dns2.toast.cafe (eirika.toast.cafe)

This is the toast.cafe recursive resolver. See also: https://dns.toast.cafe (anna.toast.cafe).

Policy: minimal, public configuration, maximum ways to access it (via dnsdist, privately configured). You can read the configuration here, and this page’s source here.

Usage

You can use this server through standard DNS UDP/TCP. Here’s some examples:

• udp://dns2.toast.cafe
• tcp://dns2.toast.cafe
• udp://2001:41d0:2:299c::
• tcp://94.23.40.156

You can also use DNSCrypt. Feel free to decrypt the stamps:

• ipv4: sdns://AQcAAAAAAAAAEDk0LjIzLjQwLjE1Njo0NTMgxiw7idkR-hGOwY6iWg6Gfi3RAD8tzNineLEdicQitBQPZG5zMi50b2FzdC5jYWZl
• ipv6: sdns://AQcAAAAAAAAAGFsyMDAxOjQxZDA6MjoyOTljOjpdOjQ1MyDGLDuJ2RH6EY7BjqJaDoZ-LdEAPy3M2Kd4sR2JxCK0FA9kbnMyLnRvYXN0LmNhZmU
• dns: sdns://AQcAAAAAAAAAE2RuczIudG9hc3QuY2FmZTo0NTMgxiw7idkR-hGOwY6iWg6Gfi3RAD8tzNineLEdicQitBQPZG5zMi50b2FzdC5jYWZl

There is also DNS over TLS on port 853.

Finally, there’s support for DOH via https://dns2.toast.cafe/dns-query. This page may eventually include a client for it.

You may use this service if any of the following apply to you:

• We’re friends, or you have an account on anna.toast.cafe.
• You’re a friend of someone in the above group.
• You promise to be reasonable with your usage (e.g. you’re not running a server farm off of this, just run your own, the config is public!).

Reasonable here is defined by the rate-limit on the server, which is 50 queries / second per ipv4/32 and ipv6/64, which is about a query every 20ms. If you exceed this, you get automatic delays of 100ms to your queries, i.e. you are throttled down to 10QPS.

Recommended Configuration

Ideally, you should be running dnsmasq at home, where you advertise its dns settings to your dhcp environment. The settings here would be:

## toast.cafe dns
# dns.toast.cafe (anna.toast.cafe)
server=54.36.104.180
server=2001:41d0:203:18b4::
# dns2.toast.cafe (eirika.toast.cafe)
server=94.23.40.156
server=2001:41d0:2:299c::