Best DNS Servers 2025: Cloudflare vs Google vs Quad9

What Is DNS and Why Does It Affect Internet Speed?

DNS stands for Domain Name System. It is the internet's global address book, translating human-readable domain names like "google.com" or "youtube.com" into the numeric IP addresses (like 142.250.80.46) that computers use to connect to servers.

Before your browser can load any website, it must first perform a DNS lookup for every domain referenced on that page. A typical modern webpage references 15–40 different domains — for the main site, images, fonts, analytics, advertising, and embedded content from CDNs. Each domain requires a separate DNS lookup before the associated resource can start loading.

If your DNS resolver takes 100ms to respond to each query, and a webpage requires 20 lookups, that is 2 full seconds of invisible waiting before any visible content appears — on a connection that might be rated at 500 Mbps. This is why people on fast internet connections still experience slow page loading: the bottleneck is not bandwidth, it is DNS resolution time.

The good news: switching from your ISP's default DNS to a fast public resolver like Cloudflare 1.1.1.1 reduces lookup times from 80–200ms to 2–15ms. The improvement is immediate and applies to every device that uses your router.

DNS Resolver Comparison 2025

Speed figures represent global median response times from independent testing by DNSPerf.com. Your actual results vary by geographic location and ISP routing.

Cloudflare 1.1.1.1 — Best Overall

Cloudflare launched 1.1.1.1 in 2018 and it has consistently ranked as the world's fastest public DNS resolver in independent benchmarks. Cloudflare operates one of the largest content delivery networks in the world, with servers in over 300 cities globally — meaning your DNS queries almost always reach a nearby Cloudflare node rather than travelling far distances.

On privacy, Cloudflare committed publicly to never logging individual queries and to deleting all operational logs within 24 hours. This commitment is audited annually by independent auditors (KPMG completed the most recent audit). Your ISP, by contrast, maintains complete records of every DNS query you make — a detailed log of every website you have ever visited.

Cloudflare Variants

• 1.1.1.1 / 1.0.0.1 — Standard resolver. No filtering. Fastest.
• 1.1.1.2 / 1.0.0.2 — Blocks known malware domains. Slightly slower.
• 1.1.1.3 / 1.0.0.3 — Blocks malware and adult content. For family filtering.

Recommendation: Use 1.1.1.1 for maximum speed. Use 1.1.1.2 if you want free malware domain blocking without installing additional software.

Google Public DNS 8.8.8.8 — Most Reliable

Google launched 8.8.8.8 in 2009, making it the oldest major public DNS resolver. Its longevity means it is supported by virtually every piece of networking hardware and software — an important consideration for enterprise and mixed-OS environments. Google's infrastructure is vast and reliable, with impressive global uptime records.

Google DNS is slightly slower than Cloudflare in most regions because Google prioritises consistent, global coverage over raw speed optimisation for any single region. For privacy, Google anonymizes DNS logs but retains aggregate data for network research and product improvement purposes. Google does not sell DNS query data to advertisers, but privacy-conscious users may prefer Cloudflare or Quad9's stricter no-logging commitments.

Quad9 9.9.9.9 — Best for Security

Quad9 is a non-profit DNS resolver that blocks access to known malicious domains using threat intelligence feeds from IBM X-Force, Palo Alto Networks, and over 20 other cybersecurity partners. When you attempt to visit a phishing site, malware distribution domain, or botnet command-and-control server, Quad9 simply does not resolve the address — preventing the connection entirely without requiring any installed software.

Quad9 operates from Geneva, Switzerland under Swiss data protection law, which is among the strongest privacy frameworks in the world. The organization does not log individual query data and has designed its infrastructure to be incapable of identifying individual users from query logs.

Performance is comparable to Google DNS in most regions and is typically significantly faster than ISP defaults. For households with children, older family members who may be more vulnerable to phishing, or security-conscious users who want an automatic first line of defense against malicious sites, Quad9 is the recommended choice.

How to Change DNS on Your Router (Applies to All Devices)

Changing DNS on your router is the most efficient method — it applies automatically to every device connected to your home network, including phones, smart TVs, gaming consoles, and laptops, without needing to configure each device individually.

1. Open a browser and navigate to 192.168.1.1 (most common router address). If this does not load, try 192.168.0.1 or 10.0.0.1. Alternatively, on Windows open Command Prompt and run ipconfig — look for "Default Gateway."
2. Log in with your router admin credentials. These are printed on the label on the back or bottom of your router. Common defaults: admin/admin, admin/password.
3. Find the DNS settings. The location varies by router brand: look under Internet, WAN, Network Settings, or Advanced Settings.
4. Replace the Primary DNS with 1.1.1.1 and Secondary DNS with 1.0.0.1 (for Cloudflare). Or use 8.8.8.8 / 8.8.4.4 for Google.
5. Save settings. A router restart may be required.

How to Change DNS on Windows 11

1. Open Settings → Network & Internet → click your connection (Wi-Fi or Ethernet)
2. Scroll to "DNS server assignment" and click Edit
3. Switch from "Automatic (DHCP)" to "Manual"
4. Enable IPv4 and enter: Preferred DNS 1.1.1.1, Alternate DNS 1.0.0.1
5. Click Save

How to Change DNS on macOS

1. System Settings → Network → select your active connection → Details
2. Click the DNS tab
3. Click the + button and add 1.1.1.1, then add 1.0.0.1
4. Click OK and Apply

Enable DNS-over-HTTPS for Full Privacy

Standard DNS queries travel unencrypted over the network. This means your ISP — and any network observer — can see every domain you look up in plaintext, even if the websites themselves use HTTPS. DNS-over-HTTPS (DoH) encrypts your DNS queries inside standard HTTPS traffic, making them invisible to your ISP and network observers.

Enable DoH in Chrome

1. Open Chrome Settings → Privacy and Security → Security
2. Scroll to "Use secure DNS"
3. Select "With" and choose "Cloudflare (1.1.1.1)" from the dropdown

Enable DoH in Firefox

1. Open Firefox Settings → Privacy & Security
2. Scroll to "DNS over HTTPS"
3. Select "Max Protection" and choose Cloudflare or NextDNS

How Much Faster Will My Internet Feel?

The improvement you experience depends on how slow your current ISP's DNS is. Users with ISP resolvers responding at 150ms will notice a dramatic difference switching to Cloudflare's 11ms average. Users on ISPs with better DNS infrastructure (some modern ISPs have improved their resolvers) may notice less improvement.

The subjective improvement is most noticeable on:

• Initial page load time — pages start loading faster
• Following multiple links in sequence — each new page feels more instant
• App startup times that require DNS lookups
• Game server browser loading speed

Download speeds for large files (streaming video, game downloads) will not improve because DNS is resolved once at connection establishment — the bulk of those transfers use the already-resolved IP address. DNS improvements benefit connection initiation speed, not sustained throughput.

After switching DNS, use the NetSymptom diagnostic tool to check if other factors — bufferbloat, ISP congestion, or Wi-Fi packet loss — are still affecting your connection performance.