Re: [dns-operations] Percentage of DoT/DoH requests for public resolvers?

2023-06-12 Thread Geoff Huston 


> On 12 Jun 2023, at 10:49 pm, Stephane Bortzmeyer  wrote:
> 
> Hello,
> 
> I'm looking for the current percentage of encrypted DNS requests
> vs. in-the-clear ones on public resolvers having DoT/DoH/DoQ. I do not
> find public information about it. May be I searched too fast?
> 
> If you work for a public DNS resolver, is there data you can share? If
> you can/want/prefer to reply privately and ask me not to mention the
> name of the resolver, that's OK, too.
> 

https://stats.labs.apnic.net/edns 

This report is based on data from Cloudflare’s recursive resolver service. For
various reasons I believe that this data is not reflective of the larger DNS
resolution environment. 

regards,

 Geoff


___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] Percentage of DoT/DoH requests for public resolvers?

2023-06-12 Thread Richard T.A. Neal 
Hi Stephane,

There's also an outstanding feature request to add this to BIND's logs so that 
BIND administrators can more easily capture and report on this information. The 
Gitlab ticket is here but it's been a while since I've pestered the good folks 
at ISC about it!

https://gitlab.isc.org/isc-projects/bind9/-/issues/2748

Best,

Richard.

-Original Message-
From: dns-operations  On Behalf Of 
Stephane Bortzmeyer
Sent: Monday, June 12, 2023 1:49 PM
To: dns-operations@lists.dns-oarc.net
Subject: [dns-operations] Percentage of DoT/DoH requests for public resolvers?

Hello,

I'm looking for the current percentage of encrypted DNS requests vs. 
in-the-clear ones on public resolvers having DoT/DoH/DoQ. I do not find public 
information about it. May be I searched too fast?

If you work for a public DNS resolver, is there data you can share? If you 
can/want/prefer to reply privately and ask me not to mention the name of the 
resolver, that's OK, too.


___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] Percentage of DoT/DoH requests for public resolvers?

2023-06-12 Thread Andrey Meshkov via dns-operations 
--- Begin Message ---
A lot depends on the resolver as well.

In our case the statistics is skewed towards DNS-over-TLS and the reason is
that there are a lot of people
who configure their Android devices to use AdGuard DNS. If we remove
Android devices from the equation,
about 30-40% of DNS requests are from DoH (mostly), DoQ and DNSCrypt.

--
Regards,
Andrey Meshkov

CTO and Co-Founder at AdGuard 
a...@adguard.com


On Mon, Jun 12, 2023 at 5:19 PM  wrote:

>
>
> Hi,
>
> >I'm looking for the current percentage of encrypted DNS requests
> >vs. in-the-clear ones on public resolvers having DoT/DoH/DoQ.
>
> I suspect a lot will depend on whether the DoX resolver is used or
> suggested in popular devices or operating systems or browsers.
>
> Winfried
>
> ___
> dns-operations mailing list
> dns-operations@lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
--- End Message ---
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] Percentage of DoT/DoH requests for public resolvers?

2023-06-12 Thread abang 



Hi,

>I'm looking for the current percentage of encrypted DNS requests
>vs. in-the-clear ones on public resolvers having DoT/DoH/DoQ.

I suspect a lot will depend on whether the DoX resolver is used or suggested in 
popular devices or operating systems or browsers.

Winfried

___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] Percentage of DoT/DoH requests for public resolvers?

2023-06-12 Thread Bill Woodcock 
> On Jun 12, 2023, at 2:49 PM, Stephane Bortzmeyer  wrote:
> I'm looking for the current percentage of encrypted DNS requests
> vs. in-the-clear ones on public resolvers having DoT/DoH/DoQ.

I expect it will be different for each resolver, since they all have fairly 
distinct user communities, with different priorities.  John can give you a more 
specific answer on behalf of Quad9 once he’s awake out there on the Pacific 
coast.

-Bill
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] Percentage of DoT/DoH requests for public resolvers?

2023-06-12 Thread Peter Thomassen 

Hi Stephane,

On 6/12/23 08:49, Stephane Bortzmeyer wrote:

I'm looking for the current percentage of encrypted DNS requests
vs. in-the-clear ones on public resolvers having DoT/DoH/DoQ. I do not
find public information about it. May be I searched too fast?


Geoff gave an IEPG presentation in November which has some numbers on 
Cloudflare's 1.1.1.1 Do* breakdown, see slides 7 and 8 here: 
https://iepg.org/2022-11-06-ietf115/slides-115-iepg-sessa-doh-vs-dot-geoff-huston-joao-damas-00.pdf

Best,
Peter

--
https://desec.io/
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

[dns-operations] Percentage of DoT/DoH requests for public resolvers?

2023-06-12 Thread Stephane Bortzmeyer 
Hello,

I'm looking for the current percentage of encrypted DNS requests
vs. in-the-clear ones on public resolvers having DoT/DoH/DoQ. I do not
find public information about it. May be I searched too fast?

If you work for a public DNS resolver, is there data you can share? If
you can/want/prefer to reply privately and ask me not to mention the
name of the resolver, that's OK, too.


___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations