Russian doesn't understand CF's regional infrastructure and thinks 1.1.1.1 is leaking his IP to root servers, kek.>https://forum.openwrt.org/t/enabling-dnssec-when-using-dot-with-dnsmasq-and-dnsproxy/250768/11
>>108976664i don't get it. who am i shilling for?
>>108976664the post you screenshoted says something completely different than what you claim>cloudflare claims to not care about what country requests come from>they obviously block websitws that are on the Russian blocklist to Russians>therefor Cloudflare bows to the Russian government>so why use cloudflare in the first placeand the answer to this dilemma is that cloudflare is a glowfag spyware and they rather bow and implement a blocklist of scam sites (thats what the official russian blocklist is, it is scams, casions and troon porn websites) than to lose the ability to spy on people.
>>108976671>he doesn't understandTypical.
>>108976681Cloudflare didn't block anything. He is contacting 1.1.1.1 from Russia, and 1.1.1.1 is routed to regional servers, therefore a russian server. 'themoviedb.org' answers 127.0.0.1 to russian addresses.It has nothing to do with leaking his IP, the regional server doing the query is in Russia.Run a web DNS leak test while using 1.1.1.1 and you will see the unique address(es) of your regional server(s).
>>108976690>hurr durrr huupyy doo doo >what>LOL U DONT NO?go away retard
>>108976697You are the one who doesn't understand how DNS works then.The DNS server should return what the authorative DNS server says for that domain.You know, the one you define when you register a domain. Not some random local dns.Cloudflare is adhering to the offiacial Russian banlist. And again: That banlist only actually includes illegal stuff by Russian law, which is scam, casions and tranny porn.You are just an idiot who got scammed into believing that cloudflare cares about giving you freedom. Cloudflare only cares about spying, its the most malicious company on the internet.If they have to bend over to be allowed to operate 1.1.1.1 in Russia, they will do so.If they wouldn't do it, Russia would just block 1.1.1.1 and its over.
>>108976714I am not the anon that replied to you, but you can't say anything bad about russians in these boards without being labelled a hohol or a nafo tranny.
>>108976730nobody insulted you yet, NAFO troon, you jumped ahead of the curve
>>108976722Lol, do you even know how name servers controlling a domain name can reply with whatever result they can? It literally takes 5 mins to set up geoblocks on your name server.>Russian contacts recursive DNS server at 1.1.1.1>1.1.1.1 has special regional routes, routing you to regional servers>Regional server contacts root DNS servers>The name server owning 'themoviedb.org' sees the query and checks the source IP address>If it comes from a russian address, reply with 127.0.0.1, otherwise reply with the correct IP address>Regional server receives the reply and a caches it for a while>Regional server replies back to the original russian queryI know this site isn't known for its high IQ and thoughtful discussions, but a 12-years old child using IRC in the 90s/early 2000s was capable of understanding that and setting up their own subdomains that would reply back with NXDOMAIN or 127.0.0.1 after connecting to the IRC server in order to protect against DoS.
>>108976730
>>108976780/pol/slav gobbledegook. just don't make eye contact.
>>108976777if cloudflare would route to local dns servers that are controlled by others, cloudflare would necessarily be slower than those
>>108976664I'm using Cloudflare DoH on my Mikrotik router, and I just added an FWD entry to resolve themoviedb.org and api.themoviedb.org through plain quad9, simple as that.
>>108976812They route to their own regional infrastructure (like their reverse proxies). Run a DNS leak test like this: https://dnsleaktest.com/results.htmlTo see the regional servers doing the query for you.
>>108976815As long as quad9 isn't querying the name server owning '*.themoviedb.org' with a russian address, that will work just fine, but this isn't the point, the russian idiot is claiming the reason for getting back a bogus 127.0.0.1 reply is because CF is leaking his IP to themoviedb name server, which isn't true, it's just that his regional CF recursive server is also located in Russia.
