All donations are welcome and any amount of money will help me to maintain this project 🥰

Repository moved

The original GitHub account zoonderkins was suspended by GitHub, so github.com/zoonderkins/blahdns is no longer reachable. This project is now maintained at github.com/fun-ed/blahdns, re-published with the full commit history. Issues, gists, and stars from the old account could not be migrated.

原 GitHub 帳號 zoonderkins 遭 GitHub 停權，原 repo 已無法存取；本專案改由 fun-ed 帳號重新公開，並保留完整 commit 歷史。舊帳號的 issues、gists 與 stars 無法搬移。

Announcements

• .eth names work again through our own ENS gateway (plain HTTP only, e.g. http://matoken.eth/; setup guide), and the Alfis TLDs are now resolved by our own Alfis node. (2026/10/14)
• Japan, Switzerland and Finland servers were discontinued on 2024-07-15; their old configs are in Archived/legacy-servers.
• DNS-over-HTTPS accepts POST requests only (RFC 8484 wire format). DNS-over-TLS is served on port 853 only. (2026/10/14)
• Our DNS service has been blocked due to Taiwan RPZ policy
• We had migrated SSL CA from Buypass GO to Google CA. (2025/09/27)
• We had migrated DNS Stack to Knot-resolver + dnsdist
• Beta support alfis.name tld. .anon, .btn, .conf, .index, .merch, .mirror, .mob, .screen, .srv, .ygg
• Old announcements were kept in issue #36 on the suspended zoonderkins/blahdns repository and are no longer available.

Our features

• Block Trackers, Ads, Malwares, Phishing
• No ECS, DNSSEC ready, No logs, OpenNIC, Eth TLD, Yggdrasil
• Support http://matoken.eth/ | http://mesh.ygg/ | http://i2pd.ygg/ | http://blahdns.oss/ | https://i❤.ws/
• BlahDNS status: Status Page

How to setup / config DoH DoT Dnscrypt 👇

Config: HERE for more details

Server architecture

Every public resolver (Germany, Singapore) runs the same stack:

flowchart LR
  C[Client] -->|DoT 853/tcp| DD[dnsdist<br/>Lua config]
  C -->|DoH HTTP/2 443/tcp<br/>DoH HTTP/3 443/udp| DD
  C -->|DoQ 784/udp| DD
  C -->|DNS over DTLS 853/udp| RD[RouteDNS]
  C -->|DNSCrypt v2 8443 tcp/udp| ED[encrypted-dns-server]
  DD --> F[Filtering layer<br/>blocklists + allowlists]
  RD --> F
  ED --> F
  F --> K[Knot Resolver]
  K -->|recursion + DNSSEC| ICANN[(ICANN DNS)]
  K --> ON[OpenNIC TLDs]
  K --> AL[Alfis TLDs<br/>.ygg .anon ...]
  K --> ETH[.eth<br/>BlahDNS ENS gateway]

Loading

Layer	Software	What it does
Encrypted frontends	dnsdist (Lua config)	DNS-over-TLS on 853/tcp, DNS-over-HTTPS on 443 (HTTP/2 and HTTP/3, POST only), DNS-over-QUIC on 784/udp. Drops ANY and CHAOS queries, per-client rate limits, packet cache
	RouteDNS	DNS over DTLS on 853/udp
	encrypted-dns-server	DNSCrypt v2 on 8443 tcp/udp
Filtering layer	blocklists + allowlists	Blocks trackers, ads, malware and phishing using the lists in hosts/source.txt plus our own black/whitelists. Blocked names answer 0.0.0.0 / ::. No query log
Recursive resolver	Knot Resolver	Full recursion with DNSSEC validation, no ECS. Special zones below

Special zones in the resolver:

• OpenNIC TLDs (.oss, .geek, ...): forwarded to OpenNIC.
• Alfis TLDs (.anon .btn .conf .index .merch .mirror .mob .screen .srv .ygg): resolved by our own Alfis node (blockchain DNS) in Germany; the Singapore resolver forwards these TLDs to Germany over DNS-over-TLS. These names are not DNSSEC-signed. Example: http://mesh.ygg/ (needs a Yggdrasil connection to open the site).
• .eth (ENS): every .eth name resolves (A/AAAA only) to the BlahDNS ENS gateway. The gateway reads the name's ENS content hash from Ethereum and serves the IPFS site over plain HTTP only: no public CA issues certificates for .eth, so https://<name>.eth is refused, and there is no HTTPS mirror under blahdns.com. Built on eth.limo's open-source dweb-proxy-api and IPFS Rainbow. Example: http://matoken.eth/. Browser setup: client-conf/eth.md.

The DoT, DoH and DoQ endpoints are also reachable over the Yggdrasil network.

Config file / Client

• Collection of blocklist use in BlahDNS: Source
• Yggdrasil IPv6 Network: Setup guide
• .eth (ENS) sites: Setup guide
• Android DoH/DoT: Nebulo App | personalDNSfilter App | Intra
• iOS Dnscryptv2/DoH: Dnscloak
• Dnscryptv2: dnscrypt-proxy
• Config files: Client config example

Awesome dns-resolver

The previous list was a gist on the suspended zoonderkins account and is no longer available.

Huge thanks to those OSS and ORG

1. Knot-resolver
2. DNSPrivacy.org

Buy me some coffee ☕

  

DISCLAIMER

• This is a HOBBY service. The operator does not guarantee in any way the access, availability and continuity of the functioning of this service.
• Use at your own risk. Under no circumstances will the operator be held responsible or liable in any way for any claims, damages, losses, expenses, costs or liabilities whatsoever (including, without limitation, any direct or indirect damages for loss of profits, business interruption or loss of information) resulting or arising directly or indirectly from accessing or otherwise using this service (Blahdns server).
• By using this website and service you consent to the disclaimer and agree to its terms and conditions.