Software:1.1.1.1
Developer(s) | Cloudflare |
---|---|
Initial release | April 1, 2018[1] |
Stable release | |
Platform | Android, iOS, Linux, macOS, Windows |
Website | 1 |
1.1.1.1 is a free Domain Name System (DNS) service by the American company Cloudflare in partnership with APNIC.[7][needs update] The service functions as a recursive name server, providing domain name resolution for any host on the Internet. The service was announced on April 1, 2018.[8] On November 11, 2018, Cloudflare announced a mobile application of their 1.1.1.1 service for Android and iOS.[9] On September 25, 2019, Cloudflare released WARP, an upgraded version of their original 1.1.1.1 mobile application.[10]
Service
The 1.1.1.1 DNS service operates recursive name servers for public use at the twelve IP addresses listed below.[11] These addresses are mapped to the nearest operational server by anycast routing.[12] The DNS service is also available for Tor clients.[13] Users can set up the service by manually changing their DNS resolvers to the IP addresses below. Mobile users on both Android and iPhone have the alternative of downloading the 1.1.1.1 mobile application, which automatically configures the DNS resolvers on the device.[14]
1.1.1.1 | 1.1.1.1 for Families | ||
---|---|---|---|
Filters domains | No[15] | Yes[16] | |
Passes ECS | No | ||
Validates DNSSEC | Yes | Yes | |
Via DoH | https://cloudflare-dns.com/dns-query[17] | https://security.cloudflare-dns.com/dns-query | https://family.cloudflare-dns.com/dns-query |
Via DoT | 1dot1dot1dot1.cloudflare-dns.com[18] or one.one.one.one | security.cloudflare-dns.com | family.cloudflare-dns.com |
Via IPv4 | 1.1.1.1 1.0.0.1 |
1.1.1.2 1.0.0.2 |
1.1.1.3 1.0.0.3 |
Via IPv6 | 2606:4700:4700::1111 2606:4700:4700::1001 |
2606:4700:4700::1112 2606:4700:4700::1002 |
2606:4700:4700::1113 2606:4700:4700::1003 |
Technology
1.1.1.1 is a recursive DNS resolver. Cloudflare runs an authoritative DNS resolver with a network of over 20 million Internet properties. With the recursor and the resolver on the same network, some DNS queries can be answered directly.[third-party source needed]
With the release of the 1.1.1.1 mobile application in November 2018, Cloudflare added the ability for users to encrypt their DNS queries over HTTPS (DoH) or TLS (DoT).[19] Later on, a VPN tunnel was implemented based on Cloudflare's own BoringTun, a user space implementation of WireGuard written in Rust.[20][21][22]
Prior usage of the IP address
Technology websites noted that by using 1.1.1.1 as the IP address for its service, Cloudflare exposed misconfigurations in existing setups that violated Internet standards (such as RFC 1918). 1.1.1.1 was not a reserved IP address, yet was abused by many existing routers (mostly those sold by Cisco Systems) and companies for hosting login pages to private networks, exit pages or other purposes, rendering the proper routing of 1.1.1.1 impossible on those systems.[23][24] Additionally, 1.1.1.1 is blocked on many networks and by multiple ISPs because the simplicity of the address means that it was previously often used inappropriately for testing purposes and not legitimate use.[23] These previous uses have led to a huge influx of garbage data to Cloudflare's servers.[24]
Cleanup of 1.1.1.1 and 1.0.0.1
The 1.0.0.0/8 IP block was assigned in 2010 to APNIC;[25] before this time it was unassigned space.[26] An unassigned IP space, however is not the same as a reserved IP space for private use (called a reserved IP address).[27] For example, AT&T has said it is working on fixing this issue[non sequitur][28] within its CPE hardware.
WARP
In September 2019, Cloudflare released a VPN service called WARP which is built into the 1.1.1.1 app.[29][30][14] WARP is based on Cloudflare's own WireGuard implementation written in Rust called BoringTun.[31] It tunnels the connection between device and nearest Cloudflare data center, increasing connection speed, encrypting data and DNS requests.[10] Connection speed gain is achieved by converting TCP to UDP traffic (both IPv4, IPv6 are supported), DNS resolution inside Cloudflare's network, direct access to sites which are using Cloudflare's infrastructure.[32]
As VPN exit points are located inside the nearest data center, WARP will not provide access to geo-restricted content. Additionally, users' real IP addresses will be revealed to Cloudflare's CDN clients, so WARP cannot be considered an anonymity measure.
WARP+
WARP+ routes users' internet traffic into less congested pathways using Cloudflare's own private backbone called Argo, which makes it much faster than basic WARP. WARP+ is a limited data plan, to get more data to use WARP+, users must refer more people to use the service.[10][30][33]
WARP+ Unlimited
WARP+ Unlimited is a paid monthly subscription service to secure more data to use for WARP+ without any data limits.[30][33]
See also
References
- ↑ "Cloudflare launches 1.1.1.1 DNS service that will speed up your internet". Vox Media, LLC. 1 April 2018. https://www.theverge.com/2018/4/1/17185732/cloudflare-dns-service-1-1-1-1.
- ↑ "1.1.1.1 + WARP: Safer Internet". Cloudflare, Inc. 1 September 2023. https://play.google.com/store/apps/details?id=com.cloudflare.onedotonedotonedotone.
- ↑ "1.1.1.1: Faster Internet". Cloudflare Inc.. 1 September 2023. https://apps.apple.com/us/app/1-1-1-1-faster-internet/id1423538627.
