Cloudflare DNS
Ranked 2 of 7 DNS resolvers by recommenders
Criticized more than recommended: critics distrust the company over US legal exposure and past blocking; those who recommend it see it as a fast, free, simple resolver that works reliably and is easy to set up.
39 people recommended Cloudflare DNS in Hacker News comments, 8 had mixed feelings and 51 criticized it, November 2025 to October 2026.
Summary written by Claude from the comments below.
98 people gave an opinion
- recommend it
- 39
- mixed feelings
- 8
- warn against or regret it
- 51
The record
Recommended in 11 of 12 months
In 33 different threads.
- November 2025: recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: recommended
- May 2026: not recommended
- June 2026: recommended
- July 2026: recommended
- August 2026: recommended
- September 2026: recommended
- October 2026: recommended
Why it doesn’t carry the badge
- 39 people recommend itNeeds 10 or more, met.
- 0.7 recommenders for every criticNeeds 2 to 1 or better, not met.
- Recommended in 11 of 12 monthsNeeds 4 or more, met.
- Recommended in 33 threadsNeeds 5 or more, met.
- The biggest thread supplies 10% of its recommendersNeeds half or less, met.
The same rules apply to every product, and the badge can’t be bought. Mixed feelings count toward neither side. How the badge works
What people say about it
Reasons grouped from a sample of 40 of the 111 opinions about it, picked in proportion to how many people recommend it, have mixed feelings and criticize it. Each mark is one comment in the sample. Open a reason to read what they said.
What people warn about
Each mark is one comment
Distrust over politics and legal exposure
“Instead of being a neutral web infra, they actively participate in political agendas and censor things they "think" is wrong.”
Comment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2” “subject to the whim of the provider, who subject to court orders would have to oblige to continue operating as US entity”
Comment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2” “The fact that Cloudflare and Google have convinced us all to use Cloudflare's and Google's resolvers is the problem.”
Comment from 6 May 2026 in “.de TLD offline due to DNSSEC?” - Comment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”
Blocks or fails some domains
“Yesterday 1.1.1.1 failed to resolved "theinformation.com" (hosted on CF itself!) for many hours, answering NXDOMAIN.”
Comment from 28 Jun 2026 in “Choosing a Public DNS Resolver” “Many years ago I used Cloudflare, and more than once I had issues with them blocking websites I wanted to access.”
Comment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2” “Cloudflare DNS isn't fully functional (at least for me). Can't be used for general purpose DNS hosting imho.”
Comment from 19 Feb 2026 in “DNS-Persist-01: A New Model for DNS-Based Challenge Validation” - Comment from 27 Aug 2026 in “Saving 100 terabytes of memory by optimizing 1.1.1.1's DNS cache”
Record handling deviates from RFC
“Cloudflare does not forward EDNS to the origin, so the records it returns are suboptimal for services that use DNS-based service affinity”
Comment from 19 Nov 2025 in “Show HN: DNS Benchmark Tool – Compare and monitor resolvers” “CloudFlare really doesn't understand RFC1034, their DNS authoritative interface only blocks A and AAAA if there is a CNAME defined”
Comment from 19 Jan 2026 in “What came first: the CNAME or the A record?” “it's really not okay that CloudFlare allows setting up other record types (e.g. TXT, but basically any) next to a CNAME”
Comment from 19 Jan 2026 in “What came first: the CNAME or the A record?” - Comment from 20 Jan 2026 in “What came first: the CNAME or the A record?”
Weak as general DNS host
“CF and similar providers are not true DNS hosting providers. They do DNS, but only so their CDN stuff works”
Comment from 16 Aug 2026 in “Tell HN: Cloudflare silently injects its analytics when you switch nameservers” “I wish they'd be clearer about when they're being used and not pretend that this is some DNS feature”
Comment from 16 Aug 2026 in “Tell HN: Cloudflare silently injects its analytics when you switch nameservers” “they use Cloudflare DNS behind the scenes, so when Cloudflare goes down, your website goes down too”
Comment from 18 Oct 2026 in “Namecheap just seized and disabled all my domains”
Why people recommend it
Each mark is one comment
Reliable and works consistently
“After switching my DNS servers to Cloud Flare DNS (1.1.1.1, 1.0.0.1), it works fine.”
Comment from 7 Feb 2026 in “The AI boom is causing shortages everywhere else” “Cloudflare's business is being reliable; few sites would be a better choice.”
Comment from 6 Oct 2026 in “Example.com just launched the biggest redesign in decades” “If you set your DNS to 1.1.1.1 or 8.8.8.8 everything works fine.”
Comment from 1 Aug 2026 in “Twenty-five years ago it was cryptography, today it's model weights” - Comment from 5 Sep 2026 in “Shutting down our public encrypted DNS”
- Comment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”
- Comment from 6 Nov 2025 in “FBI tries to unmask owner of archive.is”
Fast, often fastest resolver
“Cloudflare can short circuit the recursive lookup for any of their properties, providing potential speedups at the resolution stage”
Comment from 28 Jun 2026 in “Choosing a Public DNS Resolver” “is always the fastest, though Quad9 is a very close second”
Comment from 5 Sep 2026 in “An open DNS recursive service for free security and high privacy” “using 1.1.1.1 for performance rather than privacy”
Comment from 28 Jun 2026 in “Choosing a Public DNS Resolver” - Comment from 24 Jun 2026 in “We're making Bunny DNS free: because a faster internet won't build itself”
Simple, easy setup
“Cloudflare put a lot more thought into making it simple and intuitive to use.”
