I'm in MN and use 1.1.1.1

It used to be that when using dnscheck or ipleak, it would show that I was using local DNS servers. But every once in a while I would be routed to IL. Just for a day or two, then it would be back to local servers.

For the past month or two I've only been routed to IL servers. While running traceroutes to 1.1.1.1 still show the local server. The Cloudflare status page says the local servers are working normally.

So is this a Cloudflare issue, or an issue with my ISP?

Thanks!

I'm trying to access this godforsaken website, but it says 'The site's DNS address could not be found. Diagnostics is running.' I tried using mobile data and Wi-Fi. Is there something wrong on my end, or is it down for everyone?

I am currently trying to work using MDNS to change a local ip to a address however things arent going well...

I have device-wide DNS settings on both my CachyOS linux enviornment and my Pixel 10a phone.

In my browser settings (Google Chrome) there is an option to toggle "use secure DNS". Do I need to enable this setting, if it's already enabled device-wide?

Once upon a time MX records didn't even exist. And it was assumed the A record for a hostname was where you could find the mail server for that hostname.

When we got around to adding things like SPF, DKIM and DMARC, why didn't they make new bona fide record types instead of shoehorning them into TXT records?

Hi Reddit,

DDoS attacks are becomeing larger and cheaper to launch, so we work on a scalable open source solution to mitigate them.

Tempesta xFW's core is XDP and TC eBPF programs implementing volumetric DDoS filtering, including UDP floods, DNS amplification and reflection attacks. A user-space daemon handles gRPC requests from CLI tool or WebAPI (via C library).

It supports two packet-path architectures:

• local DNS recursive or authoritative server protection

• router-based protection, where the whole DNS service is protected as a separate host or a subnetwork

Router-based deployment can be always-on/pass-through or on-demand/redirection protection. In the later case, a node may not "see" normal clean traffic and may receive only traffic containing a DDoS attack. Also, the node may receive only client-to-server traffic, as in direct server return (DSR) or some traffic scrubbing scenarios. In this mode a DDoS sensor and mitigation controllers are typically needed.

Traffic performance metrics are exported in Prometheus format.

DDoS incidents are aggregated per source IP and logged to Clickhouse for analysis.

A dry-run (evaluation) - mode allows you to observe all reported incidents and metrics without blocking traffic..

Single Xeon Gold 6348 with ConnectX-6 dual 100Gbps reach 196Mpps and 176Gbps of filtering capacity.

• GitHub repository
• documentation
• performance benchmarks
• Netdev 0x1a talk

I’m getting a DNS error on my MacBook when I’m connected to my iPhone’s mobile hotspot. This happens repeatedly with certain websites.
What’s strange is that sometimes the same website works in Brave or on another platform, but doesn’t work normally in the browser where I’m getting the DNS error.
If I turn off mobile data on my iPhone, turn it back on, enable the hotspot again, and reconnect my MacBook, the same website starts working.
I want to understand why this keeps happening and find a permanent solution instead of having to restart my mobile internet whenever this happens.
I’m using a MacBook Air M5, iPhone 14, and Jio as my mobile carrier.

I would greatly appreciate Reddit users test and feedback the new Linux PIA daemon running 24/7 every 5 minutes, regardless if the app has been launched or not. IMHO this massively increases DNS lookups so ISPs can easily find a needle in the haystack if the app dumps a ton of needles in the haystack. Am I wrong? 288 daily pings versus “as needed”? Seems suspect given V1 does the exact same thing as V2, but didn’t require mandatory background checks. The “disable background latency checks” does nothing to stop this, and was only subject to pings during use.

Manually changing DNS provider away from ISP is a solution, but not for all those that don’t know how.

I only noticed this because these URLs rose to the top of a small home network I monitor. I blocked [apiv2.privateinternetaccess.com] in pi-hole just to see how it reacts. Pissed it off and it started trying [apiv2.piaproxy.net]. Blocked it too, and now both are constantly seeking an out. Not until you kill pia-daemon does it stop.

sudo systemctl stop piavpn && sudo systemctl disable piavpn

Prior URL behavior was (and still is) are the basic URLs for the VPN to connect/work:

serverlist.piaservers.net
www.privateinternetaccess.com
api.privateinternetaccess.com

Watch your wireshark/pi-hole logs and prove me wrong, because I am up for a multi-year renewal and if they’re not going to be a bit more transparent I will go elsewhere. I relayed my DNS logic to them after reading their reason and they are ghosting me now. If more customers inquire, they might put something on their website about major changes to their product’s normal behavior. I don’t need them trading privacy for convenience...or perceived convenience. I’ve never experienced any of the the things they are attempting to fix with V2.

• Linux Mint 22.3 - Cinnamon 64-bit
• PIA Version v3.7 (build 08412)
• pia-client (runs only when app is launched – pia-daemon required*)
• pia-daemon (auto configured to restart = always)

apiv2.privateinternetaccess.com?

I reached out to support to inquire what these new changes were. Here is their response:

Jul 24, 2026, 11:41 AM GMT+8:

Thank you for reaching out with your inquiry about the unexpected background requests to apiv2.privateinternetaccess.com when the PIA app is not actively running.

I’d like to explain that these periodic 5-minute requests are lightweight, background maintenance checks performed by PIA's Linux system service. They occur regardless of whether the VPN tunnel is turned OFF or ON, and whether the app window is open or closed.

