DNS Speed Test — Find Your Fastest DNS in 30 Seconds

Compare the fastest, most consistent DNS resolvers from your browser. Jitter-first scoring, cached vs. uncached measurement, and encrypted DoH – no install or account required.
Estimated runtime · ~28 seconds · DoH only

What is a DNS speed test, and why should you care?

Every page load on the internet triggers somewhere between 5 and 30 DNS lookups. Each one adds 20 to 200 milliseconds of waiting, depending on your resolver.

A DNS speed test measures exactly how much delay your DNS is costing you, and whether a different resolver would save you seconds per page. The answer is usually yes. The difference between your current setup and the fastest option can exceed 100ms per lookup.

DNS is the phonebook of the internet. When you type controld.com into your browser, a DNS resolver translates it to an IP address so your computer knows where to connect. The time this takes is called DNS latency, and it's one of the fastest-to-fix performance bottlenecks on modern networks.

This page runs a comprehensive test comparing the built-in public DNS resolvers plus any custom DoH endpoint you add, then shows you the one metric most tools hide: jitter. Because speed is only half the story. The other half is how consistent those speeds are.

Understanding your results — the metrics that matter

Most DNS speed tests report average, minimum, and maximum. Those are incomplete, and sometimes misleading. Here's what we report and why it matters more.
Jitter — the metric everyone ignoresJitter is how much your latency varies between queries. Low, consistent jitter feels fast. High jitter feels sluggish even when the average is good. Your brain notices the spikes, not the average. A resolver averaging 18ms dead flat feels faster than one averaging 15ms with regular jumps to 100ms.
p50 — Median latencyThe middle value. Half your queries are faster than this, half slower. Less fooled by outliers than 'average' (which is what most tools call their main number). If 9 queries take 20ms and 1 takes 500ms, the average is 68ms but the median is 20ms. Median is what you actually experience.
p95 — Tail latency95% of queries complete in this time or less. This matches what you actually feel when a page feels slow: the worst 5% of queries. A resolver with 20ms median but 400ms p95 feels slow. One with 30ms median and 45ms p95 feels fast and reliable.
AvailabilityPercentage of queries that completed before the 5-second timeout. A resolver at 99.9% availability still fails 1 in 1,000 queries. Failures cascade into 'this site can't be reached' errors. Anything below 99.5% is unreliable for daily use.
Cached vs uncachedMost tools only test cached lookups: a domain the resolver has already seen. This mostly measures geographic proximity. Uncached lookups test the resolver's upstream recursion, which is what you hit every time you visit a new site. We measure both separately, and the gap between them reveals resolver quality nothing else can.

DNS Speed Test Methodology and Limitations

Every speed test makes methodology choices that affect results. Most tools bury these choices or misrepresent them. Here's ours, including what we can't measure.
  1. 1.
    Warm-up phaseTwo throwaway queries to each resolver. Not counted. Primes the TCP/TLS connection so the first real query isn’t measuring handshake overhead.
  2. 2.
    Cached lookup test (10 queries)Repeated queries for a popular domain the resolver has almost certainly cached. Tests cache hit speed and raw RTT.
  3. 3.
    Uncached lookup test (10 queries)Random subdomains of rotating short-TTL domains. Forces a cold lookup, testing the resolver’s upstream recursion. This is the test most browser tools skip.
  4. 4.
    Availability & timeout checkAny query that doesn’t return in 5 seconds counts as failed. A resolver must complete more than half of its measured queries to be marked available.
  5. 5.
    ISP detectionA query to a DNS probe endpoint reveals which resolver forwarded the lookup upstream. We show that DNS provider as context; it is only scored if it exposes a public DoH endpoint you add manually. Not happy with your ISP DNS? Try Control D's free DNS resolvers.
  6. 6.
    ScoringComposite score weights p50 (30%), p95 (30%), jitter (30%), availability (10%). Presets shift these weights to match your use case.

