<story><title>1.1.1.1 outage explanation</title><url>https://blog.cloudflare.com/today-we-mitigated-1-1-1-1/</url></story><parent_chain><item><author>gcommer</author><text>This is a great write up. It&amp;#x27;s also why the DNS root servers have a policy of surviving DDoS through massively over-provisioned, multi-org, anycasted redundancy rather this sort of smart DDoS mitigation that drops traffic: DNS is so critical that any risk of dropping real traffic is unacceptable. (obviously, such a scale is impractical for 99% of services)&lt;p&gt;A good takeaway from this outage for the average user would be to make sure that your fallback DNS resolvers are operated by totally separate providers. (eg, configure 1.1.1.1 with 8.8.8.8 as a fallback, rather than 1.1.1.1 and 1.0.0.1) (Edit: fixed cloudflare&amp;#x27;s secondary address)</text></item></parent_chain><comment><author>crtasm</author><text>I read on the Pi-Hole forums that &amp;#x27;fallback&amp;#x27; is a misleading term because clients don&amp;#x27;t work that way - they will happily spread requests between two functioning DNS servers.  Can anyone confirm this or provide further insight?</text></comment>
<story><title>1.1.1.1 outage explanation</title><url>https://blog.cloudflare.com/today-we-mitigated-1-1-1-1/</url></story><parent_chain><item><author>gcommer</author><text>This is a great write up. It&amp;#x27;s also why the DNS root servers have a policy of surviving DDoS through massively over-provisioned, multi-org, anycasted redundancy rather this sort of smart DDoS mitigation that drops traffic: DNS is so critical that any risk of dropping real traffic is unacceptable. (obviously, such a scale is impractical for 99% of services)&lt;p&gt;A good takeaway from this outage for the average user would be to make sure that your fallback DNS resolvers are operated by totally separate providers. (eg, configure 1.1.1.1 with 8.8.8.8 as a fallback, rather than 1.1.1.1 and 1.0.0.1) (Edit: fixed cloudflare&amp;#x27;s secondary address)</text></item></parent_chain><comment><author>berti</author><text>Or 9.9.9.9 if you&amp;#x27;re not as comfortable with Google services.</text></comment>