>>108976823>their ownYes! Their own! There are only two entitites in the chain, when using Cloudflare DNS: Cloudflare and the authorative nameserver (set by the domain owner).Yes, Cloudflare does multicast and 1.1.1.1 will route to the closest Cloudflare owned server. Not to some random local DNS of other entities, that would be dumb, slow and unnecessary.IF you got censored on that DNS, either Cloudflare did it or the authorative nameserver did. The authorative nameserver of themoviedb.org is on Amazon AWS hosted in the USA.This gives you the following options:>Russia has full access to Cloudflare servers and the Russian government sits on Cloudflare servers>Russia has full access to Amazon AWS servers in the USA and the Russian government sits on those>Cloudflare adheres to Russian laws and blocks for them>The person running those AWS servers doesRemember that you are not the one asking the authorative nameserver for the domain, the cloudflare DNS server is doing that, caching it and forwarding that to you, the AWS <-> Cloudflare request happens outside o Russia.
>>108976835The point is that Cloudflare is doing the censorship.And none of you two idiots want to accept that.The Russian dude, who wants to access Westoid goyslop, can't accept the idea that Cloudfalre bows to the Russian government, so in his mind, the most likely happening is that Cloudflare somehow leaks his IP so that Russia blocks it.You don't want to accept the idea that Cloudflare bows to the Russian government either, so in your mind, Cloudflare routes to some local Russia controlled DNS servers without leaking IPs.Thankfully you now slowly drop the idea.You are both corpo bootlickers and you are both dumb.
>>108976844>authorative nameserverYes, genius, you can run your own authoritative servers by changing the NS records of your domain to said server(s).Themoviedb runs their name servers and reply back with 127.0.0.1 results if the query came from a russian address. Is this so fucking hard to understand? Considering the place I am posting this, I am probably arguing with a literal bot.>Cloudflare does multicastThere is no multicast involved between you and 1.1.1.1 (multicast is an intranet concept to begin with). This is all routing rules, the screenshot even shows that the query arrived within 10ms, which means two things: www.themoviedb.org was already cached in this regional server (or a nearby one) and this server is close to his location.>The authorative nameserver of themoviedb.org is on Amazon AWSWhich you can buy and run yourself. How much of the web is run on these AWS server these days? Rhetorical question.https://www.cloudns.net/blog/authoritative-dns-server/>request happens outside o RussiaThe request always come from a regional russian server in this case, and whether the request goes outside of Russia depends on whether other recursive servers contacted by this regional server have it cached or not.Also: https://community.cloudflare.com/t/archive-is-not-accessible/240133/2The archive.is owner was butthurt with CF and started replying with a bogus result, if the query came from a CF server.
The giant American corporation would NEVER bow to local regulations in authoritarian nazi communist dictatorships like Russia or China! The corporation fights for my freedom!The reason why Russia doesn't block 1.1.1.1 outright, is not because the corpo is compliant, but because the corpo is so incredibly large and important, that blocking its DNS servers would crash the Russian economy!It's fucking over for Putin and Cloudflare leads the charge!Therefor, when something is censored on Cloudflare according to Russian law, it can only be the case when there is a loophole or magic involved!(please ignore that Western Corporations censor according to CCP requests in China for over 20 years now already, we don't talk about that, chud)
>>108976730you cant say anything about about anyone without a contrarian faggot shitting and cumming his pants what is your point? just talk back and call them nigger faggots like everyone else
>>108976844>>108976855Here is me using Yandex DNS - https://dns.yandex.com:>maxmind.com: 77.88.8.8 - Russia (RU), Europenslookup -type=A www.themoviedb.org 77.88.8.8Server: 77.88.8.8Address: 77.88.8.8:53Non-authoritative answer:Name: www.themoviedb.orgAddress: 127.0.0.1Man... It's amazing how low IQ this site is.
