跳到正文
ipaddress.tr

公共DNS解析器

我们的DNS传播检查所查询的解析器、其运营方公布的详情，以及它们此刻是否应答。

公共DNS解析器
解析器地址加密DNS验证DNSSEC从我们服务器的应答
Cloudflare
  • DoH https://cloudflare-dns.com/dns-query
  • DoT one.one.one.one
是18 ms
Google Public DNS
  • DoH https://dns.google/dns-query
  • DoT dns.google
是18 ms
Quad9
  • DoH https://dns10.quad9.net/dns-query
  • DoT dns10.quad9.net
是13 ms
Cisco OpenDNS
  • DoH https://doh.opendns.com/dns-query
是18 ms
AdGuard DNS (non-filtering)
  • DoH https://unfiltered.adguard-dns.com/dns-query
  • DoT unfiltered.adguard-dns.com
是21 ms
Control D (unfiltered)
  • DoH https://freedns.controld.com/p0
  • DoT p0.freedns.controld.com
是20 ms

于 2026年11月7日 17:43 从我们的服务器测得，最多每五分钟一次：向每个解析器的第一个IPv4地址查询 ietf.org 的往返时间，以及DNSSEC验证——验证型解析器会认证 ietf.org 并拒绝签名被故意破坏的 dnssec-failed.org。它表明服务是否应答，而不是对你来说有多快：你的查询会到达各运营方任播网络中最近的节点。

地址和加密DNS端点以各运营方公布的为准（2026年10月核对）。如果运营方还提供过滤地址，这里列出的是不过滤的地址。

你的运营商的解析器

除非你更改，你的路由器或手机会使用互联网运营商通过DHCP下发的解析器。其地址因网络而异，这里未列出。DNS查询工具会显示应答我们查询的解析器；要查看你自己的，请在设备上查询（nslookup example.com，或在Linux上用 resolvectl status）。

如何选择解析器

解析器能看到你的设备查询的每一个名称。请选择你读过其隐私政策的运营方，在设备支持时使用DNS over HTTPS或TLS，若依赖DNSSEC则选择验证型解析器。有些网络——工作场所、学校、酒店和公共Wi-Fi——要求使用其自有解析器，在那里更改可能导致无法访问。

此内容尚无中文（中国）版本。在发布译文之前以英语显示。

A recursive resolver is the DNS server that answers your device’s questions: it walks from the root zone down to the domain’s own name servers, caches the answer and hands it back. Every website visit starts with one.

By default your device uses the resolver your internet provider assigns. Public resolvers are an alternative run by other operators. They differ in four ways that matter:

  • Addresses. Each has easy IPv4 and IPv6 addresses, announced by anycast from many locations, so you reach a nearby node.
  • Encryption. Classic DNS travels unencrypted over UDP port 53. DNS over TLS (DoT, port 853) and DNS over HTTPS (DoH) encrypt the questions between your device and the resolver.
  • DNSSEC validation. A validating resolver checks DNSSEC signatures and refuses tampered answers for signed zones. It cannot help for unsigned zones. The .tr zone itself is signed, so a validating resolver can check every signed name under it — although most .tr domains are not signed yet.
  • Filtering. Some addresses block malware or adult content; the ones listed here are the operators’ unfiltered addresses where they offer a choice.

The live column is measured from our server, not from you, and only tells you whether each service answers right now.

常见问题

Will a public resolver make my internet faster?

Sometimes slightly, often not. Your provider's resolver is usually closer; a public one may have a warmer cache. Measure from your own device before deciding.

Does changing DNS hide my browsing?

Encrypted DNS hides the names you look up from the network in between, but the resolver operator still sees them, and your provider still sees the addresses you connect to.

Can I use these resolvers in Türkiye?

Yes, technically: they are reachable from Turkish networks like any other. Some networks — workplaces, schools, some public Wi-Fi — require their own resolver, so check your organisation's IT policy before changing it there.

相关内容