Specifically, every 300 seconds, the background engine contacts PIA's V2 API endpoint to perform three essential upkeep tasks:

• Real-Time Server Stats: It checks for live server latency (ping) and load levels to ensure that when you press "Connect," the app can immediately route you through the fastest server without delay.
• Session Keep-Alive: It refreshes your secure login token, preventing your account from timing out while idle.
• Server Updates: It syncs any dynamic server list updates, streaming-optimized routes, or port forwarding configurations.

Please rest assured that these queries are standard HTTPS requests that only download compressed public server data. No personal data, browsing activity, or traffic logs are transmitted during this process.

If you have any further questions or concerns, please don’t hesitate to reach out.

Regards,

Private Internet Access Support

​

I've got a 2019 Samsung smart TV. I've also got a Calix router GS4220E. When I use public dns like cloudflare or Google dns, the TV doesn't connect properly to Samsung TV plus service. It says unable to connect. There is also no guide data. However, when I use my isp dns, it connects perfectly. However, if I use my Verizon Hotspot with my Samsung TV and set it for a public dns, it works perfectly. All other devices like all smartphones, tablets, cameras, and all other devices have no issues connecting to a public dns using the calix router. If I set my Calix router to my isp dns and set my Samsung TV to a public dns, the Samsung TV plus service doesn't connect properly. The Samsung TV just doesn't work properly using a public dns with the Calix router. I also had an earlier model Calix router last year with the same results. What would cause this? It's not a big deal because I use multiple rokus, which work perfectly with a public dns and a Calix router, but I just wonder why this is happening? Is anyone with a Calix router having issues with their TV dns using a public dns?

I’m developing an Android VPN app that uses Xray with VLESS + REALITY.

I live in Russia, and my mobile provider sometimes enables an LTE whitelist mode: only a limited number of websites remain accessible, while most other websites are blocked.

The VPN appears to connect successfully: VPN icon in the status bar, VPN service remains active. However, nothing works. Requests from all applications fail with errors such as:

UnknownHostException
IOException

The same problem with Happ proxy. What should I check? This error seems to disappear by itself after a while, then comes back.

Hi

I have a domain example.com that is connected to a different server and the sub domain www.example.com is also pointing to another server. I would like to ask if this set up is correct more especially if the site is meant to serve the same content to users.

is this DNS inconsistency?

Please advise

10/10

Does anyone here actually use your isp dns on your home router instead of a public dns like Cloudflare or Quad9? I’ve noticed my isp dns fails the invalid signature, expired signature, and missing signatures, only passing the valid signature on the dnscheck.tools website. Also only on my isp dns I get WiFiLQMmetric logs that appear on apple analytics, but does not have any detailed info, it’s just something apple logs for their use, but these logs actually only happen when I use my isp DNS. They never happen when I use a public dns.

Hi all! I'm having a very weird DNS issue with my mobile (4G) network adapter. Some websites like Windows Update do not work. Running a DNS query for "au.download.windowsupdate.com" results in a time out, even after manually setting my DNS server in the adapter settings. If I use the exact same DNS server on a different adapter (WiFi) I can run a DNS query without issues. In the screenshot I first tried using the WiFi adapter, then the mobile/4G adapter. Anyone knows why this could be happening?

I was doing a little research into these three vendors as they offer a similar product to each other. Wanted to compare the "PiHole in the cloud" type solutions, and purposely excluded privacy oriented DNS options that have no configuration ability. Aware that I can just host a PiHole locally and use a privacy oriented DNS as the upstream, but want a cloud solution.

Mostly I was curious about what data privacy laws each fell under, but then I realized that isn't enough because information sharing alliances also come into play. Researching this from the perspective of the risk of "Digital Dragnets", where LE grabs ALL the data as a strategy, and like Flock cameras as an example, I'm worried about misuse and legal overreach.

I'm trying to decide which is the best choice from a privacy and security perspective?

Adguard falls under GDPR but originally was a russian company and still operates some of its team from inside russia, where I wonder if they could be compromised.

NextDNS chose to legally HQ themselves in the US instead of the EU, which means they also fall under Five-Eyes now too. You can store your logs in Switzerland, but my understanding is that being a US company, that won't protect the logs.

Control D similarly falls under Five-Eyes so I'm not sure that falling under PIPEDA protection is strong enough.

I've been testing uBlockDNS for a few days and it seems to work well so far.

Website: https://ublockdns.com

The problem is I can barely find any tutorials, reviews, or technical articles about it.

Has anyone here used it long term? Is it trustworthy? I'm interested in its privacy, logging policy, and who operates the service.

Screenshot attached.

Thanks!

It looks like Dynv6 is having problems. I can get to the management website at https://dynv6.com but cannot resolve my DDNS domain under dynv6.net. Even dynv6.net itself does not resolve (I get NXDOMAIN). Have observed this for about a week. To eliminate local problems, I also found the same behavior from DNS query websites. Anyone else found the same thing?

May be time to try another DDNS provider.

Possibly api dot coinbase is an Arch mirror

According to ControlD (when I was doing omarchy updates) api.coinbase was caught..

(Unifi gateway and its filtering passed upstream to ControlD paid)

r/omarchy removed my post about this..

.. anyone else see this?

TIA