https://www.youngju.dev/blog 천천히 올바르게. AI Researcher & DevOps Engineer Youngju's tech blog. GPU/CUDA, LLM, MLOps, Kubernetes AI workloads, distributed training, and data engineering. ko fjvbn2003@gmail.com (Youngju Kim) fjvbn2003@gmail.com (Youngju Kim) Sat, 16 May 2026 00:00:00 GMT https://www.youngju.dev/blog/culture/2026-05-16-dns-providers-privacy-2026-cloudflare-route-53-quad9-nextdns-controld-mullvad-pihole-adguard-home-deep-dive.en https://www.youngju.dev/blog/culture/2026-05-16-dns-providers-privacy-2026-cloudflare-route-53-quad9-nextdns-controld-mullvad-pihole-adguard-home-deep-dive.en In 2026 DNS is not just name resolution. DoH (RFC 8484), DoT (RFC 7858), and DoQ (RFC 9250) are standard; ODoH hides the client IP; HTTPS/SVCB records (RFC 9460) close the first HTTP/3 handshake without a separate A/AAAA lookup. Public resolvers — Cloudflare 1.1.1.1, Quad9 9.9.9.9, Google 8.8.8.8, OpenDNS, AdGuard, NextDNS, ControlD, Mullvad, dns0.eu — compete on policy. Authoritative DNS is dominated by Cloudflare, Route 53, Cloud DNS, Azure DNS, and NS1. At home Pi-hole 6, AdGuard Home, Technitium, Blocky, and Unbound + Stubby intercept ads and trackers. This guide covers KT 168.126.63.1, IIJ, Naver, JPDNS, and attack vectors like Kaminsky cache poisoning, DNS tunneling, and DGA — all in one place. Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) englishdnscloudflare-dnsroute-53quad9nextdnscontroldmullvad-dnspi-holeadguard-homedohdotdoqdnssecprivacy2026deep-dive https://www.youngju.dev/blog/culture/2026-05-16-dns-providers-privacy-2026-cloudflare-route-53-quad9-nextdns-controld-mullvad-pihole-adguard-home-deep-dive.ja https://www.youngju.dev/blog/culture/2026-05-16-dns-providers-privacy-2026-cloudflare-route-53-quad9-nextdns-controld-mullvad-pihole-adguard-home-deep-dive.ja 2026年の DNS は単なる名前解決ではない。DoH (RFC 8484)・DoT (RFC 7858)・DoQ (RFC 9250) が標準となり、ODoH は IP を分離し、HTTPS/SVCB レコード (RFC 9460) は A/AAAA を別に引かずに HTTP/3 ハンドシェイクを 1 RTT で終わらせる。パブリックリゾルバは Cloudflare 1.1.1.1・Quad9 9.9.9.9・Google 8.8.8.8・OpenDNS・AdGuard・NextDNS・ControlD・Mullvad・dns0.eu が並び、権威 DNS は Cloudflare・Route 53・Cloud DNS・Azure DNS・NS1 が占有する。家庭では Pi-hole 6・AdGuard Home・Technitium・Blocky・Unbound + Stubby が広告とトラッカーを止める。本記事は KT 168.126.63.1、IIJ、Naver、JPDNS のような国内/隣国 DNS から Kaminsky キャッシュポイズニング・DNS トンネリング・DGA まで一気に整理する。 Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) 日本語dnscloudflare-dnsroute-53quad9nextdnscontroldmullvad-dnspi-holeadguard-homedohdotdoqdnssecprivacy2026deep-dive https://www.youngju.dev/blog/culture/2026-05-16-dns-providers-privacy-2026-cloudflare-route-53-quad9-nextdns-controld-mullvad-pihole-adguard-home-deep-dive https://www.youngju.dev/blog/culture/2026-05-16-dns-providers-privacy-2026-cloudflare-route-53-quad9-nextdns-controld-mullvad-pihole-adguard-home-deep-dive 2026년 DNS는 단순한 이름 해석이 아니다. DoH(RFC 8484) · DoT(RFC 7858) · DoQ(RFC 9250)가 표준이 됐고, ODoH는 IP를 가렸으며, HTTPS/SVCB 레코드(RFC 9460)는 IP 없이 도메인만으로 ECH와 HTTP/3 핸드셰이크를 끝낸다. 공용 리졸버는 Cloudflare 1.1.1.1 · Quad9 9.9.9.9 · Google 8.8.8.8 · OpenDNS · AdGuard · NextDNS · ControlD · Mullvad · dns0.eu가 경쟁하고, 권한 서버는 Cloudflare DNS · Route 53 · Cloud DNS · Azure DNS · NS1이 점령했다. 집에서는 Pi-hole 6 · AdGuard Home · Technitium · Blocky · Unbound + Stubby가 광고/추적을 가로챈다. KT 168.126.63.1, IIJ, Naver, JPDNS 같은 국내/일본 DNS와 캐시 포이즈닝(Kaminsky) · DNS 터널링 · DGA 같은 공격까지 한 번에 정리한다. Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) dnscloudflare-dnsroute-53quad9nextdnscontroldmullvad-dnspi-holeadguard-homedohdotdoqdnssecprivacy2026deep-dive