Every DNS-over-HTTPS and DNS-over-TLS endpoint in the app was re-tested live against the same request path the benchmark itself uses, and the list was corrected from the results.
Verified and cleaned up
-
104 of 107 DoH endpoints and 57 of 60 DoT endpoints confirmed answering. Entries that could not work were removed: Snopyta (the host no longer exists), FAELIX encrypted DNS (expired certificate on both DoH and DoT), the Google and Cloudflare DNS64 endpoints (IPv6-only, so permanently unreachable on IPv4), FortiGuard DoT (no TLS handshake on port 853) and RethinkDNS Sky DoT (nothing listening; the Max host is unaffected).
Resolvers that are simply unreachable from one location are deliberately kept, since reachability is exactly what the benchmark is there to measure.
-
Provider details that never applied are fixed. The metadata for Yandex and Tiarap was filed under names that did not match the ones the resolver list uses, so country, no-logging and filtering details were silently ignored for them. The same sweep found BlahDNS and AdGuard's second address described but never actually listed, and Alekberg described despite having no reachable endpoint.
New
- Gcore encrypted DNS — DoH and DoT on both resolver addresses, plus both IPv6 addresses. Gcore publishes no hostname for encrypted DNS, so these run against the addresses directly; all four endpoints were verified answering.
- BlahDNS — DoH and DoT on the German node.
- AdGuard — the second default address, 94.140.15.15.
Benchmark
- When a run finishes, the app now goes straight to Results. Cancelled or failed runs stay where they are.
Assets
- Windows installer:
DNS-Hop-Setup-v2.4.6.exe - Windows portable:
DNS-Hop-Portable-v2.4.6.zip - Linux:
DNS-Hop-AppImage-v2.4.6-x86_64.AppImage(with.sha256)