Our honest limitations

Browser HTTP overheadIncluded in all timings. Raw DNS clients measure 5–10ms faster than we do, across the board. All resolvers are measured the same way, so relative comparisons remain valid.
Cold-cache testing is best-effortWe can't guarantee a resolver hasn't recently cached our test domains from another user. We're working on a dedicated test domain to eliminate this limitation.
Network conditions during the testAbsolute numbers are affected by your current network conditions. Rerun when Wi-Fi is quiet for the cleanest comparison.
CDN effectsCan inflate cached lookup scores for resolvers that happen to be geographically close to popular CDN edges.

The fastest DNS servers in 2026 — our honest comparison

Speed is one axis. Filtering, protocol support, privacy policy, regional coverage all matter. Every resolver gets a “when notto choose this” column, including Control D.
Cloudflare1.1.1.1
Latency15–25ms
JitterVery low
ProtocolsDoH, DoT
FilteringNone (1.1.1.2 for malware)
PrivacyNo logs, audited annually
Best ForGeneral browsing, speed priority
When NOT to chooseNo default filtering; need 1.1.1.2/1.1.1.3 for malware/family
Google DNS8.8.8.8
Latency20–35ms
JitterLow
ProtocolsDoH, DoT
FilteringNone
PrivacyLogs queries (anonymized)
Best ForWidely compatible default
When NOT to chooseQuery logging concerns for privacy-sensitive users
Quad99.9.9.9
Latency25–40ms
JitterMedium
ProtocolsDoH, DoT, DoQ
FilteringMalware (built-in)
PrivacySwiss, GDPR-compliant, no logs
Best ForPrivacy + security-first users
When NOT to chooseCan be slower than Cloudflare on some US/APAC routes
Control D76.76.2.0
Latency18–30ms
JitterVery low
ProtocolsDoH, DoT, DoQ
FilteringConfigurable (free + paid tiers)
PrivacyNo logs on free tier
Best ForPrivacy + custom filtering
When NOT to chooseSmaller edge network than Cloudflare/Google; not always fastest in every region
OpenDNS208.67.222.222
Latency30–55ms
JitterMedium
ProtocolsDoH, DoT
FilteringFamily, Home
PrivacyCisco-owned, logs queries
Best ForEnterprise compatibility
When NOT to chooseCisco acquisition changed privacy posture
AdGuard DNS94.140.14.14
Latency28–50ms
JitterMedium
ProtocolsDoH, DoT, DoQ
FilteringAds, trackers, malware
PrivacyNo logs, Cyprus-based
Best ForNetwork-level ad blocking
When NOT to chooseFiltering can break specific sites; test with your workflow first
NextDNS45.90.28.0
Latency32–55ms
JitterMedium
ProtocolsDoH, DoT, DoQ
FilteringHighly customizable per-user
PrivacyOptional logs (user-controlled)
Best ForPower users wanting per-device config
When NOT to chooseRequires profile setup; free tier has a query limit
Mullvad DNS194.242.2.2
Latency45–65ms
JitterMedium-high
ProtocolsDoH, DoT, DoQ
FilteringOptional (base/extended/family)
PrivacyNo logs, Sweden-based
Best ForPrivacy maximalists
When NOT to chooseEurope-centric POPs, slower from Asia/Oceania
dns0.eu193.110.81.0
Latency40–65ms
JitterMedium
ProtocolsDoH, DoT, DoQ
FilteringMalware, phishing
PrivacyEU non-profit, no logs
Best ForEuropean users wanting EU-hosted
When NOT to chooseNewer service, coverage still expanding globally
CleanBrowsing185.228.168.9
Latency50–80ms
JitterHigh
ProtocolsDoH, DoT
FilteringAdult, family tiers
PrivacyNo logs
Best ForFamilies wanting content filtering
When NOT to chooseSpeed varies by region; better as a filter than a speed pick
ResolverLatencyJitterProtocolsFilteringPrivacyBest ForWhen NOT to choose
Cloudflare1.1.1.1
15–25msVery lowDoH, DoTNone (1.1.1.2 for malware)No logs, audited annuallyGeneral browsing, speed priorityNo default filtering; need 1.1.1.2/1.1.1.3 for malware/family
Google DNS8.8.8.8
20–35msLowDoH, DoTNoneLogs queries (anonymized)Widely compatible defaultQuery logging concerns for privacy-sensitive users
Quad99.9.9.9
25–40msMediumDoH, DoT, DoQMalware (built-in)Swiss, GDPR-compliant, no logsPrivacy + security-first usersCan be slower than Cloudflare on some US/APAC routes
Control D76.76.2.0
18–30msVery lowDoH, DoT, DoQConfigurable (free + paid tiers)No logs on free tierPrivacy + custom filteringSmaller edge network than Cloudflare/Google; not always fastest in every region
OpenDNS208.67.222.222
30–55msMediumDoH, DoTFamily, HomeCisco-owned, logs queriesEnterprise compatibilityCisco acquisition changed privacy posture
AdGuard DNS94.140.14.14
28–50msMediumDoH, DoT, DoQAds, trackers, malwareNo logs, Cyprus-basedNetwork-level ad blockingFiltering can break specific sites; test with your workflow first
NextDNS45.90.28.0
32–55msMediumDoH, DoT, DoQHighly customizable per-userOptional logs (user-controlled)Power users wanting per-device configRequires profile setup; free tier has a query limit
Mullvad DNS194.242.2.2
45–65msMedium-highDoH, DoT, DoQOptional (base/extended/family)No logs, Sweden-basedPrivacy maximalistsEurope-centric POPs, slower from Asia/Oceania
dns0.eu193.110.81.0
40–65msMediumDoH, DoT, DoQMalware, phishingEU non-profit, no logsEuropean users wanting EU-hostedNewer service, coverage still expanding globally
CleanBrowsing185.228.168.9
50–80msHighDoH, DoTAdult, family tiersNo logsFamilies wanting content filteringSpeed varies by region; better as a filter than a speed pick

