Public DNS

A resolver that answers fast and remembers nothing

Public recursive DNS from the same edge that carries our transit. Encrypted by default, validated on every answer, no query logs, no client addresses, nothing sold to anyone. Point a device, a router or a whole network at it.

NoneQuery logs, by design
DoH + DoTEncrypted by default
AnycastAnswered from Ashburn and Frankfurt
FreeFor anyone, no account

How it works

Fast because it is close. Private because it keeps nothing.

A resolver sees every name you ask for, so the rules about what it keeps matter more than the speed. Ours are short, and the speed comes from where it runs.

No query logs

We do not write down what you asked. Queries are answered and forgotten; the only thing the resolver keeps is the answer itself, in cache, until its TTL runs out.

No client addresses

We do not record who asked, or from where. Nothing that could tie a name to a person or a network is stored, so there is nothing to hand over and nothing to leak.

Nothing sold, to anyone

The resolver is not a product that pays for itself with your data. It is paid for by the network it runs on. No partners, no feeds, no analytics customers behind it.

Encrypted and validated

DNS over HTTPS and DNS over TLS on every address, DNSSEC validated on every response. A signed zone that does not check out gets SERVFAIL, not a forged answer.

Answered at the edge

The resolver runs at our core locations in Ashburn and Frankfurt, anycast so the nearest one answers, on the same edge that carries our transit rather than through a separate cloud.

Warm cache, no ECS

Popular names are kept hot and refreshed before their TTL expires. EDNS Client Subnet is off by default, so authoritative servers never learn your network from us.

Setup

Two addresses, one hostname, any platform

Pick the method your platform supports. DNS over HTTPS or TLS where you can; the plain addresses for routers and anything older. Takes a minute.

Running a network? Point your users at these, or take a dedicated instance with its own addresses and policy on the same contract as a transit port. Talk to an engineer.

Paste this into any browser or OS that takes a DoH template.

https://dns.wirescope.net/dns-query

FAQ

Common questions