>>108976913Lots of text, just to confirm everything that is written there.Except one thing.>The request always come from a regional russian server in this caseCloudflare famously claims to use their own proprietary garbage to "make routing faster", however that is supposed to work. So when a Cloudflare owned server from within Russia needs to ask an authorative DNS server from the USA for an IP, whatever garbage they are using within Clouflare is unknown to us, they could use their own proprietary bullshit and then request from a cloudflare server near that AWS datacenter that houses said nameserver of that domain. You don't know that.But if the Russian government has full access to the Cloudflare servers inside Russia, because the American corpo bowed to them, the Russian government knows what is going on inside that proprietary corpo server and can access their corpo software.So maybe we should send Putin an email and ask?Cloudflare is doing that censorship, or allows the Russian government access on their machines to do it.No amount of picking straws can change that simple fact.
>>108976947>yes, Cloudflare censors for Russia within Russia>but look, yandex does so as well>this proves that Cloudflare doesn't censor for Russia within RussiaSorry, i can't follow your incredibly superior high IQ argument.I am not as smart as you corporate bootlickers.
>>108976964Run a DNS leak test while using 1.1.1.1, bot.>>108976975Both Yandex and CF blocks the same domain, using the exactly same bogus response.Yes, retard, the point is themoviedb is the one with a rule for russian addresses.Also curious how www.themoviedb.org returns 127.0.0.1, but themoviedb.org works on both.Yandex: query comes from a russian address, so the returned reverse proxy addresses are all russianCF: query comes from my regional server, the returned reverse proxies are all regionalVery curious, little bot, how both of them behave exactly the same.Please, go ahead and try other russian DNS servers that aren't owned by big corps.Or how about this: https://blog.themoviedb.org/the-movie-database-suspends-access-from-russia-and-belarus-b6a1a96fb35bKEK, you can't own these bots enough.
Roskomnadzor won, Cloudflare lost.Imagine being dumb enough to believe that an American zogbot corporation would be able to help you.You WILL NOT watch tranny porn.You WILL NOT spread feminism.You WILL NOT spread information that "denies family values, promotes non-traditional sexual relations and forms disrespect for parents and (or) other family members".
>>108976913>Themoviedb runs their name serversThere are too many retards. They do not run their own name servers. They use Amazon Route 53.And what does Route 53 let you do?https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy-geo.htmlSo yes1.1.1.1 (in russia) -> AWS (USA) -> gets fake ipSimple.
>>108977004The amount of cope you go through, to deny the simply fact that cloudflare censors according to Russian law, is unreal.... or do you even deny that still?... i don't know... you just pick random stuff to argue about.So you are saying that 1.1.1.1 inside Russia somehow asks Yandex for the IP or both yandex and cloudflare ask some government controlled master-server?Maybe calm down and explain to us where exactly you believe the Russian government sits here?>DNS leak testcan't tell you whatever the fuck cloudflare does on their server(s), they could make a request to the Kremlin and ask for allowance and you wouldn't know that
>>108977027>They do not run their own name servers. They use Amazon Route 53.That's "running" and configuring your own name server, as opposed to have it automatically configured by your web host, even if you are not setting and customizing BIND yourself.>1.1.1.1 (in russia) -> AWS (USA) -> gets fake ipIt's ANY address coming from Russia: https://blog.themoviedb.org/the-movie-database-suspends-access-from-russia-and-belarus-b6a1a96fb35bThe point of this thread, which got spammed by low IQ retards, was a retarded russian blaming CF's 1.1.1.1 for leaking his IP address, which is nonsense, as the root cause of the problem is his regional 1.1.1.1 server being located in Russia, and therefore, being given a bogus response by themoviedb's name server.
>>108977051Seethe, retard. You are mad because you got raped in this thread and is now pretending to be just a troll, as themoviedb's blog post explicitly says they are blocking Russia and Belarus, kek.
>>108977058> https://blog.themoviedb.org/the-movie-database-suspends-access-from-russia-and-belarus-b6a1a96fb35b>Westoid goylop blocks itself from Russia.Thanks to both Cloudflare and themoviedb for their cooperation. That solves OPs problem then.Keep the LGBTQ+ crap in your declinging Western shitholes, Thank You.
