┌──────────────────────────────────────────────────────────────────────────────┐ │ DWS dns.dws.rip AS30179 | 2602:f4e8::/40 *│ │ [DWS] [DNS] [NTP] [SONAR] [GLASS] [STATUS] │ ├──────────────────────────────────────────────────────────────────────────────┤ │ Free, private, recursive DNS with ad blocking. │ │ Encrypted via DoH, DoT, and DoQ. DNSSEC on every query. │ │ No logging. No PII. IPv4 anycast from 157.254.184.53. │ │ │ │ QUERIES TOTAL 24,113,237 since 21h ago │ │ │ │ blocked 0.0% ░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ │ │ cached 99.5% ███████████████████████████████░ │ │ dnssec ✓ validating │ │ protocol dns 24,106,934 dot 29 doh 6,276 doq 0 │ │ │ ├─ SERVERS ────────────────────────────────────────────────────────────────────┤ │ │ │ NODE IPv4 LOCATION STATUS QUERIES │ │ ────────────────────────────────────────────────────────────── │ │ │ │ US-04 173.199.127.44 United States UP 753,857 │ │ EU-10 118.91.187.140 Netherlands UP 14,281 │ │ NL-11 45.157.118.160 Netherlands UP 23,345,099 │ │ │ ├─ CONNECT ────────────────────────────────────────────────────────────────────┤ │ │ │ Protocol Address Port │ │ ────────────────── ─────────────────────────── ──── │ │ Anycast DNS 157.254.184.53 53 │ │ Anycast IPv6 2602:f4e8::53 53 │ │ DoT dns.dws.rip 853 │ │ DoH dns.dws.rip/dns-query 8443 │ │ DoQ dns.dws.rip 8853 │ │ Apple profile /dws-dns.mobileconfig — │ │ │ │ DNS-over-QUIC: almost nobody offers public DoQ. │ │ Cloudflare, Google, and Quad9 don't. We do. │ │ │ │ BGP anycast: 157.254.184.53 announced from 4 locations. │ │ Internet routes your query to the nearest node automatically. │ │ │ ├─ SETUP ──────────────────────────────────────────────────────────────────────┤ │ │ │ Linux (systemd-resolved) ────────────────────────────────────────────────── │ │ │ │ # /etc/systemd/resolved.conf.d/dws.conf │ │ [Resolve] │ │ DNS=157.254.184.53#dns.dws.rip │ │ FallbackDNS=173.199.127.44#dns.dws.rip │ │ DNSOverTLS=yes │ │ │ │ $ sudo systemctl restart systemd-resolved │ │ │ │ Plain DNS (no encryption): │ │ │ │ DNS=157.254.184.53 173.199.127.44 │ │ DNSOverTLS=no │ │ │ │ Linux (NetworkManager) ──────────────────────────────────────────────────── │ │ │ │ $ nmcli con mod "Wired" ipv4.dns "157.254.184.53" │ │ $ nmcli con mod "Wired" ipv4.dns-over-tls yes │ │ $ nmcli con up "Wired" │ │ │ │ Android 9+ ──────────────────────────────────────────────────────────────── │ │ │ │ Private DNS (DoT — recommended): │ │ │ │ Settings > Network > Private DNS > dns.dws.rip │ │ │ │ Plain DNS: │ │ │ │ Settings > Network > Wi-Fi > Advanced > DNS │ │ 157.254.184.53 │ │ │ │ iOS / macOS ─────────────────────────────────────────────────────────────── │ │ │ │ DoH profile (recommended): │ │ │ │ Download: https://dns.dws.rip/dws-dns.mobileconfig │ │ Settings > General > VPN & Device Management > Install │ │ │ │ Manual: │ │ │ │ System Settings > Network > DNS > Add Server │ │ 157.254.184.53 │ │ │ │ Windows 10/11 ───────────────────────────────────────────────────────────── │ │ │ │ DoH (recommended): │ │ │ │ Settings > Network > DNS > Manual │ │ Preferred: `157.254.184.53` │ │ DNS over HTTPS: On (automatic template) │ │ │ │ Browser (DoH) ───────────────────────────────────────────────────────────── │ │ │ │ Firefox: Settings > Privacy > DNS over HTTPS > Custom │ │ Chrome: Settings > Privacy > Use Secure DNS > Custom │ │ │ │ Enter: https://dns.dws.rip:8443/dns-query │ │ │ │ Router ──────────────────────────────────────────────────────────────────── │ │ │ │ Admin > DHCP/DNS > DNS Servers │ │ 157.254.184.53 │ │ │ │ OpenWrt DoT via stubby: │ │ │ │ upstream_recursive_servers: │ │ - address_data: 157.254.184.53 │ │ tls_auth_name: "dns.dws.rip" │ │ │ │ DNS over QUIC ───────────────────────────────────────────────────────────── │ │ │ │ DoQ on port 8853. Client support is emerging. │ │ │ │ kdig +quic -p 8853 @dns.dws.rip example.com │ │ │ ├─ BLOCKLISTS ─────────────────────────────────────────────────────────────────┤ │ │ │ List Domains │ │ ────────────────── ──────────── │ │ OISD Big ~250k │ │ Hagezi Multi ~180k │ │ Combined ~405k unique │ │ │ │ Updated every 24h. Sources: code.dws.rip (https://code.dws.rip) │ │ │ ├─ INFRASTRUCTURE ─────────────────────────────────────────────────────────────┤ │ │ │ IPv4 anycast: 157.254.184.53 announced via BGP from │ │ US-04 (Vultr), NL-11 (Virtua Amsterdam), FR-12 (Virtua Frankfurt) │ │ │ │ IPv6 anycast: 2602:f4e8::53 announced from 4 BGP speakers │ │ │ │ dnsdist frontend — packet cache, rate limiting, ad-blocking │ │ Unbound backend — DNSSEC, QNAME minimisation, recursive │ │ Built from source with quiche 0.23.4 for DoQ support. │ │ │ ├──────────────────────────────────────────────────────────────────────────────┤ │ │ │ |\__/,| (`\ │ │ _.|o o |_ ) ) Independent infrastructure on AS30179. │ │ -(((---(((-------- No logging. No PII. Source: code.dws.rip │ │ │ │ [dws.rip] [ntp] [dns] [sonar] [glass] [status] │ │ │ │ It's your internet, take it back. │ │ DWS.RIP | AS30179 | 2602:f4e8::/40 (c) 2026 │ └──────────────────────────────────────────────────────────────────────────────┘