad9.net9.9.9.11 149.112.112.112620:fe::11 2620:fe::fe:11Phishing, malware, and exploit kit domainsPasses EDNS Client Subnet.
Nodns10.quad9.net9.9.9.10 149.112.112.102620:fe::10 2620:fe::fe:10None
Tencent?YesYesYesYesYesYesNodns.pub119.29.29.292402:4e00::?Chinese regulations
WikimediaInformalNoYesYesYesNoYesNowikimedia-dns.org185.71.138.1382001:67c:930::1None
YandexNoYesNoYesYesNoYesYescommon.dot.dns.yandex.net77.88.8.8 77.88.8.12a02:6b8::feed:0ff 2a02:6b8:0:1::feed:0ffNone
safe.dot.dns.yandex.net77.88.8.88 77.88.8.22a02:6b8::feed:bad 2a02:6b8:0:1::feed:badSafe: fraudulent / infected / bot sites
family.dot.dns.yandex.net77.88.8.7 77.88.8.32a02:6b8::feed:a11 2a02:6b8:0:1::feed:a11Family: fraudulent / infected / bot / adult sites

External links