Best DNS for Gaming, Streaming, Privacy, and Everyday Browsing

Select a preset in the tool above to rerun with that use case's scoring weights. Each one prioritizes a different metric based on what actually hurts your experience.
GamingJitter punishes you harder than average speed. A 5ms median with 50ms spikes feels worse than a flat 20ms. Matchmaking, lobbies, and chat hit DNS constantly. Gaming preset weights: jitter 40% · p95 35% · p50 15% · uptime 10%. Run the test to see which resolver is most consistent on your connection.
StreamingCDN edge resolution speed matters most. Fewer but faster lookups per playback. Consistency beats absolute speed here; stalled buffers are worse than slow starts. Streaming preset weights: p50 35% · uptime 30% · p95 20% · jitter 15%. Run the test to find the best local result.
PrivacyNo-log policies, encrypted protocols (DoH/DoT/DoQ), jurisdiction, and optional malware blocking. Speed ranks third here; privacy posture ranks first. Use the speed test to compare latency between privacy-friendly DoH resolvers, then choose based on policy, jurisdiction, and filtering needs.
FamiliesDNS filtering is the priority — blocking adult content, malware, and phishing at the DNS level before any device can reach it. Speed matters second. Use the benchmark for latency and availability, then choose a family resolver based on filtering controls, safe-search enforcement, and whether it works across every device you need to protect.