>>108977086>More off-topic spamThanks for bumping the thread, Boris.
Nobody who is technologically competent would ever use the cloudflare DNS
>>108977096Plenty of reasons to not use CF products. The russian in the OP is a retard though, because his IP is not getting leaked to root servers and he is too stupid to understand his recursive DNS server is a regional russian one.
>>108977110and the solution to that problem would be to use a DNS that isn't cloudflare and that doesn't leak your location
>>108976664>The people these boards shill forwho am i shilling for?
>>108977123We are shilling for pro-Western zogbots who want to access Western goyslop by using Western DNS servers, apparently
>>108976681>thats what the official russian blocklist is,The kremlin blocks any and all foreign sites where Russians might learn jus how hard putin has fucked hem and is now going after VPNs as well. Shit like you deserves putin. Facebook and Instagram are completely banned and officially classified as "extremist" organizationsDiscord: Banned for refusing to comply with federal regulations and heavy finesIndependent & Foreign NewsDozens of independent Russian and international news outlets are blocked.This includes major outlets like the BBC News Russian, Deutsche Welle, and Radio Free Europe/Radio Liberty (RFE/RL).In mid-2024, Russia also banned the websites of 81 major European media outlets (including Ireland's RTÉ, Germany's Der Spiegel, and Spain's El Mundo) in retaliation for EU sanctions on Russian state media.
>>108977119No, CF isn't leaking his location (or IP), it's making a query with its own russian address.The solution is to use a DNS server outside of Russia, or at least one without routing to regional servers.The block, "by returning a loopback bogus response" is done by themoviedb via their name server, if the source IP address of the query is from Russia.
This isn't /pol/, faggots. The point of the OP is that russians are as dumb and scummy as americans, yet 4troon has a hard on for Russia.
>>108977058>https://blog.themoviedb.org/the-movie-database-suspends-access-from-russia-and-belarus-b6a1a96fb35bNowhere it says that they setup their nameserver in a way to reply different to Russian-origin nameserver (which isn't easy and not effective). If they would block Russian IPs on whatever server runs the authorative nameserver, it would result in a DNS error rather than a 127.0.0.1 reply.But hey, since the discussion is now on whether it is the Westoid Cloudflare or the Westoid themoviedb.org that does the censorship, none of it actually matters.It is still Westoid cuckolds adhering to Russian anti-LGBTQ+ laws.Now you can continue your Westoid vs. Westoid turf war.
>>108977137Cloudflare doesn't have to use a local IP to ask the authoritative nameserver (and by doing this, leak the location).They choose to do that.It is not required.
>>108977131i want op to answer
>>108977161They use a regional IP because that's where you are routed to. These recursive servers have caches, if you have a the record cached there, you can complete your request very fast, like the 10ms RTT from the screencap. It's the same basic concept as with Akamai, CF, etc reverse proxying.Don't you run a DNS forwarder in your router that does the exact same thing, but serve LAN-only?
>>108977137>to use a DNS server outside of RussiaAnd thankfully Cloudflare does not offer that.Cloudflare respects Russian laws and the 1.1.1.1 inside Russia will always resolve to a server inside Russia, rather than to a server outside that would be outside of the Russian legislation.Cloudflare even goes the extra way and makes sure that the recursive resolving happens from the server inside Russia, rather than asking one of their servers outside to resolve it from there.Thank you Cloudflare for keeping the Westoid slop out.
>>108977178>because that's where you are routed toAnd nothing stops Cloudflare from then doing the request to the authoritative nameserver from any other IP within their AS13335.They choose to keep it the Russian IP to let every other nameserver know from what location the request comes from.
