1.1.1.1
Free DNS service maintained by Cloudflare in partnership with APNIC
From Wikipedia, the free encyclopedia
1.1.1.1 is a free Domain Name System (DNS) service by the American company Cloudflare that was started in a partnership with APNIC.[7] The service functions as a recursive name server, providing domain name resolution for any host on the Internet. The service was announced on April 1, 2018.[8] On November 11, 2018, Cloudflare announced a mobile application of their 1.1.1.1 service for Android and iOS.[9] On September 25, 2019, Cloudflare released WARP, an upgraded version of their original 1.1.1.1 mobile application.[10]
| 1.1.1.1 | |
|---|---|
 | |
| Developer | Cloudflare |
| Initial release | April 1, 2018[1] |
| Stable release | |
| Platform | Android, iOS, Linux, macOS, Windows |
| Website | one |
Service
The 1.1.1.1 DNS service operates recursive name servers for public use at the twelve IP addresses listed below.[11] These addresses are mapped to the nearest operational server by anycast routing.[12] The DNS service is also available for Tor clients via an onion address.[13] Users can set up the service by manually changing their DNS resolvers to the IP addresses below. Cloudflare also offers 1.1.1.1 client applications for Android, iOS, Windows, macOS and Linux; the apps primarily act as a VPN-like service (Cloudflare WARP) that routes and secures device traffic, and they also configure the system DNS resolvers to use Cloudflare's 1.1.1.1 service.[14][15]
| 1.1.1.1 | 1.1.1.1 for Families | ||
|---|---|---|---|
| Filters domains | No[16] | Blocks malware[16][17] | Blocks malware and adult content[16] |
| Passes ECS | No | ||
| Validates DNSSEC | Yes | ||
| Via DoH | https://cloudflare-dns.com/dns-query[18] | https://security.cloudflare-dns.com/dns-query | https://family.cloudflare-dns.com/dns-query |
| Via DoT | one.one.one.one[19]
1dot1dot1dot1.cloudflare-dns.com |
security.cloudflare-dns.com | family.cloudflare-dns.com |
| Via IPv4[16] | 1.1.1.1 1.0.0.1 |
1.1.1.2 1.0.0.2 |
1.1.1.3 1.0.0.3 |
| Via IPv6[16] | 2606:4700:4700::1111 2606:4700:4700::1001 |
2606:4700:4700::1112 2606:4700:4700::1002 |
2606:4700:4700::1113 2606:4700:4700::1003 |
Technology
1.1.1.1 is a recursive DNS resolver. Cloudflare runs an authoritative DNS resolver with a network of over 20 million Internet properties. With the recursor and the resolver on the same network, some DNS queries can be answered directly.[independent source needed]
With the release of the 1.1.1.1 mobile application in November 2018, Cloudflare added the ability for users to encrypt their DNS queries over HTTPS (DoH) or TLS (DoT).[20] Later on, a VPN tunnel was implemented based on Cloudflare's own BoringTun, a user-space implementation of WireGuard written in Rust.[21][22][23]
Prior usage of the IP address
Technology websites noted that by using 1.1.1.1 as the IP address for its service, Cloudflare exposed misconfigurations in existing setups that violated Internet standards (such as RFC 1918). 1.1.1.1 was not a reserved IP address yet was abused by many existing routers (mostly those sold by Cisco Systems) and companies for hosting login pages to private networks, exit pages or other purposes, rendering the proper routing of 1.1.1.1 impossible on those systems.[24][25] Additionally, 1.1.1.1 is blocked on many networks and by multiple ISPs because the simplicity of the address means that it was previously often used inappropriately for testing purposes and not legitimate use.[24] These abuses have led to a huge influx of garbage data to Cloudflare's servers.[25]
Cleanup of 1.1.1.1 and 1.0.0.1
The 1.0.0.0/8 IP block was assigned in 2010 to APNIC;[26] before this time it was unassigned space.[27] An unassigned IP space, however, is not the same as a reserved IP space for private use (called a reserved IP address).[28] For example, AT&T has said that it was working on fixing a routing issue within its CPE hardware that prevented access to 1.1.1.1.[non sequitur][29][better source needed]
WARP
In September 2019, Cloudflare released a VPN-like service, called WARP, which is built into the 1.1.1.1 app.[30][31][14] WARP is based on Cloudflare's own WireGuard implementation written in Rust called BoringTun.[32] It tunnels the connection between device and nearest Cloudflare data center, claiming to increase connection speed, encrypting data and DNS requests.[10] Connection speed gain is claimed to be achieved by converting TCP traffic to UDP (both IPv4 and IPv6 are supported), DNS resolution inside Cloudflare's network, and direct access to sites which are using Cloudflare's infrastructure.[33]
WARP connects the user through an encrypted tunnel to the closest Cloudflare data center, thereby hiding any traffic from intermediaries such as local network operators or Internet Service Providers. If the user is trying to reach a site or service outside the Cloudflare network, WARP will replace the user's IP address with a Cloudflare address that represents the user's approximate location, thus hiding the user's identity from the site or service. If, however, the user is trying to reach a destination that is managed by Cloudflare, that destination is provided with the user's true IP address in an X_FORWARDED_FOR header.[34][35] WARP is thus not quite equivalent to a true VPN.
WARP+ and WARP+ Unlimited
WARP+ routes users' Internet traffic into less congested pathways using Cloudflare's own private backbone, called Argo, which makes it much faster than basic WARP.
WARP+ historically was a limited data plan. To get more data to use WARP+, users had to refer more people to use the service.[10][31][36] The WARP+ Referral program is no longer available and has been discontinued.[37]
As of November 2025, WARP+ (aka WARP+ Unlimited) is a paid monthly subscription with no data limits.[36]
See also
- 8.8.8.8, a similar public DNS service by Google
- DNS over HTTPS
- DNS over TLS
- Public recursive name server
- IPv4 and IPv6
- Quad9