farrokhi

vor 9 Jahrendiscuss

The response time depends on network peering from their anycast locations. I am seeing different response times based on test locations.

From US:

  # ./dnseval.py -f google-vs-quad9.txt -c 50 -C yahoo.com
  server      avg(ms)     min(ms)     max(ms)     stddev(ms)  lost(%)  ttl        flags
  ----------------------------------------------------------------------------------------------------
  8.8.8.8     31.857      31.278      33.416      0.434       %0       1332       QR -- -- RD RA -- --
  8.8.4.4     31.865      31.361      32.872      0.336       %0       1330       QR -- -- RD RA -- --
  9.9.9.9     93.703      92.797      95.362      0.586       %0       1391       QR -- -- RD RA -- --

From Iran:

  # ./dnseval.py -f google-vs-quad9.txt -c 50 -C yahoo.com
  server      avg(ms)     min(ms)     max(ms)     stddev(ms)  lost(%)  ttl        flags
  ----------------------------------------------------------------------------------------------------
  8.8.8.8     105.093     90.046      130.871     9.749       %0       3590       QR -- -- RD RA -- --
  8.8.4.4     99.458      84.472      133.375     11.308      %0       3585       QR -- -- RD RA -- --
  9.9.9.9     96.231      83.957      134.709     9.503       %0       3595       QR -- -- RD RA -- --

Tests are performed using dnsdiag tools: https://github.com/farrokhi/dnsdiag

farrokhi

vor 10 Jahrendiscuss

Perhaps they accidentally lifted the blocking rules. Or it will drop as soon as they upgrade their censorship software.

farrokhi

vor 10 Jahrendiscuss

Yes, but that is not the official client.

farrokhi

vor 10 Jahrendiscuss

I wish their client had first class support for other operating systems like FreeBSD. Current client is too debian/ubuntu specific.

farrokhi

vor 10 Jahrendiscuss

This is very interesting that "accidentally" all the parts have distinctive marks that can be linked to a B777 aircraft.

farrokhi

vor 15 Jahrendiscuss

wasn't this obvious from the beginning? And the same would happen to RockMelt as well.

Submissions

Tools to detect if your ISP is hijacking your DNS traffic

Is your ISP hijacking your DNS traffic?

DNS Diagnostics and Performance Measurement Tools (ping and Traceroute)

comments