Back to Home

Public DNS Resolvers for Super DNS Proxy

Super DNS Proxy does not ship with a resolver of its own. It forwards your lookups to the upstream DNS servers you enter, so the addresses you list decide who answers your queries and how quickly. Any resolver that speaks ordinary DNS over UDP can be used: your ISP's servers, your own recursive resolver on your network, a router running Pi-hole or Unbound, or one of the public anycast services catalogued below.

Because the proxy sends every query to all the addresses you list at the same time and returns the first answer back, listing several resolvers from different networks is usually better than listing one. If a provider has an outage or a slow path to you, the others answer first and you never notice.

How to use these addresses

Open Super DNS Proxy, paste the IP addresses of the resolvers you want into its upstream list, and leave the rest of the settings at their defaults to start. Then set your Windows DNS server to 127.0.0.1 so that your machine sends its lookups to the proxy instead of straight to your ISP. The app's live query log will show the traffic arriving as soon as the change takes effect.

Resolver directory

AdGuard DNS

udp

AdGuard's public resolver, which filters advertising and tracking domains while answering ordinary DNS queries.

94.140.14.14, 94.140.15.15

Global (anycast)

Cisco OpenDNS

udp

Cisco's long-running public resolver. The free tier blocks some phishing domains and offers optional content filtering categories.

208.67.222.222, 208.67.220.220

Global (anycast)

Cloudflare 1.1.1.1

udp

Cloudflare's privacy-focused public resolver with no filtering by default and a short log retention policy.

1.1.1.1, 1.0.0.1

Global (anycast)

Google Public DNS

udp

Google's public resolver, reachable worldwide on anycast addresses. No filtering, and query data is anonymised on a short retention window.

8.8.8.8, 8.8.4.4

Global (anycast)

Quad9

udp

A non-profit public resolver that blocks domains known to distribute malware or phishing before it answers. No registration required.

9.9.9.9, 149.112.112.112

Global (anycast)

Choosing which resolvers to list

Latency matters most, and because the proxy races every resolver you give it, you can simply list several and let the fastest one win each time. After that, the differences are policy: some public services promise short log retention, others filter known malicious domains or advertisements before answering, and some are run by network operators with regional points of presence that may be closer to you than a global anycast address.

A resolver's addresses can change, and a provider's logging or filtering policy can change with it, so check with the operator before relying on one for anything sensitive. The entries above are a starting point for the app's upstream list, not an endorsement.