How to Change Your DNS on Windows, macOS, iOS, Android, and Router

Found a faster resolver? Here is how to switch.Pick your device below. Each set of instructions is short and current as of April 2026. Applying DNS at the router covers every device on your network at once.
  1. Open Settings → Network & internet
  2. Select your active connection (Wi-Fi or Ethernet)
  3. Click Hardware properties
  4. Next to DNS server assignment, click Edit
  5. Switch to Manual, enable IPv4, enter Preferred: 1.1.1.1, Alternate: 1.0.0.1
  6. Enable DNS over HTTPS → select On (automatic template)
  7. Save, reconnect to the network
Note: If you have a VPN active, change DNS inside the VPN client instead. Windows DNS settings may be bypassed.
  1. Open System Settings → Network
  2. Select your active connection, click Details
  3. Go to DNS tab
  4. Remove existing entries, click + to add: 1.1.1.1 and 1.0.0.1
  5. Click OK, then Apply
Note: DNS settings are per network location. If you switch Wi-Fi networks frequently, create a Location profile or set DNS at the router.
  1. Open Settings → Wi-Fi
  2. Tap the ⓘ next to your current network
  3. Scroll to Configure DNS, tap it
  4. Switch to Manual, remove existing, add: 1.1.1.1
  5. Tap Save
Note: This applies per Wi-Fi network only. For global DNS (including cellular), install a DoH configuration profile from your resolver provider.
  1. Open Settings → Network & internet
  2. Tap Private DNS
  3. Select Private DNS provider hostname
  4. Enter: one.one.one.one (Cloudflare) or dns.controld.com
  5. Tap Save
Note: Private DNS on Android is DoT only. Works on both Wi-Fi and cellular globally. No per-network setup required.
  1. Log into your router admin panel (usually 192.168.1.1 or 192.168.0.1)
  2. Find WAN, Internet, or DHCP settings
  3. Locate DNS Server fields (may be labeled Primary / Secondary)
  4. Enter: 1.1.1.1 and 1.0.0.1
  5. Save and restart the router
Note: Router DNS is the cleanest option — every device uses it automatically. Some ISPs override router DNS; in that case, configure per-device instead.
  1. Go to Settings → Network → Settings
  2. Choose Set Up Internet Connection
  3. Select your network, then Advanced Settings
  4. Set DNS Settings to Manual
  5. Primary: 1.1.1.1, Secondary: 1.0.0.1
  6. Save, test connection
Note: PS5 only supports unencrypted DNS. For encrypted DNS (DoH/DoT), configure at the router instead.
  1. Press the Xbox button to open the guide
  2. Go to Profile & system → Settings
  3. Navigate to General → Network settings
  4. Select Advanced settings
  5. Select DNS settings → Manual
  6. Primary DNS: 1.1.1.1, Secondary DNS: 1.0.0.1
  7. Save, then restart your Xbox
Note: Xbox only supports unencrypted DNS. For encrypted DNS (DoH/DoT), configure at the router instead.
  1. For systemd-resolved: edit /etc/systemd/resolved.conf
  2. Under [Resolve], set DNS=1.1.1.1 and FallbackDNS=1.0.0.1
  3. Optionally enable DoT: set DNSOverTLS=yes
  4. Restart: sudo systemctl restart systemd-resolved
  5. For resolvconf: edit /etc/resolvconf/resolv.conf.d/head and add nameserver 1.1.1.1
  6. Apply: sudo resolvconf -u
Note: NetworkManager may override systemd-resolved settings on desktop distros. If changes don't persist, set DNS inside NetworkManager's connection profile instead.
Want filtering on top of speed? Set up Control D in minutes.

Frequently asked questions

We test each resolver using DNS-over-HTTPS (DoH) from your browser. For every resolver, we run cached lookups (domains likely in the resolver cache) and uncached lookups (unique subdomains that force fresh resolution). We report median latency (p50), tail latency (p95), jitter (standard deviation), and availability. The composite score weights all four metrics.

Average latency hides the spikes that make browsing feel slow. A resolver averaging 20ms with occasional 400ms spikes feels worse than one averaging 35ms with rock-solid consistency. Jitter measures that consistency — it is the standard deviation across all test queries. Lower jitter means a more predictable, smoother browsing experience.

Cached lookups test how fast a resolver returns domains it already knows about — this is the best-case scenario. Uncached lookups force the resolver to query upstream authoritative servers from scratch, which is what happens when you visit a site for the first time. Most tools only test cached performance. We test both because uncached speed is what you actually feel during normal browsing.

Results reflect your real-world experience because tests run from your browser, on your network, from your location. We use high-resolution timing for sub-millisecond accuracy. The uncached test uses best-effort cold-cache methodology — some resolvers may have recently cached our test domains from other users, which can slightly understate the cached/uncached difference. We document this limitation openly.

