ΕΛΠΙΣ DNS

Choose Your Gun

Somewhere between your keyboard and the rest of the world, a machine is asked a very simple question: where is this? Whoever answers that question owns your internet. They can log it. They can sell it. They can decide that today, for reasons nobody wrote down, this particular door is closed. Most people never find out who is answering. You are about to.

Everything on this table is loaded and encrypted end to end — DNS over HTTPS, DNS over TLS — so the answer arrives sealed and the question never travels in the open. Pick the one that fits the job: a local resolver for speed, an international one for the doors that keep mysteriously closing, DNS64/NAT64 if your network has already moved on from IPv4. The prettiest gun in the drawer is rarely the one that gets you home.

The table

NOTE: Combinations that nobody operates are struck out automatically. Choose from the left, and the rest of the table rearranges itself around you.

Filter

Region

Provider

Network

Feature

Transport

Endpoint

Selection

Rotation

Every hostname below answers for the entry you picked. Any of them will do; use two or three if your client accepts a list.

Holding it is not the same as knowing how to use it

Android, Windows, iOS, Firefox, MikroTik, OpenWrt, AdGuard Home — every one of them takes the same endpoint, and every one of them hides the setting somewhere different.

How to set it up

Why this exists

Four things worth knowing before you trust anyone with the question where is this? — including us.

The Blacklist

The four lists that decide which names never resolve, and the subscription URLs for all of them.

What we block

No Middlemen

Our own recursion, straight to the root servers. IPv6 first, EDNS, DNSSEC, ECH, and nobody upstream keeping a ledger.

How we answer

Recursive resolvers

Raw IPv6 recursion, unfiltered on purpose, for anyone running AdGuard Home, Pi-hole or Blocky of their own.

Bring your own filter

Bootstrap DNS

Something has to resolve the resolver. These plain addresses exist for that one moment and nothing else.

The cold start

House rules

The question is nobody's business

A list of the names you look up is a confession you never agreed to make. Encrypted transport keeps that confession between you and the resolver.

Censorship is just bad routing

A block list is somebody's opinion, enforced with a hammer, on a network that was designed to route around exactly that.

Monitoring arrives dressed as convenience

The free resolver handed to you by default is rarely free. Somewhere, a column with your name on it is being sorted.

Your curiosity is not merchandise

ΕΛΠΙΣ exists to answer the question and then forget it was asked. That is the whole arrangement. No ledger, no profile, no sales pitch.

Running your own resolver?

Every entry on this page comes out of a single file: dns.json. Copy a block, change the values, open a pull request. No build step, no framework, no meeting. CONTRIBUTING.md has the whole ritual, and it fits on one screen.