Learn

Switching to DNS4EU: A Quick Guide for Chrome Users

DNS4EU — Wed, 28 Jan 2026 08:05:53 GMT

For European users, the quest for a faster, more private internet just got a lot easier. If you use Google Chrome, you can now step away from traditional DNS providers and switch to DNS4EU-the first major European-based, protective DNS service-directly within your browser settings.

Why DNS4EU?

Most of us use the default DNS provided by our ISP or a major US tech giant. While functional, this often means your browsing data leaves the EU. DNS4EU changes the game by offering:

Data Sovereignty: Your queries stay on European soil, fully compliant with GDPR.
Built-in Protection: The "Protective" option automatically blocks known phishing, malware, and tracking domains before they even load.
Zero Installation: No apps or complex software are required-just a simple setting change.

How to Enable DNS4EU Public Service in 3 Steps

Ready to secure your browser as an EU citizen? Here is how to set it up in Chrome:

Open Settings: Click the three dots in the top-right corner of Chrome and select Settings.
Navigate to Security: Go to Privacy and security on the left sidebar, then click Security.
Select DNS4EU: Scroll down to the Advanced section. Under Use secure DNS, toggle the switch to "On." Go to Select DNS provider and choose DNS4EU Public Service (Protective) from the dropdown menu

(please note that you need to have Google Chrome version 144 or higher to see DNS4EU in the dropdown menu)

Join the Movement

The DNS4EU Public Service is built specifically for EU end users, but the mission is bigger than just individual privacy. We are currently inviting European public institutions, and universities to leverage our infrastructure.

If your institution wants to maintain higher security standards and digital sovereignty, we invite you to join our Grand PoC (Proof of Concept). It’s a chance to try the professional-grade offering and help shape a safer European internet.

You can reach out to George Buhai, Government Liaison at Whalebone, to discuss possibilities for your institution or check this webpage to learn more about this initiative.

Upcoming DNS4EU Stakeholder Group Meeting

DNS4EU — Mon, 26 Jan 2026 11:22:37 GMT

As we continue to advance the DNS4EU project, we are convening our next Stakeholder Group Meeting on January 29th. This session is designed to provide our partners and stakeholders with direct technical updates and strategic insights into the project's current trajectory.

Our experts will be providing deep-dive briefings on operational reliability, threat intelligence, and the commercial roadmap for European digital sovereignty.

Agenda Overview

DNS4EU Public Service Insights
Roman Silhan, Site Reliability Engineer
Lawful Filtering: Compliance & Security
Martin Kuruc, Threat Intelligence Lead
Gov Onboarding Experience
George Buhai, Government Liaison
Vision & Discussion
Robert Sefr, CTO

Event Details

Date: January 29, 2026

Time: 16:30-17:30 CET

Location: Online

Note: This is a closed session for the DNS4EU Stakeholder Group.

We look forward to your participation and a productive discussion.

Shielding Europe: Leveraging Threat Intelligence to Power DNS4EU

DNS4EU — Thu, 06 Nov 2025 12:48:15 GMT

While DNS4EU is the major EU-wide initiative focused on privacy, security, and digital sovereignty, its true protective power comes from something deeper: Threat Intelligence. In the current, high-stakes cyber environment, this real-time data is the critical layer that transforms a standard DNS resolver into a powerful cyber shield.

Mr. Viliam Peli, Threat Intelligence Lead at Whalebone, joins us to guide readers through the mechanics of how DNS4EU collects, shares, and acts upon intelligence to safeguard the European digital space from the newest and most sophisticated attacks.

How is threat intelligence shared within DNS4EU, especially using resources like a Malware Information Sharing Platform (MISP)?

Threat intelligence in DNS4EU is shared mainly through MISP, an open-source platform that enables secure and real-time exchange of threat data – particularly with national CERTs. We also use tools like IntelMQ to aggregate additional intelligence from external feeds, then analyse and validate these inputs on our own backend systems to ensure accurate protection.

How does DNS4EU collect and integrate threat intelligence feeds, and what role do CERTs and national agencies play in this process?

DNS4EU collects and integrates threat intelligence feeds from a range of sources, with a strong emphasis on cooperation with national CERTs and agencies. Each feed is thoroughly evaluated, and its indicators are scored to ensure the best balance between true and false positives before integration. National CERTs play a key role by sharing insights on new and emerging threats in their regions, which enables DNS4EU to rapidly deploy protections and safeguard all users against current risks.

How quickly can DNS4EU react when a new phishing domain or malware command-and-control server is detected?

DNS4EU leverages close cooperation and advanced technologies to detect and block new phishing domains or malware servers rapidly – often within minutes of identification. Detection speed varies case by case, but our regional expertise and real-time intelligence sharing help us stop many millions of daily threats before they reach end users. While instant detection of every threat is not possible, our results show strong protection and fast reaction to emerging attacks.

What does the workflow look like – from detection of a new threat to propagation across all resolvers in the EU?

