farrokhi

The response time depends on network peering from their anycast locations. I am seeing different response times based on test locations.

From US:

  # ./dnseval.py -f google-vs-quad9.txt -c 50 -C yahoo.com
  server      avg(ms)     min(ms)     max(ms)     stddev(ms)  lost(%)  ttl        flags
  ----------------------------------------------------------------------------------------------------
  8.8.8.8     31.857      31.278      33.416      0.434       %0       1332       QR -- -- RD RA -- --
  8.8.4.4     31.865      31.361      32.872      0.336       %0       1330       QR -- -- RD RA -- --
  9.9.9.9     93.703      92.797      95.362      0.586       %0       1391       QR -- -- RD RA -- --

From Iran:

  # ./dnseval.py -f google-vs-quad9.txt -c 50 -C yahoo.com
  server      avg(ms)     min(ms)     max(ms)     stddev(ms)  lost(%)  ttl        flags
  ----------------------------------------------------------------------------------------------------
  8.8.8.8     105.093     90.046      130.871     9.749       %0       3590       QR -- -- RD RA -- --
  8.8.4.4     99.458      84.472      133.375     11.308      %0       3585       QR -- -- RD RA -- --
  9.9.9.9     96.231      83.957      134.709     9.503       %0       3595       QR -- -- RD RA -- --

Tests are performed using dnsdiag tools: https://github.com/farrokhi/dnsdiag

farrokhi

10 lat temudiscuss

Perhaps they accidentally lifted the blocking rules. Or it will drop as soon as they upgrade their censorship software.

farrokhi

10 lat temudiscuss

Yes, but that is not the official client.

farrokhi

10 lat temudiscuss

I wish their client had first class support for other operating systems like FreeBSD. Current client is too debian/ubuntu specific.

farrokhi

10 lat temudiscuss

This is very interesting that "accidentally" all the parts have distinctive marks that can be linked to a B777 aircraft.

farrokhi

15 lat temudiscuss

wasn't this obvious from the beginning? And the same would happen to RockMelt as well.

Submissions

Tools to detect if your ISP is hijacking your DNS traffic

Is your ISP hijacking your DNS traffic?

DNS Diagnostics and Performance Measurement Tools (ping and Traceroute)

comments