>>108977178>muh cachingDNS TTL is now so extremely low that almost nothing gets cached.And you know who started this idiotic practice that makes the internet slower? Cloudflare did.The TTL of themoviedb.org is 60s. Before cloudflare, the average TTL was half a day or so.but hey, lets not question the holy glorious corporation!
>>108977195That's basically how every DNS server works. If it can't find the record within its cache or servers in the same regional network, it will make the request to the root server itself. Not doing so creates another layer of bottlenecking, in which a few servers have to run global queries for all regional servers (which there are a lot).
>>108977207Is this the same retard that is still trying to cope that themoviedb.org is the culprit in this block? KekAll major DNS servers (including privacy oriented ones like quad9) run caches. OpenWrt's default configuration with dnsmasq has it behave as a forwarder with a cache size of 1000 records.Most A and AAAA records have between 3 to 5 minutes TTL, including this very website.4chan.org. 3003-5 minutes time frame can be thousands of requests, especially for popular DNS servers.My own dnsmasq forwarder serving LAN only has a rate of 10 to 15% of forwarded DNS traffic, with the rest being served from the local cache.Also, as already mentioned, this isn't /pol/, faggot. No one is defending CF. Pointing out russians are retarded isn't defending much silicon valley corp.
>>108977051>1.1.1.1 inside Russiaif it is inside of Russia, its russian.. no? checkmate Kasparov.
>>108977156Many mods and anons are Russian.They hate the evil russophobic West yet flock to our websites like shitskin rapefugees.Go back to 2ch, slavshits
>>108976664your isp could easily hijack 1.1.1.1.post doh or dot.
>>108976664your explanation contradicts cloudflare's official claimshttps://www.cloudflare.com/transparency/>Cloudflare has never modified the intended destination of DNS responses at the request of law enforcement or another third party.
>>108976664idgi shouldnt it have given him the address instead of '127.0.0.1'
Why is this thread getting the attention of so many retards with no basic knowledge of DNS or Cloudflare's regional infrastructures?>OP: This russian moron thinks Cloudflare is leaking his IP address (it's not)>4troon retards: corp/cloudflare schizo posting, encrypted DNS talk, etc, which has nothing to do with the subject of the thread, russian stupidity spiced with some hubris of believing they are always right>>108978485>themoviedb.org's name server returns replies with an A record of 127.0.0.1 for queries coming from russian IP addresses (they block Russia and Belarus because of the retarded drone on drone war)>Russian retard is querying through 1.1.1.1, which routes to a regional Cloudflare recursive DNS server located in Russia, thus the 127.0.0.1 response>Russian retard thinks Cloudflare is leaking his IP address because the regional server's unique address (in Russia) is also blocked.I don't know if the thread is getting spammed by bots or russians, but if legit, I am shocked, even for 4troon standards, on how little people know about these things.
>>108978574Most of 4chan is bots & /g/eets at this point. It's time to just accept that most threads aren't worth replying to.
>>108978605You are right, I remember that one instance of plebbitors arguing with literal AI slop unleashed at them, and I don't want to be plebbitor, anon.
>>108978574so it IS a bug with cloudflare for me it works but his locally router 1.1.1.1 is bugged
>>108978667Of course it works, you are not in Russia. 1.1.1.1 routes to a regional server, it's not the same route for every single location (this has been mentioned several times in the thread).Set your browser to use 1.1.1.1 then load https://dnsleaktest.com/ (or similar dns leak tests) to find the regional servers you are being routed to.
>>108978686yes i know what a CDN is it gives every region a different dns lookup but 127.0.0.1 is clearly bugged , not just a regional serveri suspect its not even reaching cloudflare im guessing there's a misconfigured router along the way
>>108978989Another retarded 4trooner (who also is so sure he is right), probably didn't even bother skimming through the thread.>>108976947A lookup using Yandex DNS instead, which also returns 127.0.0.1, as is the case with EVERY single russian address doing a query to themoviedb.org's name servers.I'll just step away from this thread. As the other anon mentioned, it's probably most bots.
>cuckflarengmi
based chadflare
