Cloudflare, Inc. · AS13335
Launched on 1 April 2018, Cloudflare’s public DNS at 1.1.1.1 is positioned as the privacy-focused alternative to ISP and Google DNS. Cloudflare partnered with APNIC, the Asia-Pacific regional internet registry that owns 1.1.1.0/24, to run the service. KPMG audits Cloudflare’s privacy practices annually and publishes the report publicly.
1.1.1.1 is popular with privacy-conscious users, journalists, and developers. Cloudflare also offers the 1.1.1.1 + WARP mobile app, which acts as a free VPN to Cloudflare’s edge. The 1.1.1.1 for Families variants (1.1.1.2 and 1.1.1.3) add malware and adult content blocking respectively.
1.1.1.1 is part of 1.1.1.0/24, announced via anycast from over 300 Cloudflare points of presence. The service supports plain DNS (UDP/TCP 53), DNS-over-TLS on port 853, and DNS-over-HTTPS at cloudflare-dns.com. DNSSEC validation is on by default. Latency is among the lowest of any public resolver in independent benchmarks like DNSPerf.
Cloudflare publishes that it does not log client IPs, does not sell or share query data, and discards full DNS query logs within 24 hours (retaining only anonymized aggregates for trend analysis and abuse mitigation). Annual KPMG audits verify these claims.
Cloudflare commits publicly, and KPMG audits annually. Privacy is fundamentally a matter of trust in the operator — but Cloudflare’s policies are stronger than most ISPs and Google.
Often yes by 1-10 ms in benchmarks, but real-world difference depends on your location and ISP routing.
1.1.1.2 blocks known malware. 1.1.1.3 additionally blocks adult content. Useful for households and small offices.
Location data not available