Hacker ApprovedDepartments

Cloudflare DNS

Ranked 2 of 7 DNS resolvers by recommenders

Criticized more than recommended: critics distrust the company over US legal exposure and past blocking; those who recommend it see it as a fast, free, simple resolver that works reliably and is easy to set up.

39 people recommended Cloudflare DNS in Hacker News comments, 8 had mixed feelings and 51 criticized it, November 2025 to October 2026.

Summary written by Claude from the comments below.

98 people gave an opinion

recommend it
39
mixed feelings
8
warn against or regret it
51

The record

Each figure is one person. RecommendsMixed feelingsCriticizes

Recommended in 11 of 12 months

In 33 different threads.

  1. November 2025: recommended
  2. December 2025: recommended
  3. January 2026: recommended
  4. February 2026: recommended
  5. March 2026: recommended
  6. April 2026: recommended
  7. May 2026: not recommended
  8. June 2026: recommended
  9. July 2026: recommended
  10. August 2026: recommended
  11. September 2026: recommended
  12. October 2026: recommended

Why it doesn’t carry the badge

  • 39 people recommend itNeeds 10 or more, met.
  • 0.7 recommenders for every criticNeeds 2 to 1 or better, not met.
  • Recommended in 11 of 12 monthsNeeds 4 or more, met.
  • Recommended in 33 threadsNeeds 5 or more, met.
  • The biggest thread supplies 10% of its recommendersNeeds half or less, met.

The same rules apply to every product, and the badge can’t be bought. Mixed feelings count toward neither side. How the badge works

What people say about it

Reasons grouped from a sample of 40 of the 111 opinions about it, picked in proportion to how many people recommend it, have mixed feelings and criticize it. Each mark is one comment in the sample. Open a reason to read what they said.

What people warn about

Each mark is one comment

  • Distrust over politics and legal exposure

    “Instead of being a neutral web infra, they actively participate in political agendas and censor things they "think" is wrong.”

    Comment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”

    “subject to the whim of the provider, who subject to court orders would have to oblige to continue operating as US entity”

    Comment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”

    “The fact that Cloudflare and Google have convinced us all to use Cloudflare's and Google's resolvers is the problem.”

    Comment from 6 May 2026 in “.de TLD offline due to DNSSEC?”
  • Blocks or fails some domains

    “Yesterday 1.1.1.1 failed to resolved "theinformation.com" (hosted on CF itself!) for many hours, answering NXDOMAIN.”

    Comment from 28 Jun 2026 in “Choosing a Public DNS Resolver”

    “Many years ago I used Cloudflare, and more than once I had issues with them blocking websites I wanted to access.”

    Comment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”

    “Cloudflare DNS isn't fully functional (at least for me). Can't be used for general purpose DNS hosting imho.”

    Comment from 19 Feb 2026 in “DNS-Persist-01: A New Model for DNS-Based Challenge Validation”
  • Record handling deviates from RFC

    “Cloudflare does not forward EDNS to the origin, so the records it returns are suboptimal for services that use DNS-based service affinity”

    Comment from 19 Nov 2025 in “Show HN: DNS Benchmark Tool – Compare and monitor resolvers”

    “CloudFlare really doesn't understand RFC1034, their DNS authoritative interface only blocks A and AAAA if there is a CNAME defined”

    Comment from 19 Jan 2026 in “What came first: the CNAME or the A record?”

    “it's really not okay that CloudFlare allows setting up other record types (e.g. TXT, but basically any) next to a CNAME”

    Comment from 19 Jan 2026 in “What came first: the CNAME or the A record?”
  • Weak as general DNS host

    “CF and similar providers are not true DNS hosting providers. They do DNS, but only so their CDN stuff works”

    Comment from 16 Aug 2026 in “Tell HN: Cloudflare silently injects its analytics when you switch nameservers”

    “I wish they'd be clearer about when they're being used and not pretend that this is some DNS feature”

    Comment from 16 Aug 2026 in “Tell HN: Cloudflare silently injects its analytics when you switch nameservers”

    “they use Cloudflare DNS behind the scenes, so when Cloudflare goes down, your website goes down too”

    Comment from 18 Oct 2026 in “Namecheap just seized and disabled all my domains”

Why people recommend it

Each mark is one comment

  • Reliable and works consistently

    “After switching my DNS servers to Cloud Flare DNS (1.1.1.1, 1.0.0.1), it works fine.”

    Comment from 7 Feb 2026 in “The AI boom is causing shortages everywhere else”

    “Cloudflare's business is being reliable; few sites would be a better choice.”

    Comment from 6 Oct 2026 in “Example.com just launched the biggest redesign in decades”

    “If you set your DNS to 1.1.1.1 or 8.8.8.8 everything works fine.”

