Coding With Fun
Home Docker Django Node.js Articles Python pip guide FAQ Policy

How does dns stub resolver establish tcp connection with cloudflare-dns.com?


Asked by Jasmine O’brien on Dec 02, 2021 FAQ



Before the connection the DNS stub resolver has stored a base64 encoded SHA256 hash of cloudflare-dns.com's TLS certificate (called SPKI) DNS stub resolver establishes a TCP connection with cloudflare-dns.com:853 DNS stub resolver initiates a TLS handshake In the TLS handshake, cloudflare-dns.com presents its TLS certificate.
Also,
Cloudflare’s 1.1.1.1 promise is to fix these DNS-related problems, while also providing super-fast connection speeds. What is 1.1.1.1? Cloudflare’s 1.1.1.1 is a DNS resolver. When configured properly on your device, all your connection requests will route through it.
Next, If the identity cannot be validated, DNS name resolution fails and the stub resolver returns an error. After the TLS connection is established, the stub resolver has a secure communication path between to a Google Public DNS server. Now the stub resolver can send DNS queries and receive responses over the connection.
Besides,
As of October 2018, you can transfer your domain to Cloudflare Registrar. Does Cloudflare charge for or limit DNS queries? No. Cloudflare offers authoritative DNS services free of charge and does not limit DNS queries for a domain on the Cloudflare network.
Also Know,
The stub resolver makes a TCP connection to port 853 at the one those IP address. The stub resolver initiates a TLS handshake with the Google Public DNS resolver. The Google Public DNS server returns its TLS certificate along with a full chain of TLS certificates up to a trusted root certificate.