Public DNS

Features

Announcements

• 2021/Oct/01 ‐ Fixed Let's Encrypt outdated cross-signed certificates by removing the obsolete trust anchor.
• 2021/May/03 ‐ Changed server locations and IP addresses of phdns2 and phdns3. Old IPs will go offline soon.
• 2021/Apr/29 ‐ Added new server phdns5.lonet.org located in Great Britain, Great Britain.
• 2021/Apr/27 ‐ Added new server phdns4.lonet.org located in Spain, Spain.
• 2020/Nov/08 ‐ Added round-robin DNS dot.dns.lonet.org for DNS-over-TLS service including both servers located in germany.
• 2020/Nov/07 ‐ Official start of dns.lonet.org public beta test offering DoH, DoT and DNScrypt services.

Disclaimer

Use of this service is at your own risk. Under no circumstances will the operator be held responsible or liable in any way for any claims, damages, losses, expenses, costs or liabilities whatsoever (including, without limitation, any direct or indirect damages for loss of profits, business interruption or loss of information) resulting or arising directly or indirectly from accessing or otherwise using this service. The operator does not guarantee in any way the access, availability and continuity of the functioning of this service. By using this website and service you consent to the disclaimer and agree to its terms and conditions. By using Cloudflare this website stores a cookie, created and evaluated by Cloudflare. This cookie is strictly necessary for Cloudflare's security features and cannot be turned off.

Service list

Service	IPv4	IPv6	Port	Loc.	Access	Remarks
DNS	185.183.156.85	2a03:4000:1d:998:10::	53		closed	Please register to get access.
DNS	217.160.191.192	2001:8d8:1801:305::1	53		closed	Please register to get access.
DNS	74.208.85.60	2607:f1c0:1800:1e3::1	53		closed	Please register to get access.
DNS	82.223.114.172	2001:ba0:1800:8153::1	53		closed	Please register to get access.
DNS	77.68.116.22	2a00:da00:1800:5a::1	53		closed	Please register to get access.
DNS-over-HTTPS	https://doh.phdns1.lonet.org/dns-query		443		open	Strict TLS SNI only
DNS-over-HTTPS	https://doh.phdns2.lonet.org/dns-query		443		open	Strict TLS SNI only
DNS-over-HTTPS	https://doh.phdns3.lonet.org/dns-query		443		open	Strict TLS SNI only
DNS-over-HTTPS	https://doh.phdns4.lonet.org/dns-query		443		open	Strict TLS SNI only
DNS-over-HTTPS	https://doh.phdns5.lonet.org/dns-query		443		open	Strict TLS SNI only
DNS-over-TLS	185.183.156.85	2a03:4000:1d:998:10::	853		open	TLS hostname: phdns1.lonet.org
DNS-over-TLS	217.160.191.192	2001:8d8:1801:305::1	853		open	TLS hostname: phdns2.lonet.org
DNS-over-TLS	74.208.85.60	2607:f1c0:1800:1e3::1	853		open	TLS hostname: phdns3.lonet.org
DNS-over-TLS	82.223.114.172	2001:ba0:1800:8153::1	853		open	TLS hostname: phdns4.lonet.org
DNS-over-TLS	77.68.116.22	2a00:da00:1800:5a::1	853		open	TLS hostname: phdns5.lonet.org
DNScrypt	185.183.156.85	2a03:4000:1d:998:10::	8443		open	sdns://AQMAAAAAAAAADjE4NS4xODMuMTU2Ljg1ABBwaGRuczEubG9uZXQub3Jn
DNScrypt	217.160.191.192	2001:8d8:1801:305::1	8443		open	sdns://AQMAAAAAAAAACzUwLjcuMTI0LjI0ABBwaGRuczIubG9uZXQub3Jn
DNScrypt	74.208.85.60	2607:f1c0:1800:1e3::1	8443		open	sdns://AQMAAAAAAAAADTIzLjIzNy41OC4xMjEAEHBoZG5zMy5sb25ldC5vcmc
DNScrypt	82.223.114.172	2001:ba0:1800:8153::1	8443		open	sdns://AQMAAAAAAAAADjgyLjIyMy4xMTQuMTcyABBwaGRuczQubG9uZXQub3Jn
DNScrypt	77.68.116.22	2a00:da00:1800:5a::1	8443		open	sdns://AQMAAAAAAAAADDc3LjY4LjExNi4yMgAQcGhkbnM1LmxvbmV0Lm9yZw

Registration

You have to configure a custom dynamic DNS service (i.e. in your router or firewall) for accessing restricted services. In order to register for this free service send an inquiry containing your desired username for dynamic DNS or your static IP address (range). The dynamic host is derrived from your username and will be like username.lonet.uk.to. Currently only users with an IPv4 address can apply.

