DNS解析器

使用第三方伺服器的加密 DNS 只能避開基本的 DNS 封鎖 ，當您確定不會有不良後果時。 加密的 DNS 無法為您隱藏瀏覽活動。

了解更多 DNS

推薦的 DNS 提供商

These are our favorite public DNS resolvers based on their privacy and security characteristics, and their worldwide performance. Some of these services offer basic DNS-level blocking of malware or trackers depending on the server you choose, but if you want to be able to see and customize what is blocked you should use a dedicated DNS filtering product instead.

DNS 提供者	協議	Logging / Privacy Policy	ECS	篩選	Signed Apple Profile
AdGuard Public DNS	Cleartext DoH/3 DoT DoQ DNSCrypt	Anonymized1	Anonymized	Based on server choice. 使用的過濾器列表可以在這裡找到。	Yes
Cloudflare	Cleartext DoH/3 DoT	Anonymized2	不是	Based on server choice.	No
Control D Free DNS	Cleartext DoH/3 DoT DoQ	No3	不是	Based on server choice.	Yes
dns0.eu	Cleartext DoH/3 DoH DoT DoQ	Anonymized4	Anonymized	Based on server choice.	Yes
Mullvad	DoH DoT	No5	不是	Based on server choice. 正在使用的過濾器列表可以在這裡找到。	Yes
Quad9	Cleartext DoH DoT DNSCrypt	Anonymized6	可選的	Based on server choice, malware blocking by default.	Yes

Self-Hosted DNS Filtering

在被控制平臺，自主託管 DNS 可提供有用的過濾，例如智能電視和其他物聯網設備，因為不需要客戶端軟件。

Pi-hole

Pi-hole 是一個開源的 DNS-sinkhole ，它使用 DNS 篩選來阻止不需要的網頁內容，例如廣告。

Pi-hole 設計應用在 Raspberry Pi ，但它不限於這種硬體。 該軟體良好的 Web 界面，可查看有用資訊和管理被阻止的內容。

Homepage

AdGuard首頁

AdGuard 是一個開源的 DNS-sinkhole ，使用DNS 過濾 來封鎖不需要的網頁內容，例如廣告。

AdGuard 首頁提供精美的網頁介面，可查看有用資訊並管理被封鎖的內容。

Homepage

Cloud-Based DNS Filtering

These DNS filtering solutions offer a web dashboard where you can customize the blocklists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration).

Control D

Control D is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free.

Homepage

下載

• Windows
• macOS
• Linux
• Google Play
• App Store
• GitHub

NextDNS

NextDNS is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use.

Homepage

下載

• Windows
• macOS
• Linux
• App Store
• GitHub

與帳戶一起使用時，NextDNS 將預設啟用洞察和日誌記錄功能（因為某些功能需求）。 可選擇保留日誌的存留時間和儲存位置，或完全停用日誌。

NextDNS's free plan is fully functional, but should not be relied upon for security or other critical filtering applications, because after 300,000 DNS queries in a month all filtering, logging, and other account-based functionality is disabled. It can still be used as a regular DNS provider after that point, so your devices will continue to function and make secure queries via DNS-over-HTTPS, just without your filter lists.

NextDNS also offers public DNS-over-HTTPS service at https://dns.nextdns.io and DNS-over-TLS/QUIC at dns.nextdns.io, which are available by default in Firefox and Chromium, and subject to their default no-logging privacy policy.

加密的DNS代理

加密DNS代理軟體提供了一個本地代理，用於將 個未加密的DNS 解析器轉發到。 Typically, it is used on platforms that don't natively support encrypted DNS.

RethinkDNS

RethinkDNS 是一個開源 Android 用戶端工具，支持 DNS-over-HTTPS、 DNS-over-TLS、 DNSCrypt和 DNS 代理，以及快取DNS 回應、本地記錄 DNS 查詢，也可用作防火牆。

Homepage

Downloads: "下載"

• Google Play
• GitHub

dnscrypt-proxy

dnscrypt-proxy is a DNS proxy with support for DNSCrypt, DNS-over-HTTPS, and Anonymized DNS.

Repository

Downloads: "下載"

• Windows
• macOS
• Linux

警告

The anonymized DNS feature does not anonymize other network traffic.

標準

**請注意，我們這裏所推薦專案沒有任何牽扯。 ** 除了 我們的標準準則外，還有一套明確要求以提出客觀建議。 我們建議您在選擇使用任何項目之前先熟悉此列表，並進行自己的研究，以確保您的正確選擇。

All DNS products must support:

• DNSSEC.
• QNAME 最小化.
• Anonymize ECS or disable it by default.

Additionally, all public providers:

• 首選 anycast 支援或地理轉向支援。
• Must not log any personal data to disk
  • As noted in our footnotes, some providers collect query information for example, for purposes like security research, but in that case that data must not be associated with any PII such as IP address, etc.

---

1. AdGuard 儲存其 DNS 伺服器的總和效能指標，即對特定伺服器的全部請求數量、被封鎖的請求數量，以及處理請求的速度。 他們還會保存和儲存過去24小時內所請求的網域資料庫。 我們需要這些資訊來識別和阻止新的追蹤器和威脅。 我們還記錄了這些追蹤器被封鎖的次數。 我們需要這些資訊以便在過濾器中刪除過時的規則。 https://adguard.com/en/privacy/dns.html ↩

2. Cloudflare 僅收集並儲存發送至 1.1.1.1解析器的有限 DNS 查詢資料。 1.1.1.1解析器服務不會記錄個人資料，且大部分有限的非個人識別查詢資料僅存儲25小時。 https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver/ ↩

3. Control D 只有記錄使用自定義 DNS 配置的高級解析器。 免費解析器不記錄數據。 https://controld.com/privacy ↩

4. dns0.eu collects some data for their threat intelligence feeds, to monitor for newly registered/observed/active domains and other bulk data. That data is shared with some partners for e.g. security research. They do not collect any Personally Identifiable Information. https://dns0.eu/privacy ↩

5. Mullvad 的 DNS 服務可供 Mullvad VPN 的訂閱者和非訂閱者使用。 他們的隱私政策明確聲稱他們不會以任何方式記錄 DNS 請求。 https://mullvad.net/en/help/no-logging-data-policy/ ↩

6. Quad9會收集一些資料，以進行威脅監控和回應。 然後這些資料會被重新混合與共享，例如用於安全研究。 Quad9 不會收集或記錄 IP 位址或其他他們認為可識別個人身份的資料。 https://quad9.net/privacy/policy ↩

您正在查看 Privacy Guides 的 英文 版本，由我們在 Crowdin 上出色的團隊翻譯。如有您發現錯誤，或在此頁面上看到任何未翻譯的部分，請考慮提供幫助！ 訪問 Crowdin

You're viewing the 英文 copy of Privacy Guides, translated by our fantastic language team on Crowdin. If you notice an error, or see any untranslated sections on this page, please consider helping out!