Private DNS Provider List

Last update : 24/8/2022

Introduction

This is my own minor list of DoT (DNS over TLS) providers that work with Android's Private DNS feature.

Recommended & Known working

These are the ones I can safely recommend, unless you have a reason not to use them.

BlahDNS

A hobby adblock DNS project with DoH, DoT, DoQ, DNSCryptv2 support. Claims to store no logs, but the site is cuckflared.

Provider hostname, IP address(es), & port :

• Finland : dot-fi.blahdns.com ; 95.216.212.177 ; 2a01:4f9:c010:43ce::1 ; 853, 443 (strict SNI)
• Germany : dot-de.blahdns.com ; 78.46.244.123 ; 2a01:4f8:c17:ec67::1 ; 853, 443 (strict SNI)
• Japan : dot-jp.blahdns.com ; 139.162.112.47 ; 2400:8902::f03c:92ff:fe27:344b ; 853, 443 (strict SNI)
• Singapore : dot-sg.blahdns.com ; 192.53.175.149 ; 2400:8901::f03c:92ff:fe27:870a ; 853, 443 (strict SNI)
• Switzerland : dot-ch.blahdns.com ; 45.91.92.121 ; 2a0e:dc0:6:23::2 ; 853, 443 (strict SNI)

Dismail DNS

Free DNS resolver claiming to store no logs. Both fdns1 & fdns2 includes an adblock filter.

Provider hostname, IP address(es), & port :

• fdns1 : fdns1.dismail.de ; 159.69.114.157 ; 2a01:4f8:c17:739a::2 ; 853
• fdns2 : fdns2.dismail.de ; 80.241.218.68 ; 2a02:c205:3001:4558::1 ; 853

DNSforge

German free DNS resolver with adblock & zero logging.

Provider hostname, IP address(es), & port :

• dnsforge.de : 176.9.93.198 / 176.9.1.117 ; 2a01:4f8:151:34aa::198 / 2a01:4f8:141:316d::117 ; 853

Mullvad DNS

A DNS resolver provided by Mullvad, provider of what most would call the best paid VPN. Not as reliable as BlahDNS in my own usage anecdote, though it is well received by a security team.

Provider hostname, IP address(es), & port :

• non-adblock : doh.mullvad.net ; 194.242.2.2 / 193.19.108.2 ; 2a07:e340::2 ; 853
• adblock : adblock.doh.mullvad.net ; 194.242.2.3 / 193.19.108.3 ; 2a07:e340::3 ; 853

Avoid

Ones you must avoid for various reasons, such as privacy invasive, questionable trustworthiness, questionable uptime, etc.

Cloudflare

Inbuilt in some custom ROMs, particularly Calyx & Divest.

Provider hostnames (in case you'd like to block them) :

• 1dot1dot1dot1.cloudflare-dns.com

Google

Provider hostnames (in case you'd like to block them) :

• dns.google

Known not working

These are the ones I can't recommend as they don't work with Android's Private DNS feature (or didn't connect when I tested them).

LibreDNS

DNS service run by LibreOps, offering a public encrypted DNS service to maintain DNS traffic secrecy & evade censorship.

Provider hostname, IP address, & port :

• dot.libredns.gr ; 116.202.176.26 ; 853, 854 (for adblocking with StevenBlack hosts)

Main Page