Comment from 4 Jun 2026 in “VoidZero Is Joining Cloudflare” “extremely low effort to set up and has never once failed me”
Comment from 9 Jul 2026 in “TLS certificates for internal services done right” “they make it very easy to set this up with just an API key”
Comment from 17 Nov 2025 in “I finally understand Cloudflare Zero Trust tunnels” - Comment from 5 Oct 2026 in “Cloudflare opens more Enterprise-only features to all customers”
Privacy-respecting company practices
“I don’t keep DNS logs at all. But I also don’t show up 7 years later trash talking a company or product based on guesswork…”
Comment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2” “But all other things being equal, Cloudflare's privacy policy is better than Google's.”
Comment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2” “it has good privacy and works with archive.is”
Comment from 11 Nov 2025 in “Colon cancer is rising in young people and scientists got a clue about why”
Other DNS resolvers people recommend
The four most recommended other DNS resolvers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Mixed | Criticize | Approval | Months | Had for | Badge |
|---|---|---|---|---|---|---|---|
| Quad9 DNS | 42 | 12 | 33 | 56% | 10 | — | — |
| Cloudflare DNSThis page | 39 | 8 | 51 | 43% | 11 | — | — |
| Unbound DNS resolver | 36 | 6 | 3 | 92% | 11 | — | Approved |
| Google Public DNS | 17 | 0 | 9 | 65% | 11 | — | — |
| Mullvad DNS | 16 | 5 | 5 | 76% | 5 | — | Approved |
What people said
40 of the 111 opinions about it, picked in proportion to the three counts, newest first. Each links to the original comment.
“My current chrome reports no at https://one.one.one.one/help/ so maybe I changed it or maybe the default's different now”
“They rewrite your CAA record so multiple other CAs can sign certs on your domains.”
“they use Cloudflare DNS behind the scenes, so when Cloudflare goes down, your website goes down too”
“The problem is pinging 1.1.1.1 can end up hitting a really really close-by server.”
“Cloudflare's business is being reliable; few sites would be a better choice.”
“It's simple, all .lan get resolved to the same IP.”
“i don't trust cloudflare more but at least it works consistently”
“is always the fastest, though Quad9 is a very close second”
“I've run into issues with using public wifi when I override my MacBook's DNS server to 1.1.1.1”
“I wish they'd be clearer about when they're being used and not pretend that this is some DNS feature”
“CF and similar providers are not true DNS hosting providers. They do DNS, but only so their CDN stuff works”
“If you set your DNS to 1.1.1.1 or 8.8.8.8 everything works fine.”
“CF refuses to forward EDNS Client Subnet information and so they return bogus information”
“extremely low effort to set up and has never once failed me”
“Cloudflare can short circuit the recursive lookup for any of their properties, providing potential speedups at the resolution stage”
“using 1.1.1.1 for performance rather than privacy”
“Yesterday 1.1.1.1 failed to resolved "theinformation.com" (hosted on CF itself!) for many hours, answering NXDOMAIN.”
“Cloudflare likely still beats them on average”
“Cloudflare put a lot more thought into making it simple and intuitive to use.”
“The fact that Cloudflare and Google have convinced us all to use Cloudflare's and Google's resolvers is the problem.”
“But all other things being equal, Cloudflare's privacy policy is better than Google's.”
“I don’t keep DNS logs at all. But I also don’t show up 7 years later trash talking a company or product based on guesswork…”
“subject to the whim of the provider, who subject to court orders would have to oblige to continue operating as US entity”
“Many years ago I used Cloudflare, and more than once I had issues with them blocking websites I wanted to access.”
“I have no idea why anyone would use Cloudflare DNS, much less trust their more filtered versions.”
“Instead of being a neutral web infra, they actively participate in political agendas and censor things they "think" is wrong.”
“It's a service that does exactly what it's supposed to do.”
“Cloudflare DNS isn't fully functional (at least for me). Can't be used for general purpose DNS hosting imho.”
“After switching my DNS servers to Cloud Flare DNS (1.1.1.1, 1.0.0.1), it works fine.”
“cloudflare decided it's optional and then learned that everyone did implement RFC properly”
“it's really not okay that CloudFlare allows setting up other record types (e.g. TXT, but basically any) next to a CNAME”
“CloudFlare really doesn't understand RFC1034, their DNS authoritative interface only blocks A and AAAA if there is a CNAME defined”
“Cloudflare seem to be getting into thr swing of breaking things and then being transparent.”
“Tried with Cloudflare's 1.1.1.1 to hide the VPN and DNS notification from Android System notification service but it does not work.”
“using cloudflare DNS is a step up from whatever the ISP's default DNS is”
“Cloudflare does not forward EDNS to the origin, so the records it returns are suboptimal for services that use DNS-based service affinity”
“they make it very easy to set this up with just an API key”
“it has good privacy and works with archive.is”
“I use Cloudflare's DNS and it works fine for me.”
“Somehow, it took another six minutes before an alert fired, at which point they noticed.”
Counts come from 1,791,911 Hacker News comments labeled by Claude, November 2025 to October 2026, with data through October 31, 2026. Counts updated 2 Nov 2026. How we count. Report a mistake.