1.1.1.1
1.1.1.1 is a free Domain Name System (DNS) service by American company Cloudflare in partnership with APNIC.[1] The service functions as a recursive name server providing domain name resolution for any host on the Internet. The service was announced on April 1, 2018.[2] On November 11, 2018, Cloudflare announced a mobile application of their 1.1.1.1 service for Android and iOS.[3] On September 25, 2019, Cloudflare released WARP, an upgraded version of their original 1.1.1.1 mobile application.[4]
Developer(s) | Cloudflare |
---|---|
Stable release | Android: 3.8 iOS: 3.12 Windows: 1.2.2544.0 |
Platform | Android, IOS, Windows, macOS |
Website | https://1.1.1.1/dns |
Service
The 1.1.1.1 DNS service operates recursive name servers for public use at the four following IP addresses.[5] The addresses are mapped to the nearest operational server by anycast routing.[6] The DNS service is also available for Tor clients.[7] Users can set up the service by manually changing their DNS resolvers to the IP addresses below. Mobile users on both Android and iPhone have the alternative of downloading the 1.1.1.1 mobile application, which automatically configures the DNS resolvers on the device.[8]
1.1.1.1 (Mainstream) | 1.1.1.1 for Families | ||
---|---|---|---|
DNS filtering | No[9] | Yes, malware blocking only[10] | Yes, malware and adult content blocking[10] |
DoH address | https://cloudflare-dns.com/dns-query[11] | https://security.cloudflare-dns.com/dns-query%5B%5D | https://family.cloudflare-dns.com/dns-query%5B%5D |
IPv4 addresses | 1.1.1.1 1.0.0.1 |
1.1.1.2 1.0.0.2 |
1.1.1.3 1.0.0.3 |
IPv6 addresses | 2606:4700:4700::1111 2606:4700:4700::1001 |
2606:4700:4700::1112 2606:4700:4700::1002 |
2606:4700:4700::1113 2606:4700:4700::1003 |
Technology
1.1.1.1 is a recursive DNS resolver. Cloudflare runs an authoritative DNS resolver with a network of over 20 million Internet properties. With the recursor and the resolver on the same network, some DNS queries can be answered directly.
With the release of the 1.1.1.1 mobile application in November 2018, Cloudflare added the ability for users to encrypt their DNS queries over HTTPS (DoH) or TLS (DoT).[12] Later on, a VPN tunnel based on WireGuard was implemented.[13]
Prior usage of the IP address
Technology websites noted that by using 1.1.1.1 as the IP address for its service, Cloudflare exposed misconfigurations in existing setups that violated Internet standards (such as RFC1918). 1.1.1.1 was not a reserved IP address, yet was abused by many existing routers (mostly those sold by Cisco Systems) and companies for hosting login pages to private networks, exit pages or other purposes, rendering the proper routing of 1.1.1.1 impossible on those systems.[14][15] Additionally, 1.1.1.1 is blocked on many networks and by multiple ISPs because the simplicity of the address means that it was previously often used inappropriately for testing purposes and not legitimate use.[14] These previous uses have led to a huge influx of garbage data to Cloudflare's servers.[15]
Cleanup of 1.1.1.1 and 1.0.0.1
The 1.0.0.0/8 IP block was assigned in 2010 to APNIC;[16] before this time it was unassigned space.[17] An unassigned IP space, however is not the same as a reserved IP space for private use (called a reserved IP address).[18] For example, AT&T has said it is working on fixing this issue[19] within its CPE hardware.
Privacy Policy
1.1.1.1 was built as an alternative to the default DNS resolvers from Internet Service Providers (ISP). Since most internet queries require a DNS resolver in order to translate a text-based web address to a numerical IP address, DNS resolvers hold a lot of data on its users. Owners of DNS services, such as an ISP, are able to track exactly which domains a user visits.[20] Cloudflare's 1.1.1.1 markets itself as the antithesis to these traditional DNS resolvers. The service claims to adhere to the following privacy principles: [21]
- Don't write user-identifiable log data to disk;
- Never sell browsing data or use it in any way to target users with advertising data;
- Do not collect any personal information — name, phone number, or email address;
- Regularly hire outside auditors to ensure the service adheres to these promises.
WARP
In September 2019, Cloudflare released a VPN service called WARP which is built into the 1.1.1.1 mobile app. [22][23][24]
References
- APNIC Labs enters into a research agreement with Cloudflare, Geoff Huston, APNIC Blog, April 2, 2018
- Cloudflare launches 1.1.1.1 DNS service that will speed up your internet The Verge, April 1, 2018
- Cimpanu, Catalin. "Cloudflare launches Android and iOS apps for its 1.1.1.1 service | ZDNet". ZDNet.
- "WARP is here (sorry it took so long)". The Cloudflare Blog. September 25, 2019. Retrieved November 20, 2019.
- Setting Up 1.1.1.1 Speed
- Introducing DNS Resolver, 1.1.1.1 (not a joke) DNS resolver, 1.1.1.1, is served by Cloudflare’s Global Anycast Network.
- "Introducing DNS Resolver for Tor". Cloudflare. June 5, 2018. Retrieved October 1, 2018.
- 1.1.1.1. "1.1.1.1 — The free app that makes your Internet faster". 1.1.1.1. Retrieved November 22, 2019.CS1 maint: numeric names: authors list (link)
- "Does 1.1.1.1 do web content filtering like Cisco's OpenDNS?". Cloudflare Community. November 11, 2018. Retrieved November 1, 2020.
- "Introducing 1.1.1.1 for Families". The Cloudflare Blog. April 1, 2020. Retrieved November 1, 2020.
- "Making requests". The Cloudflare Blog. Retrieved October 6, 2020.
- "Introducing Warp: Fixing Mobile Internet Performance and Security". The Cloudflare Blog. April 1, 2019. Retrieved November 22, 2019.
- "The Technical Challenges of Building Cloudflare WARP". The Cloudflare Blog. September 25, 2019. Retrieved November 22, 2019.
- Cherry, Denny (April 5, 2018). "5 reasons Cloudflare's roll-out of 1.1.1.1 has been a disaster". Tech Target. Archived from the original on April 26, 2018. Retrieved April 26, 2018.
- "1.1.1.1: Cloudflare's new DNS attracting 'gigabits per second' of rubbish". ZDNet. April 4, 2018. Retrieved April 26, 2018.
- "1/8 and 27/8 allocated to APNIC". NANOG. January 21, 2010. Retrieved May 3, 2018.
- List of assigned /8 IPv4 address blocks
- Fixing reachability to 1.1.1.1, GLOBALLY!, by Marty Strong, April 10, 2018
- Tweet by @billplein, 3 April 2018
- "DNS-Privacy: Google schiebt DNS-over-TLS an". c't Magazin – Heise Online (in German). Retrieved January 11, 2021.
- "Introducing Warp: Fixing Mobile Internet Performance and Security". The Cloudflare Blog. April 1, 2019. Retrieved November 22, 2019.
- Khalid, Amrita (April 2, 2019). "Cloudflare's privacy-focused DNS app adds a free VPN". Engadget. Archived from the original on April 2, 2019. Retrieved April 2, 2019.
- Humphries, By Matthew; September 26, 2019 10:18AM EST; September 26, 2019. "Cloudflare Finally Launches Warp, But It's Not a Mobile VPN". PCMAG. Retrieved September 27, 2019.CS1 maint: numeric names: authors list (link)
- 1.1.1.1. "1.1.1.1 — The free app that makes your Internet faster". 1.1.1.1. Retrieved November 22, 2019.CS1 maint: numeric names: authors list (link)