When a new threat is detected, we obtain the indicator of compromise (IOC) from trusted sources – our own detection infrastructure, commercial feeds, or partner agencies. The data is then enriched with additional intelligence, scored using automated evaluation systems, and compared against multiple accuracy checks. Once the IOC reaches a blocking threshold, it is instantly propagated to all DNS4EU resolvers across the EU, where it is continuously re-evaluated and later removed once it is no longer active or malicious.

How do you manage false positives or prevent legitimate domains from being wrongly blocked?

DNS4EU uses automated scoring systems and dedicated whitelists to reduce false positives and avoid blocking legitimate domains. Every domain – even well-known ones – must pass through evaluation, ensuring that benign sites consistently receive negative scores and never reach blocking thresholds. This layered approach, combined with user appeal channels, helps maintain robust security while protecting access to legitimate resources.

From a threat intelligence standpoint, what are the advantages of Protective DNS (PDNS) as implemented by DNS4EU?

Protective DNS in DNS4EU offers several threat intelligence advantages: it enables real-time sharing and blocking of malicious domains across EU member states, leverages regional and global intelligence for rapid response, and reduces dependence on non-EU services for enhanced privacy and sovereignty. This approach helps ensure threats discovered in one country are quickly blocked Union-wide, providing high levels of protection against phishing, malware, and DNS abuse, without the need to install any app or program on your device.

To what extent does DNS4EU harness AI or automated systems to identify new threats and update blocklists in real time?

Machine learning helps analyse traffic patterns, regional intelligence, and open-source-intelligence (OSINT) data to identify emerging local threats like phishing campaigns. This allows for quick, continuous updates across all DNS4EU resolvers, providing timely and effective protection against new cyber threats while leveraging regional expertise.

Viliam Peli is the Threat Intelligence Lead at Whalebone, where he advances the global detection of malicious domains and campaigns through automation, large-scale analytics, and innovative threat intelligence strategies. He leads threat intelligence efforts for the DNS4EU project, building partnerships with governmental agencies, international cybersecurity stakeholders, and the research community to strengthen DNS-based protections across Europe.

Rusza publiczna usługa DNS4EU: utrzymywana przez Whalebone europejska alternatywa dla DNS Google i Cloudflare

DNS4EU — Wed, 05 Nov 2025 10:05:58 GMT

Konsorcjum DNS4EU, kierowane przez Whalebone, oficjalnie uruchomiło publiczną usługę DNS4EU – bezpłatny, bezpieczny i skupiony na prywatności resolver DNS, zaprojektowany z myślą o ochronie obywateli w całej Unii Europejskiej. Inicjatywa ta stanowi istotny kamień milowy w szerszych działaniach UE na rzecz wzmocnienia suwerenności cyfrowej oraz cyberbezpieczeństwa wszystkich Europejczyków.

Czym jest usługa publiczna DNS4EU?

Usługa publiczna DNS4EU to ogólnodostępny resolver DNS, który oferuje obywatelom UE bezpieczniejsze i bardziej prywatne korzystanie z internetu. Blokuje dostęp do złośliwych domen, ściśle przestrzega przepisów RODO i zapewnia, że obsługa zapytań DNS odbywa się w przestrzeni cyfrowej UE. Usługa stanowi część szerszego projektu DNS4EU, którego celem jest ochrona 100 milionów użytkowników poprzez połączenie usług publicznych i komercyjnych.

Dostępne opcje publicznej usługi DNS4EU

Użytkownicy mogą wybierać spośród pięciu konfiguracji resolvera DNS dostosowanych do różnych potrzeb:

Ochrona przed złośliwymi domenami
Ochrona przed złośliwymi domenami + Ochrona dzieci
Ochrona przed złośliwymi domenami + Blokowanie reklam
Ochrona przed złośliwymi domenami + Ochrona dzieci + Blokowanie reklam
DNS bez filtrowania

Tipo	Adres IP	DNS przez HTTPS	IPv6	Opis
Ochrona przed złośliwymi domenami	86.54.11.1	protective.joindns4.eu/dns-query	2a13:1001::86:54:11:1	Ochroń się przed stronami internetowymi zawierającymi oszustwa lub inne złośliwe treści
Ochrona przed złośliwymi domenami + Ochrona dzieci	86.54.11.12	child.joindns4.eu/dns-query	2a13:1001::86:54:11:12	Ochroń się przed stronami internetowymi nieodpowiednimi dla dzieci, np. zawierających treści seksualne, przemoc lub narkotyki, jednocześnie korzystając z głównych funkcji ochronnych.
Ochrona przed złośliwymi domenami + Blokowanie reklam	86.54.11.13	noads.joindns4.eu/dns-query	2a13:1001::86:54:11:13	Ukrywaj reklamy na stronach internetowych i w aplikacjach, jednocześnie korzystając z głównej funkcji ochronnej.
Ochrona przed złośliwymi domenami + Ochrona dzieci + Blokowanie reklam	86.54.11.11	child-noads.joindns4.eu/dns-query	2a13:1001::86:54:11:11	Ochroń się przed stronami internetowymi nieodpowiednimi dla dzieci, zawierającymi m.in. treści seksualne, przemoc czy narkotyki. Dodatkowo filtruj reklamy jako uzupełnienie głównej funkcji ochronnej.
DNS bez filtrowania	86.54.11.100	unfiltered.joindns4.eu/dns-query	2a13:1001::86:54:11:100	Opcja dla użytkowników, którzy są pewni bezpieczeństwa swoich urządzeń i połączenia oraz szukają szybkiej, niezawodnej i anonimowej usługi rozwiązywania nazw.