Most people never change their DNS and use whatever their ISP assigned. We detect your current DNS provider when possible, then show which public DoH resolver tested fastest from your network. Your ISP DNS is shown as context, but it is not scored directly unless it also exposes a public DoH endpoint you add manually.

No. Resolver speed queries go directly from your browser to the resolver being tested using encrypted DNS-over-HTTPS (DoH). We never see, log, or proxy that DNS traffic. To identify your current ISP DNS, the page also contacts our DNS detection service (bigdig.energy) and makes a few browser probes to generated test subdomains before the speed test runs.

Different use cases care about different metrics. Gaming prioritizes low jitter and tail latency (p95) because spikes cause lag. Streaming prioritizes availability and median speed. General balances everyday browsing signals, and Power User applies equal weight to p50, p95, jitter, and availability.

Yes. Use the custom resolver field to add any DNS-over-HTTPS (DoH) endpoint. Enter the full URL (e.g., https://your-resolver.example/dns-query) and it will be included in the next test run.

DNS performance varies with network conditions, resolver load, cache state, and routing changes. This is normal and expected. We store your previous results locally so you can compare over time — the trend matters more than any single test.

After running the test, expand the setup instructions below the results for step-by-step guides for Windows, macOS, Linux, iOS, and Android. The easiest method for most people is changing DNS in your router settings, which applies to every device on your network.

Usually yes — Cloudflare (1.1.1.1) is faster than Google DNS (8.8.8.8) for most users because Cloudflare operates a larger edge network with more points of presence globally. However, the gap is location-dependent. In some regions, Google's infrastructure routes queries faster. Run the test above to see which is actually faster from your location — the answer varies by city and ISP.

For cached lookups, 10–30ms is excellent, 30–80ms is acceptable. For uncached lookups, 30–80ms is good, 80–150ms is typical. If your cached latency exceeds 100ms, the resolver's nearest point of presence is likely far from you — try a geographically closer provider. If uncached latency exceeds 200ms, the resolver has slow upstream recursion or routing issues. Jitter matters as much as the raw number: a resolver at 40ms with ±2ms jitter feels faster than one at 25ms with ±60ms jitter.

DNS does not affect file download speeds or streaming throughput — once a domain resolves to an IP address, your data transfer speed is unrelated to DNS. What DNS does affect is how quickly pages start loading. Every domain lookup must complete before a connection can open, and a modern page can trigger 50–100 lookups. Slow DNS makes pages feel unresponsive even on a fast connection because the browser stalls waiting for addresses before it can begin fetching resources.

DNS-over-HTTPS (DoH) sends your DNS queries inside standard HTTPS connections on port 443, making them indistinguishable from regular web traffic. This encrypts your queries against eavesdropping, prevents tampering by ISPs or networks, and hides your DNS lookups from anyone monitoring your connection. Traditional DNS uses plain UDP on port 53, which is visible to any network observer. DoH is supported by Windows 11, macOS, iOS, Android, Firefox, Chrome, and all resolvers tested here.

Yes. Changing DNS is one of the safest network settings you can modify — it is instantly reversible and does not affect your connection speed, VPN, or firewall. Choose a resolver that publishes a clear privacy policy: Cloudflare, Google, Quad9, and Control D all publish annual audits and explicit data-retention policies. Avoid random or unknown DoH endpoints, which could log or manipulate your queries. If you are on a work device, check whether your employer requires the company DNS resolver for internal services before switching.

Why Use Control D After Running a DNS Speed Test

If speed is all you care about, use whatever ranked #1 in your test. If you want speed plus DNS filtering, malware blocking, analytics, traffic redirection, and per-device policies — Control D is the upgrade path. It's not always the fastest resolver in every location. But it's consistently fast, encrypted, and gives you control over your DNS that no free resolver offers.

SOC CertifiedISO 27001 CertifiedISO 27701 Certified
© 2026 CONTROLD, Inc.