    Comment from 1 Aug 2026 in “Twenty-five years ago it was cryptography, today it's model weights”
  • Fast, often fastest resolver

    “Cloudflare can short circuit the recursive lookup for any of their properties, providing potential speedups at the resolution stage”

    Comment from 28 Jun 2026 in “Choosing a Public DNS Resolver”

    “is always the fastest, though Quad9 is a very close second”

    Comment from 5 Sep 2026 in “An open DNS recursive service for free security and high privacy”

    “using 1.1.1.1 for performance rather than privacy”

    Comment from 28 Jun 2026 in “Choosing a Public DNS Resolver”
  • Simple, easy setup

    “Cloudflare put a lot more thought into making it simple and intuitive to use.”

    Comment from 4 Jun 2026 in “VoidZero Is Joining Cloudflare”

    “extremely low effort to set up and has never once failed me”

    Comment from 9 Jul 2026 in “TLS certificates for internal services done right”

    “they make it very easy to set this up with just an API key”

    Comment from 17 Nov 2025 in “I finally understand Cloudflare Zero Trust tunnels”
  • Privacy-respecting company practices

    “I don’t keep DNS logs at all. But I also don’t show up 7 years later trash talking a company or product based on guesswork…”

    Comment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”

    “But all other things being equal, Cloudflare's privacy policy is better than Google's.”

    Comment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”

    “it has good privacy and works with archive.is”

    Comment from 11 Nov 2025 in “Colon cancer is rising in young people and scientists got a clue about why”

Other DNS resolvers people recommend

The four most recommended other DNS resolvers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

Cloudflare DNS compared with 4 alternatives
ProductRecommendMixedCriticizeApprovalMonthsHad forBadge
Quad9 DNS42123356%10——
Cloudflare DNSThis page3985143%11——
Unbound DNS resolver366392%11—Approved
Google Public DNS170965%11——
Mullvad DNS165576%5—Approved
See all 7 DNS resolvers, ranked

What people said

40 of the 111 opinions about it, picked in proportion to the three counts, newest first. Each links to the original comment.

“My current chrome reports no at https://one.one.one.one/help/ so maybe I changed it or maybe the default's different now”

MixedComment from 28 Oct 2026 in “Apple's git still trusts the compromised eMudhra certificates”

“They rewrite your CAA record so multiple other CAs can sign certs on your domains.”

CriticizesComment from 18 Oct 2026 in “Namecheap just seized and disabled all my domains”

“they use Cloudflare DNS behind the scenes, so when Cloudflare goes down, your website goes down too”

CriticizesComment from 18 Oct 2026 in “Namecheap just seized and disabled all my domains”

“The problem is pinging 1.1.1.1 can end up hitting a really really close-by server.”

CriticizesComment from 6 Oct 2026 in “Example.com just launched the biggest redesign in decades”

“Cloudflare's business is being reliable; few sites would be a better choice.”

RecommendsComment from 6 Oct 2026 in “Example.com just launched the biggest redesign in decades”

“It's simple, all .lan get resolved to the same IP.”

RecommendsComment from 5 Oct 2026 in “Cloudflare opens more Enterprise-only features to all customers”

“i don't trust cloudflare more but at least it works consistently”

MixedComment from 5 Sep 2026 in “Shutting down our public encrypted DNS”

“is always the fastest, though Quad9 is a very close second”

RecommendsComment from 5 Sep 2026 in “An open DNS recursive service for free security and high privacy”

“I've run into issues with using public wifi when I override my MacBook's DNS server to 1.1.1.1”

CriticizesComment from 27 Aug 2026 in “Saving 100 terabytes of memory by optimizing 1.1.1.1's DNS cache”

“I wish they'd be clearer about when they're being used and not pretend that this is some DNS feature”

CriticizesComment from 16 Aug 2026 in “Tell HN: Cloudflare silently injects its analytics when you switch nameservers”

“CF and similar providers are not true DNS hosting providers. They do DNS, but only so their CDN stuff works”

CriticizesComment from 16 Aug 2026 in “Tell HN: Cloudflare silently injects its analytics when you switch nameservers”

“If you set your DNS to 1.1.1.1 or 8.8.8.8 everything works fine.”

RecommendsComment from 1 Aug 2026 in “Twenty-five years ago it was cryptography, today it's model weights”

“CF refuses to forward EDNS Client Subnet information and so they return bogus information”

CriticizesComment from 24 Jul 2026 in “Ask HN: What's Up with Archive.today?”

