Introducing DNS Resolver for Tor
Jun 5, 2018Mahrud Sayrafi
Summary
Introduced a Tor onion service for the 1.1.1.1 DNS resolver, accessible via dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion and tor.cloudflare-dns.com. This service forwards DNS queries through the Tor network, preventing the resolver from seeing client IP addresses and obscuring DNS requests from ISPs. It utilizes a single-onion configuration for improved latency and relies on a certificate for tor.cloudflare-dns.com with the .onion address as a subject alternative name. Alt-Svc headers are used to enable browsers like Firefox Nightly to route traffic to the .onion address.
More from the DNS Infrastructure & Naming Conventions trail
- The keys to the Internet change on October 11, 2026. Are you ready?
- 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
- How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
- BGP ORIGIN attribute manipulation and its impact on the Internet
- Cloudflare Internal DNS is now generally available