跳到正文
ipaddress.ae

公共 DNS 解析器

我们的 DNS 传播检查所查询的解析器、其运营方公布的信息，以及它们当前是否应答。

公共 DNS 解析器
解析器地址加密 DNS验证 DNSSEC对我们服务器的应答
Cloudflare
  • DoH https://cloudflare-dns.com/dns-query
  • DoT one.one.one.one
是21 毫秒
Google Public DNS
  • DoH https://dns.google/dns-query
  • DoT dns.google
是20 毫秒
Quad9
  • DoH https://dns10.quad9.net/dns-query
  • DoT dns10.quad9.net
是9 毫秒
Cisco OpenDNS
  • DoH https://doh.opendns.com/dns-query
是18 毫秒
AdGuard DNS (non-filtering)
  • DoH https://unfiltered.adguard-dns.com/dns-query
  • DoT unfiltered.adguard-dns.com
是31 毫秒
Control D (unfiltered)
  • DoH https://freedns.controld.com/p0
  • DoT p0.freedns.controld.com
是21 毫秒

于 2026年10月30日 21:52 从我们的服务器测量，最多每五分钟一次：查询 ietf.org 到每个解析器第一个 IPv4 地址的往返时间，以及 DNSSEC 验证——进行验证的解析器会认证 ietf.org，并拒绝签名被故意破坏的 dnssec-failed.org。这只说明服务是否应答，而不是它对你来说有多快：你的查询会到达各运营方 anycast 网络中离你最近的节点。

地址和加密 DNS 端点均以各运营方公布的信息为准（2026 年 10 月核实）。若运营方也提供带过滤的地址，此处列出的是不过滤的地址。

你的运营商的解析器

除非你自行更改，路由器或手机会使用互联网运营商通过 DHCP 下发的解析器。其地址因网络而异，此处不列出。DNS 查询工具会显示是哪台解析器应答了我们自己的查询；要查看你的解析器，请在设备上执行查询（nslookup example.com，或在 Linux 上执行 resolvectl status）。

如何选择解析器

解析器能看到你的设备查询的每一个名称。优先选择你读过其隐私政策的运营方；在设备支持时使用 DNS over HTTPS 或 TLS；如果你依赖 DNSSEC，请选择会进行验证的解析器。有些网络——工作场所、学校、酒店和公共 Wi-Fi——要求使用它们自己的解析器，在那里更改可能导致无法访问。

此内容尚无中文（中国）版本。在发布译文之前以英语显示。

A recursive resolver is the DNS server that answers your device’s questions: it walks from the root zone down to the domain’s own name servers, caches the answer and hands it back. Every website visit starts with one.

By default your device uses the resolver your internet provider assigns. Public resolvers are an alternative run by other operators. They differ in four ways that matter:

  • Addresses. Each has easy IPv4 and IPv6 addresses, announced by anycast from many locations, so you reach a nearby node.
  • Encryption. Classic DNS travels unencrypted over UDP port 53. DNS over TLS (DoT, port 853) and DNS over HTTPS (DoH) encrypt the questions between your device and the resolver.
  • DNSSEC validation. A validating resolver checks DNSSEC signatures and refuses tampered answers for signed zones. It cannot help for unsigned zones — including every name under .ae, which is not signed today.
  • Filtering. Some addresses block malware or adult content; the ones listed here are the operators’ unfiltered addresses where they offer a choice.

The live column is measured from our server, not from you, and only tells you whether each service answers right now.

常见问题

Will a public resolver make my internet faster?

Sometimes slightly, often not. Your provider's resolver is usually closer; a public one may have a warmer cache. Measure from your own device before deciding.

Does changing DNS hide my browsing?

Encrypted DNS hides the names you look up from the network in between, but the resolver operator still sees them, and your provider still sees the addresses you connect to.

Can I use these resolvers in the UAE?

Network policies differ between providers and networks, and some networks require their own resolver. Check your provider's terms and your organisation's IT policy.

相关内容