Cloudflare 1.1.1.1

Speed and unfiltered resolution. The default choice when you want a fast, neutral resolver and no filtering.

Official site
Operator

Cloudflare, Inc.

Launched

2018

Filtering

None

Privacy

See policy

Resolver addresses
Primary IPv41.1.1.1
Secondary IPv41.0.0.1
Primary IPv62606:4700:4700::1111
Secondary IPv62606:4700:4700::1001
DoH endpointhttps://cloudflare-dns.com/dns-query
DoT endpointtls://1.1.1.1

About Cloudflare

Cloudflare 1.1.1.1 is the public recursive DNS resolver operated by Cloudflare, launched on April 1st, 2018. It runs on Cloudflare's global edge network of more than 300 cities, which routinely tops independent benchmarks for resolution speed. Cloudflare explicitly does not sell user data; the company commits to retaining query logs for no more than 24 hours, with KPMG auditing the practice annually.

The default 1.1.1.1 / 1.0.0.1 endpoints perform no filtering. Two sibling endpoints — 1.1.1.2 (malware blocking) and 1.1.1.3 (malware + adult content) — are useful for households or networks that want filtering without running their own resolver. All Cloudflare resolvers support DNS-over-HTTPS (DoH), DNS-over-TLS (DoT), and DNSCrypt.

Its main trade-off is centralization: a meaningful share of the public internet now routes DNS through Cloudflare, which makes it a single point of observability (and, in theory, a single point of failure). Pair it with a secondary resolver from a different provider if outage redundancy matters to you.

Filtering policy

No filtering on the default 1.1.1.1 endpoint. Sibling endpoints 1.1.1.2 and 1.1.1.3 add malware and adult-content blocking respectively.

Privacy stance

Cloudflare commits to not logging end-user IP addresses and purging query data within 24 hours, audited annually by KPMG.

At a glance
  • Launched April 1, 2018
  • Primary: 1.1.1.1 — Secondary: 1.0.0.1
  • IPv6: 2606:4700:4700::1111
  • Variants: 1.1.1.2 (malware), 1.1.1.3 (malware + adult)
  • DoH, DoT, DNSCrypt supported
  • 24-hour log retention; KPMG audited

Test Cloudflare against a real domain

The DNS Propagation Checker queries Cloudflare alongside the other major resolvers in parallel — useful for spotting drift after a record change or comparing answers across providers.

Open the DNS Propagation Checker

Other public resolvers