Skip to content

Conversation

Ra2-IFV
Copy link

@Ra2-IFV Ra2-IFV commented Jun 12, 2025

Close: #984

Close: DNSCrypt#984

Signed-off-by: Ryan Keane <[email protected]>
@Ra2-IFV
Copy link
Author

Ra2-IFV commented Jun 12, 2025

Tests

[NOTICE] Source [public-resolvers] loaded
[NOTICE] Source [relays] loaded
[NOTICE] Firefox workaround initialized
[NOTICE] ECS plugin enabled
[NOTICE] Hot reload is disabled
[NOTICE] Advertised cert: [CN=hos.joindns4.eu] [8d528bbbf473c09e958ec6cd1b24c724b32ced5f77c62833df9fe7011aa1ba08]
[NOTICE] Advertised cert: [CN=E6,O=Let's Encrypt,C=US] [b35e05950cfbd8259f9375ba101870b8c3c4c0ec5a529757e63167e9de26a9e8]
[NOTICE] [dns4eu-noads-ipv4] OK (DoH) - rtt: 71ms
[NOTICE] Advertised cert: [CN=hos.joindns4.eu] [8d528bbbf473c09e958ec6cd1b24c724b32ced5f77c62833df9fe7011aa1ba08]
[NOTICE] Advertised cert: [CN=E6,O=Let's Encrypt,C=US] [b35e05950cfbd8259f9375ba101870b8c3c4c0ec5a529757e63167e9de26a9e8]
[NOTICE] [dns4eu-noads-ipv6] OK (DoH) - rtt: 73ms
[NOTICE] Advertised cert: [CN=hos.joindns4.eu] [8d528bbbf473c09e958ec6cd1b24c724b32ced5f77c62833df9fe7011aa1ba08]
[NOTICE] Advertised cert: [CN=E6,O=Let's Encrypt,C=US] [b35e05950cfbd8259f9375ba101870b8c3c4c0ec5a529757e63167e9de26a9e8]
[NOTICE] [dns4eu-ipv6] OK (DoH) - rtt: 74ms
[NOTICE] Advertised cert: [CN=hos.joindns4.eu] [8d528bbbf473c09e958ec6cd1b24c724b32ced5f77c62833df9fe7011aa1ba08]
[NOTICE] Advertised cert: [CN=E6,O=Let's Encrypt,C=US] [b35e05950cfbd8259f9375ba101870b8c3c4c0ec5a529757e63167e9de26a9e8]
[NOTICE] [dns4eu-ipv4] OK (DoH) - rtt: 79ms
[NOTICE] Advertised cert: [CN=hos.joindns4.eu] [8d528bbbf473c09e958ec6cd1b24c724b32ced5f77c62833df9fe7011aa1ba08]
[NOTICE] Advertised cert: [CN=E6,O=Let's Encrypt,C=US] [b35e05950cfbd8259f9375ba101870b8c3c4c0ec5a529757e63167e9de26a9e8]
[NOTICE] [dns4eu-child-noads-ipv6] OK (DoH) - rtt: 81ms
[NOTICE] Advertised cert: [CN=hos.joindns4.eu] [8d528bbbf473c09e958ec6cd1b24c724b32ced5f77c62833df9fe7011aa1ba08]
[NOTICE] Advertised cert: [CN=E6,O=Let's Encrypt,C=US] [b35e05950cfbd8259f9375ba101870b8c3c4c0ec5a529757e63167e9de26a9e8]
[NOTICE] [dns4eu-child-noads-ipv4] OK (DoH) - rtt: 81ms
[NOTICE] Advertised cert: [CN=hos.joindns4.eu] [8d528bbbf473c09e958ec6cd1b24c724b32ced5f77c62833df9fe7011aa1ba08]
[NOTICE] Advertised cert: [CN=E6,O=Let's Encrypt,C=US] [b35e05950cfbd8259f9375ba101870b8c3c4c0ec5a529757e63167e9de26a9e8]
[NOTICE] [dns4eu-child-ipv6] OK (DoH) - rtt: 84ms
[NOTICE] Advertised cert: [CN=hos.joindns4.eu] [8d528bbbf473c09e958ec6cd1b24c724b32ced5f77c62833df9fe7011aa1ba08]
[NOTICE] Advertised cert: [CN=E6,O=Let's Encrypt,C=US] [b35e05950cfbd8259f9375ba101870b8c3c4c0ec5a529757e63167e9de26a9e8]
[NOTICE] [dns4eu-child-ipv4] OK (DoH) - rtt: 88ms
[NOTICE] Advertised cert: [CN=hos.joindns4.eu] [8d528bbbf473c09e958ec6cd1b24c724b32ced5f77c62833df9fe7011aa1ba08]
[NOTICE] Advertised cert: [CN=E6,O=Let's Encrypt,C=US] [b35e05950cfbd8259f9375ba101870b8c3c4c0ec5a529757e63167e9de26a9e8]
[NOTICE] [dns4eu-unfiltered-ipv6] OK (DoH) - rtt: 87ms
[NOTICE] Advertised cert: [CN=hos.joindns4.eu] [8d528bbbf473c09e958ec6cd1b24c724b32ced5f77c62833df9fe7011aa1ba08]
[NOTICE] Advertised cert: [CN=E6,O=Let's Encrypt,C=US] [b35e05950cfbd8259f9375ba101870b8c3c4c0ec5a529757e63167e9de26a9e8]
[NOTICE] [dns4eu-unfiltered-ipv4] OK (DoH) - rtt: 87ms
[NOTICE] Sorted latencies:
[NOTICE] -   71ms dns4eu-noads-ipv4
[NOTICE] -   73ms dns4eu-noads-ipv6
[NOTICE] -   74ms dns4eu-ipv6
[NOTICE] -   79ms dns4eu-ipv4
[NOTICE] -   81ms dns4eu-child-noads-ipv6
[NOTICE] -   81ms dns4eu-child-noads-ipv4
[NOTICE] -   84ms dns4eu-child-ipv6
[NOTICE] -   87ms dns4eu-unfiltered-ipv6
[NOTICE] -   87ms dns4eu-unfiltered-ipv4
[NOTICE] -   88ms dns4eu-child-ipv4
[NOTICE] Server with the lowest initial latency: dns4eu-noads-ipv4 (rtt: 71ms)
  

