Control D DNS and possible DNS-rebind attacks

[Tech9]

Stubby is the only one left?

I never investigated the issue, but when playing more actively with Asus routers I've seen Stubby stuttering. You click on a page, it doesn't load right away, click refresh and it loads up like nothing happened. Removing DoT restores DNS resolution speed and the pages pop instantly. There is definitely server load factor involved, but perhaps something else as well.

How is Google behaving in your area? Around here it pops instantly with or without encryption, DoT or DoH, DNS test shows 30+ local servers. They are killing it. Cisco OpenDNS is similar, 20+ local servers and instant response.

 

[Treadler]

I never investigated the issue, but when playing more actively with Asus routers I've seen Stubby stuttering. You click on a page, it doesn't load right away, click refresh and it loads up like nothing happened. Removing DoT restores DNS resolution speed and the pages pop instantly. There is definitely server load factor involved, but perhaps something else as well.

How is Google behaving in your area? Around here it pops instantly with or without encryption, DoT or DoH, DNS test shows 30+ local servers. They are killing it. Cisco OpenDNS is similar, 20+ local servers and instant response.

Cloudflare here is the pick of the bunch, but still has issues. Is less than 100km from me.
All the other public servers are 800 - 1600 km away, can’t beat physics I guess!

Via a dns profile though, any/all public servers are great. Go figure….

Checking on Stubby, looks to me it might be abandon ware now? No updates for some years?

 

[Tech9]

Not familiar with Stubby development. I'm shooting plane requests to Google upstream from all home networks. Don't find much privacy in encrypted DNS and never had MITM issues. Business networks use Unbound resolvers. Weirdo.

 

[sfx2000]

It's mostly client side for delays...

Mac

sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder

Windwos

ipconfig /flushdns