MidwestDNS - Fast, Secure, Uncensored DNS

DNS Access

Why Use MidwestDNS?

• We believe in uncensored DNS unless it's related to malware, scams, botnets, etc.
• We strongly support free speech and do not deplatform controversial sites or pirate sites. We don't block porn, gambling, or other vices.
• If a non-malicious site is blocked, let us know. We'll fix it. We are always expanding our whitelist.
• MidwestDNS specializes in blocking ads and tracking without breaking websites. Maximum security and privacy without hurting usability.
• DNS logs are kept for 1 hour only to help with whitelisting. IPs are anonymized immediately, and all logs are purged hourly.

Security Features

• Malware, phishing, and botnet protection via curated blocklists
• Full support for TLS 1.3 with Perfect Forward Secrecy
• Modern elliptic curves: X25519 and secp384r1
• Let's Encrypt ECC certificates with secp384r1
• NGINX compiled with LibreSSL for enhanced cryptographic security
• HSTS, X-Frame-Options, and CSP security headers enforced
• DNS logs anonymized and purged hourly for privacy
• NGINX access and error logging fully disabled

Performance & Speed

• Multiple upstream DNS providers for redundancy and speed
• Large DNS cache for faster lookup times and improved performance
• 0-RTT and HTTP/3 (QUIC) enabled for instant session resumption
• QUIC retry mechanism for improved connection reliability
• Server running XanMod kernel with BBR congestion control and optimized sysctl.conf
• Hosted on high-performance Chicago network from Cherry Servers with CDN77/DataPacket upstream
• Direct peering to Tier 1 networks for ultra-low latency
• Highly tuned Nginx-ee with reuseport, tcp_nopush, and tcp_nodelay optimizations

Upstream DNS Providers

• NextDNS
• ControlD
• Cloudflare
• DNS.SB
• RabbitDNS
• RethinkDNS

Blocklist Info

Support the Project