@jedisct1
Copy link
Member

jedisct1 commented Jun 12, 2025

Wondering if we shouldn't mention the fact that its name is a bit misleading: https://techlog.jenslink.net/posts/dns4eu/

@Ra2-IFV
Copy link
Author

Ra2-IFV commented Jun 12, 2025

Going to laugh my ass out... I initiated this idea because I read tech new about "Digital sovereignty for Europe" and they mentioned "DNS4EU".
I know the concerns, but it's too late to be an island on today's internet. Either suffer the instant pain or worry about them later. So far Cloudflare is always doing best at what they do. Good reputation. And if the main DNS service is located in Europe it should be fine.
"dns4eu" is their chosen name, it's not wise to change it. Do you have any suggestions for descriptions?

@jedisct1 jedisct1 changed the base branch from master to next July 15, 2025 06:54
@jedisct1
Copy link
Member

Certificates are invalid.

@Ra2-IFV
Copy link
Author

Ra2-IFV commented Jul 22, 2025 via email

@Ra2-IFV
Copy link
Author

Ra2-IFV commented Aug 26, 2025

Hash check should be skipped: Mine instance resolves to CN=resolver.joindns4.eu and your is CN=hos.joindns4.eu, they use LetsEncrypt E5 and E6 certificates

@Ra2-IFV
Copy link
Author

Ra2-IFV commented Aug 26, 2025

nvm
image

@Ra2-IFV
Copy link
Author

Ra2-IFV commented Aug 26, 2025

New problem: They have 2 IPs for each hostname now. Should we ignore the second one?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add DNS4EU
2 participants