“extremely low effort to set up and has never once failed me”

RecommendsComment from 9 Jul 2026 in “TLS certificates for internal services done right”

“Cloudflare can short circuit the recursive lookup for any of their properties, providing potential speedups at the resolution stage”

RecommendsComment from 28 Jun 2026 in “Choosing a Public DNS Resolver”

“using 1.1.1.1 for performance rather than privacy”

RecommendsComment from 28 Jun 2026 in “Choosing a Public DNS Resolver”

“Yesterday 1.1.1.1 failed to resolved "theinformation.com" (hosted on CF itself!) for many hours, answering NXDOMAIN.”

CriticizesComment from 28 Jun 2026 in “Choosing a Public DNS Resolver”

“Cloudflare likely still beats them on average”

RecommendsComment from 24 Jun 2026 in “We're making Bunny DNS free: because a faster internet won't build itself”

“Cloudflare put a lot more thought into making it simple and intuitive to use.”

RecommendsComment from 4 Jun 2026 in “VoidZero Is Joining Cloudflare”

“The fact that Cloudflare and Google have convinced us all to use Cloudflare's and Google's resolvers is the problem.”

CriticizesComment from 6 May 2026 in “.de TLD offline due to DNSSEC?”

“But all other things being equal, Cloudflare's privacy policy is better than Google's.”

RecommendsComment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”

“I don’t keep DNS logs at all. But I also don’t show up 7 years later trash talking a company or product based on guesswork…”

RecommendsComment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”

“subject to the whim of the provider, who subject to court orders would have to oblige to continue operating as US entity”

CriticizesComment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”

“Many years ago I used Cloudflare, and more than once I had issues with them blocking websites I wanted to access.”

CriticizesComment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”

“I have no idea why anyone would use Cloudflare DNS, much less trust their more filtered versions.”

CriticizesComment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”

“Instead of being a neutral web infra, they actively participate in political agendas and censor things they "think" is wrong.”

CriticizesComment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”

“It's a service that does exactly what it's supposed to do.”

RecommendsComment from 22 Mar 2026 in “Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2”

“Cloudflare DNS isn't fully functional (at least for me). Can't be used for general purpose DNS hosting imho.”

CriticizesComment from 19 Feb 2026 in “DNS-Persist-01: A New Model for DNS-Based Challenge Validation”

“After switching my DNS servers to Cloud Flare DNS (1.1.1.1, 1.0.0.1), it works fine.”

RecommendsComment from 7 Feb 2026 in “The AI boom is causing shortages everywhere else”

“cloudflare decided it's optional and then learned that everyone did implement RFC properly”

CriticizesComment from 20 Jan 2026 in “What came first: the CNAME or the A record?”

“it's really not okay that CloudFlare allows setting up other record types (e.g. TXT, but basically any) next to a CNAME”

CriticizesComment from 19 Jan 2026 in “What came first: the CNAME or the A record?”

“CloudFlare really doesn't understand RFC1034, their DNS authoritative interface only blocks A and AAAA if there is a CNAME defined”

CriticizesComment from 19 Jan 2026 in “What came first: the CNAME or the A record?”

“Cloudflare seem to be getting into thr swing of breaking things and then being transparent.”

CriticizesComment from 19 Jan 2026 in “What came first: the CNAME or the A record?”

“Tried with Cloudflare's 1.1.1.1 to hide the VPN and DNS notification from Android System notification service but it does not work.”

CriticizesComment from 5 Jan 2026 in “Show HN: DoNotNotify – log and intelligently block notifications on Android”

“using cloudflare DNS is a step up from whatever the ISP's default DNS is”

MixedComment from 1 Jan 2026 in “Privacy and control. My tech setup”

“Cloudflare does not forward EDNS to the origin, so the records it returns are suboptimal for services that use DNS-based service affinity”

CriticizesComment from 19 Nov 2025 in “Show HN: DNS Benchmark Tool – Compare and monitor resolvers”

“they make it very easy to set this up with just an API key”

RecommendsComment from 17 Nov 2025 in “I finally understand Cloudflare Zero Trust tunnels”

“it has good privacy and works with archive.is”

RecommendsComment from 11 Nov 2025 in “Colon cancer is rising in young people and scientists got a clue about why”

“I use Cloudflare's DNS and it works fine for me.”

RecommendsComment from 6 Nov 2025 in “FBI tries to unmask owner of archive.is”

“Somehow, it took another six minutes before an alert fired, at which point they noticed.”

CriticizesComment from 4 Nov 2025 in “Ask HN: Why are most status pages delayed?”

Counts come from 1,791,911 Hacker News comments labeled by Claude, November 2025 to October 2026, with data through October 31, 2026. Counts updated 2 Nov 2026. How we count. Report a mistake.