Public DNS Resolvers

Reference for the four major public DNS resolvers — Cloudflare 1.1.1.1, Google 8.8.8.8, Quad9 9.9.9.9, and AdGuard DNS. Compare IP addresses, filtering, and privacy policies, then test how each one resolves a domain.

What is DNS-over-HTTPS (DoH)?

Standard DNS queries travel as plain UDP packets — anyone on the network path (your ISP, a captive WiFi portal, a hostile network) can see them, log them, or rewrite the answers. DNS-over-HTTPS wraps each query in a regular HTTPS request to a known resolver, so the contents are encrypted in transit and harder to tamper with.

All four resolvers on this page support DoH. The tradeoff is concentration: instead of trusting many smaller resolvers, you trust one big one with a complete view of your queries. Pick the one whose privacy stance matches your threat model, not just the fastest one.

How to choose

Speed

Cloudflare and Google have the densest anycast networks; Cloudflare typically wins independent benchmarks but the gap is small.

Security

Quad9 blocks malware and phishing by default with no extra configuration. AdGuard adds tracker blocking on top.

Privacy

Quad9 retains no personal data and is structured as a Swiss non-profit. Cloudflare publishes audited 24-hour retention.

See how each resolver answers a domain

The DNS Propagation Checker queries all four of these resolvers in parallel and surfaces any drift — useful when you have just changed a record and want to see who has caught up.

Open the DNS Propagation Checker