- ↑ "WARP Linux Client". 8 April 2023. https://pkg.cloudflareclient.com/packages/cloudflare-warp.
- ↑ "WARP macOS Client". Cloudflare. 28 September 2023. https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-macos-1/distribution_groups/release.
- ↑ "WARP Windows Client". Cloudflare. 28 September 2023. https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release.
- ↑ Huston, Geoff (April 2, 2018). "APNIC Labs enters into a research agreement with Cloudflare". https://blog.apnic.net/2018/04/02/apnic-labs-enters-into-a-research-agreement-with-cloudflare/.
- ↑ Cloudflare launches 1.1.1.1 DNS service that will speed up your internet The Verge, April 1, 2018
- ↑ Cimpanu, Catalin. "Cloudflare launches Android and iOS apps for its 1.1.1.1 service | ZDNet" (in en). https://www.zdnet.com/article/cloudflare-launches-android-and-ios-apps-for-its-1-1-1-1-service/.
- ↑ 10.0 10.1 10.2 "WARP is here (sorry it took so long)" (in en). 2019-09-25. https://blog.cloudflare.com/announcing-warp-plus/.
- ↑ Setting Up 1.1.1.1 Speed
- ↑ Introducing DNS Resolver, 1.1.1.1 (not a joke) DNS resolver, 1.1.1.1, is served by Cloudflare’s Global Anycast Network.
- ↑ "Introducing DNS Resolver for Tor". Cloudflare. June 5, 2018. https://blog.cloudflare.com/welcome-hidden-resolver/.
- ↑ 14.0 14.1 "1.1.1.1 — The free app that makes your Internet faster." (in en-US). https://1.1.1.1/.
- ↑ "Does 1.1.1.1 do web content filtering like Cisco's OpenDNS?" (in en-US). 2018-11-11. https://community.cloudflare.com/t/does-1-1-1-1-do-web-content-filtering-like-ciscos-opendns/43780.
- ↑ "Introducing 1.1.1.1 for Families" (in en-US). 2020-04-01. https://blog.cloudflare.com/introducing-1-1-1-1-for-families/.
- ↑ "Making requests". https://developers.cloudflare.com/1.1.1.1/dns-over-https/request-structure.
- ↑ "DNS over TLS · 1.1.1.1 docs". https://developers.cloudflare.com/1.1.1.1/encrypted-dns/dns-over-tls#how-it-works.
- ↑ "Introducing Warp: Fixing Mobile Internet Performance and Security" (in en). 2019-04-01. https://blog.cloudflare.com/1111-warp-better-vpn/.
- ↑ Krasnov, Vlad (2018-12-18). "BoringTun, a userspace WireGuard implementation in Rust" (in en-US). https://blog.cloudflare.com/boringtun-userspace-wireguard-rust/.
- ↑ "CloudFlare Launches "BoringTun" As Rust-Written WireGuard User-Space Implementation". https://www.phoronix.com/scan.php?page=news_item&px=CloudFlare-BoringTun-WireGuard.
- ↑ "The Technical Challenges of Building Cloudflare WARP" (in en). 2019-09-25. https://blog.cloudflare.com/warp-technical-challenges/.
- ↑ 23.0 23.1 Cherry, Denny (April 5, 2018). "5 reasons Cloudflare's roll-out of 1.1.1.1 has been a disaster" (in en-US). Tech Target. https://itknowledgeexchange.techtarget.com/sql-server/5-reasons-cloudflare-putting-1-1-1-1-horrible/.
- ↑ 24.0 24.1 "1.1.1.1: Cloudflare's new DNS attracting 'gigabits per second' of rubbish" (in en). ZDNet. April 4, 2018. https://www.zdnet.com/article/1-1-1-1-cloudflares-new-dns-attracting-gigabits-per-second-of-rubbish/.
- ↑ "1/8 and 27/8 allocated to APNIC" (in en). NANOG. January 21, 2010. http://seclists.org/nanog/2010/Jan/776.
- ↑ List of assigned /8 IPv4 address blocks
- ↑ Fixing reachability to 1.1.1.1, GLOBALLY!, by Marty Strong, April 10, 2018
- ↑ "Tweet by @billplein, 3 April 2018". https://twitter.com/billplein/status/981333404397588480.
- ↑ Khalid, Amrita (April 2, 2019). "Cloudflare's privacy-focused DNS app adds a free VPN". https://www.engadget.com/2019/04/01/cloudflares-privacy-focused-dns-app-adds-a-free-vpn/.
- ↑ 30.0 30.1 30.2 Humphries, Matthew (September 26, 2019). "Cloudflare Finally Launches Warp, But It's Not a Mobile VPN" (in en). https://www.pcmag.com/news/370979/cloudflare-finally-launches-warp-but-its-not-a-mobile-vpn.
- ↑ "BoringTun, a userspace WireGuard implementation in Rust" (in en). 2019-03-27. http://blog.cloudflare.com/boringtun-userspace-wireguard-rust/.
- ↑ "The Technical Challenges of Building Cloudflare WARP" (in en). 2019-09-25. http://blog.cloudflare.com/warp-technical-challenges/.
- ↑ 33.0 33.1 "What is the difference between WARP, WARP+, and WARP+ Unlimited?". https://support.cloudflarewarp.com/hc/en-us/articles/360025731113.
External links
- The Cloudflare Blog
- Cloudflare Docs: Setting up 1.1.1.1
- Cloudflare Docs: 1.1.1.1 Public DNS Resolver