https://www.youngju.dev/blog 천천히 올바르게. AI Researcher & DevOps Engineer Youngju's tech blog. GPU/CUDA, LLM, MLOps, Kubernetes AI workloads, distributed training, and data engineering. ko fjvbn2003@gmail.com (Youngju Kim) fjvbn2003@gmail.com (Youngju Kim) Sat, 16 May 2026 00:00:00 GMT https://www.youngju.dev/blog/culture/2026-05-16-dns-providers-privacy-2026-cloudflare-route-53-quad9-nextdns-controld-mullvad-pihole-adguard-home-deep-dive.en https://www.youngju.dev/blog/culture/2026-05-16-dns-providers-privacy-2026-cloudflare-route-53-quad9-nextdns-controld-mullvad-pihole-adguard-home-deep-dive.en In 2026 DNS is not just name resolution. DoH (RFC 8484), DoT (RFC 7858), and DoQ (RFC 9250) are standard; ODoH hides the client IP; HTTPS/SVCB records (RFC 9460) close the first HTTP/3 handshake without a separate A/AAAA lookup. Public resolvers — Cloudflare 1.1.1.1, Quad9 9.9.9.9, Google 8.8.8.8, OpenDNS, AdGuard, NextDNS, ControlD, Mullvad, dns0.eu — compete on policy. Authoritative DNS is dominated by Cloudflare, Route 53, Cloud DNS, Azure DNS, and NS1. At home Pi-hole 6, AdGuard Home, Technitium, Blocky, and Unbound + Stubby intercept ads and trackers. This guide covers KT 168.126.63.1, IIJ, Naver, JPDNS, and attack vectors like Kaminsky cache poisoning, DNS tunneling, and DGA — all in one place. Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) englishdnscloudflare-dnsroute-53quad9nextdnscontroldmullvad-dnspi-holeadguard-homedohdotdoqdnssecprivacy2026deep-dive https://www.youngju.dev/blog/culture/2026-05-16-dns-providers-privacy-2026-cloudflare-route-53-quad9-nextdns-controld-mullvad-pihole-adguard-home-deep-dive.ja https://www.youngju.dev/blog/culture/2026-05-16-dns-providers-privacy-2026-cloudflare-route-53-quad9-nextdns-controld-mullvad-pihole-adguard-home-deep-dive.ja 2026年の DNS は単なる名前解決ではない。DoH (RFC 8484)・DoT (RFC 7858)・DoQ (RFC 9250) が標準となり、ODoH は IP を分離し、HTTPS/SVCB レコード (RFC 9460) は A/AAAA を別に引かずに HTTP/3 ハンドシェイクを 1 RTT で終わらせる。パブリックリゾルバは Cloudflare 1.1.1.1・Quad9 9.9.9.9・Google 8.8.8.8・OpenDNS・AdGuard・NextDNS・ControlD・Mullvad・dns0.eu が並び、権威 DNS は Cloudflare・Route 53・Cloud DNS・Azure DNS・NS1 が占有する。家庭では Pi-hole 6・AdGuard Home・Technitium・Blocky・Unbound + Stubby が広告とトラッカーを止める。本記事は KT 168.126.63.1、IIJ、Naver、JPDNS のような国内/隣国 DNS から Kaminsky キャッシュポイズニング・DNS トンネリング・DGA まで一気に整理する。 Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) 日本語dnscloudflare-dnsroute-53quad9nextdnscontroldmullvad-dnspi-holeadguard-homedohdotdoqdnssecprivacy2026deep-dive https://www.youngju.dev/blog/culture/2026-05-16-dns-providers-privacy-2026-cloudflare-route-53-quad9-nextdns-controld-mullvad-pihole-adguard-home-deep-dive https://www.youngju.dev/blog/culture/2026-05-16-dns-providers-privacy-2026-cloudflare-route-53-quad9-nextdns-controld-mullvad-pihole-adguard-home-deep-dive 2026년 DNS는 단순한 이름 해석이 아니다. DoH(RFC 8484) · DoT(RFC 7858) · DoQ(RFC 9250)가 표준이 됐고, ODoH는 IP를 가렸으며, HTTPS/SVCB 레코드(RFC 9460)는 IP 없이 도메인만으로 ECH와 HTTP/3 핸드셰이크를 끝낸다. 공용 리졸버는 Cloudflare 1.1.1.1 · Quad9 9.9.9.9 · Google 8.8.8.8 · OpenDNS · AdGuard · NextDNS · ControlD · Mullvad · dns0.eu가 경쟁하고, 권한 서버는 Cloudflare DNS · Route 53 · Cloud DNS · Azure DNS · NS1이 점령했다. 집에서는 Pi-hole 6 · AdGuard Home · Technitium · Blocky · Unbound + Stubby가 광고/추적을 가로챈다. KT 168.126.63.1, IIJ, Naver, JPDNS 같은 국내/일본 DNS와 캐시 포이즈닝(Kaminsky) · DNS 터널링 · DGA 같은 공격까지 한 번에 정리한다. Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) dnscloudflare-dnsroute-53quad9nextdnscontroldmullvad-dnspi-holeadguard-homedohdotdoqdnssecprivacy2026deep-dive https://www.youngju.dev/blog/culture/2026-05-16-domain-dns-providers-2026-cloudflare-registrar-porkbun-namecheap-quad9-nextdns-deep-dive.en https://www.youngju.dev/blog/culture/2026-05-16-domain-dns-providers-2026-cloudflare-registrar-porkbun-namecheap-quad9-nextdns-deep-dive.en In 2026, domain registration and DNS have split into four camps. Registration, authoritative hosting, public resolvers, and DNS-as-Code. Cloudflare Registrar with at-cost pricing has become the de-facto standard, and Porkbun with free WHOIS privacy is the first choice for indie developers. Gandi lost trust after its 2023 sale to TWS and price hikes, while Google Domains was sold to Squarespace and effectively disappeared. On the resolver side, Cloudflare 1.1.1.1 and Google 8.8.8.8 dominate but Quad9 for security blocking, NextDNS and ControlD for family filtering have carved out their place. This article covers more than 10 registrars, 7 resolvers, DNS-as-Code tools like dnscontrol and Octodns, DNSSEC adoption status, and local realities in Korea (Whois, Gabia) and Japan (Onamae, Muumuu). Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) domaindnsregistrarcloudflare-registrarporkbunnamecheapgandihoverspaceshipnamesilogodaddysquarespace-domainsroute-53quad9nextdnscontrol-dadguard-dnsdnscontroloctodnsdnssec2026deep-diveenglish https://www.youngju.dev/blog/culture/2026-05-16-domain-dns-providers-2026-cloudflare-registrar-porkbun-namecheap-quad9-nextdns-deep-dive.ja https://www.youngju.dev/blog/culture/2026-05-16-domain-dns-providers-2026-cloudflare-registrar-porkbun-namecheap-quad9-nextdns-deep-dive.ja 2026年現在、ドメイン登録とDNSは4つの陣営に分かれた。登録(Registrar)、権威ホスティング(Authoritative DNS)、リゾルバ(Public Resolver)、そしてIaC(DNS-as-Code)である。Cloudflare Registrarはat-cost料金で事実上の標準となり、Porkbunは無料WHOISプライバシーで個人開発者の第一選択となった。Gandiは2023年のTWSへの売却後、価格引き上げで信頼を失い、Google DomainsはSquarespaceに売却されて消滅した。リゾルバ側ではCloudflare 1.1.1.1とGoogle 8.8.8.8が二強だが、Quad9のセキュリティブロック、NextDNSとControlDのファミリーフィルタリングも定着した。本稿は10社あまりのレジストラ、7つのリゾルバ、dnscontrolやOctodnsなどのDNS-as-Codeツール、DNSSEC導入状況、そして韓国(後イズ、ガビア)と日本(お名前.com、ムームードメイン)の現地事情までまとめて整理する。 Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) domaindnsregistrarcloudflare-registrarporkbunnamecheapgandihoverspaceshipnamesilogodaddysquarespace-domainsroute-53quad9nextdnscontrol-dadguard-dnsdnscontroloctodnsdnssec2026deep-dive日本語 https://www.youngju.dev/blog/culture/2026-05-16-domain-dns-providers-2026-cloudflare-registrar-porkbun-namecheap-quad9-nextdns-deep-dive https://www.youngju.dev/blog/culture/2026-05-16-domain-dns-providers-2026-cloudflare-registrar-porkbun-namecheap-quad9-nextdns-deep-dive 2026년 현재 도메인 등록과 DNS는 네 진영으로 갈렸다. 등록(Registrar), 권위 호스팅(Authoritative DNS), 리졸버(Public Resolver), 그리고 IaC(DNS-as-Code). Cloudflare Registrar는 at-cost 가격으로 사실상 표준이 됐고, Porkbun은 무료 WHOIS 프라이버시로 개인 개발자의 첫 선택이 됐다. Gandi는 2023년 TWS 매각 후 가격 인상으로 신뢰를 잃었고, Google Domains는 Squarespace에 팔려 사라졌다. 리졸버 쪽에서는 Cloudflare 1.1.1.1과 Google 8.8.8.8이 양강이지만, Quad9의 보안 차단, NextDNS와 ControlD의 가족 필터링이 자리를 잡았다. 이 글은 10여 곳의 등록 대행사, 7개 리졸버, dnscontrol과 Octodns 같은 DNS-as-Code 도구, DNSSEC 도입 현황, 그리고 한국(후이즈, 가비아)과 일본(お名前.com, ムームードメイン)의 현지 사정까지 한 번에 정리한다. Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) domaindnsregistrarcloudflare-registrarporkbunnamecheapgandihoverspaceshipnamesilogodaddysquarespace-domainsroute-53quad9nextdnscontrol-dadguard-dnsdnscontroloctodnsdnssec2026deep-dive