Tutorials

• AVM FritzBox - DNS server: https://en.avm.de/service/knowledge-base/dok/FRITZ-Box-7360-int/165_Configuring-different-DNS-servers-in-the-FRITZ-Box/
• AVM FritzBox - Dynamic DNS: https://en.avm.de/service/knowledge-base/dok/FRITZ-Box-4040/30_Setting-up-dynamic-DNS-in-the-FRITZ-Box//
• AVM FritzBox - DNS over TLS - https://en.avm.de/service/knowledge-base/dok/FRITZ-Box-7590/165_Configuring-different-DNS-servers-in-the-FRITZ-Box/
• Netgate pfSense - DNS server: https://docs.netgate.com/pfsense/en/latest/config/general.html#dns-server-settings
• Netgate pfSense - Dynamic DNS: https://docs.netgate.com/pfsense/en/latest/services/dyndns/client.html
• Android 9 (or higher) - DNS server: https://developers.google.com/speed/public-dns/docs/using#android ‐ Instead of dns.google use one of the DNS-over-TLS service hostnames from the list above.
• Android (alternative) - DNS server: Download Intra from Google Play store and configure the app to use one of the DNS-over-HTTPS addresses from the list above.
• Apple iPhone - DNS server: https://apps.apple.com/app/dnscloak-secure-dns-client/id1452162351

Service status

All five servers have served 1,085,734 DNS queries from clients in the past 24 hours. About 1.8% of these queries have been filtered for advertising, tracking or malware. The current privacy level for all servers is set to maximum privacy. This indicates that all servers operate in anonymous no logging mode where no client IPs or client requests are logged.

Curently 25 of 25 services are operational. You can check the status and 90 days uptime history of all services provided at the status page.

Current	phdns1	phdns2	phdns3	phdns4	phdns5
Filter status	Enabled	Enabled	Enabled	Enabled	Enabled
IPv4 connectivity
IPv6 connectivity
Cache latency	8 ms	1 ms	1 ms	0 ms	0 ms
Average latency	69 ms	86 ms	109 ms	121 ms	110 ms
Recursor latency	79 ms	97 ms	114 ms	128 ms	116 ms
DNS availability
DoH availability
DoT availability
DNScrypt availability
Todays service uptime	100 %	100 %	100 %	100 %	100 %
Yesterdays service uptime	100 %	100 %	100 %	100 %	100 %
30d service uptime	100 %	100 %	99.995 %	99.995 %	100 %
90d service uptime	99.999 %	99.999 %	99.998 %	99.771 %	99.960 %
Blocked domains	1,080,682	1,080,682	1,080,682	1,080,682	1,080,682
Privacy level	Maximum	Maximum	Maximum	Maximum	Maximum
Last filter update	2023/09/28	2023/09/28	2023/09/28	2023/09/28	2023/09/28
Last 24h
Total DNS queries	405,318	219,618	101,418	102,092	257,288
Ads blocked	(6.1 %) 24,886	(1.2 %) 2,689	(0.1 %) 92	(0.2 %) 154	(1.6 %) 4,097
Queries forwarded	332,715	192,554	97,559	96,425	241,207
Queries cached	(11.8 %) 47,717	(11.1 %) 24,374	(3.7 %) 3,763	(5.4 %) 5,512	(4.7 %) 11,975
UNKNOWN responses	310	156	89	65	170
NODATA responses	43,228	24,744	11,329	12,576	29,859
NXDOMAIN responses	53,392	29,348	11,338	12,720	34,479
CNAME responses	25,031	12,292	3,393	4,623	14,625
IP responses	97,755	44,849	14,844	14,893	37,403
DOMAIN responses	20,624	9,340	3,607	4,300	11,054
RRNAME responses	1	0	0	0	1
SERVFAIL responses	158,737	94,424	54,430	50,152	124,831
DNSSEC responses	5,668	4,155	2,225	2,582	4,563
BLOB responses	572	310	163	181	303

DNS response latency matrix

Latency to from	Amsterdam	New York	Frankfurt	Los Angeles
phdns1.lonet.org	11 ms	100 ms	15 ms	156 ms
phdns2.lonet.org	17 ms	97 ms	3 ms	156 ms
phdns3.lonet.org	104 ms	25 ms	115 ms	36 ms
phdns4.lonet.org	38 ms	112 ms	31 ms	172 ms
phdns5.lonet.org	10 ms	84 ms	19 ms	160 ms
Cloudflare DNS	6 ms	19 ms	3 ms	0 ms
Google DNS	9 ms	18 ms	3 ms	0 ms
Quad9 DNS	1 ms	17 ms	0 ms	0 ms
Open DNS	5 ms	16 ms	7 ms	40 ms
Neustar DNS	0 ms	8 ms	7 ms	8 ms
Control D DNS	7 ms	3 ms	3 ms	4 ms
Verisign DNS	1 ms	32 ms	0 ms	4 ms

Filter lists

The blocklist database containing 1,080,682 blocked domains has been updated 0 days, 4 hours and 10 minutes ago.

Requests for whitelisting or delisting a domain will be ignored. If you want your domain delisted: Figure out which blocklist contains your domain and refer to the policies of this list for delisting.

Donations

If you like you can donate a small amount via PayPal to keep this service up and running.