Każda opcja obsługuje protokoły DNS over HTTPS (DoH) i DNS over TLS (DoT), zapewniając szyfrowane i bezpieczne zapytania DNS.

Ekosystem DNS4EU

Usługa publiczna DNS4EU jest częścią większego ekosystemu. Stanowi jeden z czterech filarów projektu DNS4EU.

Pozostałe filary to:

DNS4GOV DNS4EU dla instytucji rządowych): Zapewnia scentralizowaną ochronę DNS dla instytucji rządowych, w tym szpitali, szkół i urzędów.
Aura Infrastructure (DNS4EU dla firm telekomunikacyjnych): Integruje bezpieczne usługi DNS bezpośrednio z sieciami operatorów telekomunikacyjnych.
Threat Intelligence Exchange : platforma do udostępniania i koordynowania cyberzagrożeń między partnerami.

Razem usługi te mają na celu zapewnienie kompleksowego bezpieczeństwa DNS w różnych sektorach, przyczyniając się do realizacji celu ochrony 100 milionów użytkowników.

Wzmocnienie analizy zagrożeń w Europie

Fundamentem projektu DNS4EU jest współpraca z unijnymi zespołami CERT/CSIRT w celu usprawnienia wymiany informacji o zagrożeniach. Projekt korzysta z własnej platformy wymiany informacji o złośliwym oprogramowaniu (MISP), która umożliwia propagację danych o zagrożeniach w czasie rzeczywistym do serwerów DNS w całej UE. Dzięki temu zagrożenie wykryte w jednym kraju może być natychmiast zablokowane w innych, co zwiększa skuteczność wspólnej ochrony cyberprzestrzeni UE.

Zastosowanie informacji o zagrożeniach na naszych publicznych serwerach DNS to dopiero początek tego, co może zaoferować DNS4EU. Zapraszamy dostawców usług internetowych, firmy telekomunikacyjne i rządy do współpracy z nami oraz do wykorzystania pełnego potencjału naszych możliwości w zakresie analizy zagrożeń. Wzmacniając współpracę i dzieląc się spostrzeżeniami, możemy zbudować bardziej odporne i proaktywne środowisko cyberbezpieczeństwa w całej Europie.

Utrzymywane przez Whalebone i paneuropejskie konsorcjum

Publiczna usługa DNS4EU jest obsługiwana przez firmę Whalebone — lidera konsorcjum i czeskie przedsiębiorstwo z branży cyberbezpieczeństwa, znane z ochrony milionów użytkowników na całym świecie. Jednak ta inicjatywa nie byłaby możliwa bez zaangażowania, wiedzy i współpracy całego konsorcjum DNS4EU.

Konsorcjum składa się z 13 głównych członków z 10 krajów UE i obejmuje zróżnicowaną grupę firm prywatnych, instytucji badawczych, krajowych zespołów CERT oraz organizacji sektora publicznego.

Razem te organizacje tworzą solidny i odporny fundament dla DNS4EU, gwarantując, że usługa jest nie tylko zaawansowana technologicznie, ale także dostosowana do zróżnicowanych potrzeb i przepisów państw członkowskich UE.

Jak korzystać z usługi

Konfiguracja publicznej usługi DNS4EU jest prosta. Wystarczy odwiedzić oficjalną stronę internetową DNS4EU, wybrać opcję resolvera najlepiej odpowiadającą Twoim potrzebom i postępować zgodnie z instrukcjami konfiguracji krok po kroku dla swoich urządzeń.

From Billions of DNS Queries to Action: How Stratosphere Lab Helps Protect Europe’s Internet

DNS4EU — Mon, 03 Nov 2025 12:35:00 GMT

This post summarises two recent presentations delivered by the Stratosphere Laboratory team — one at Ekoparty and another at Virus Bulletin — where we shared our work within the DNS4EU consortium. Both talks explored how artificial intelligence can protect Europe by detecting cyberattacks hidden among billions of DNS queries processed every day.

Image Source: Virus Bulletin 2025

Every day, billions of DNS queries are made across Europe. Hidden within them are the traces of cyberattacks, data exfiltration, and malware communications. Identifying these threats without compromising privacy or trust is one of the most significant challenges in modern cybersecurity.

At the Stratosphere Laboratory of the Czech Technical University in Prague, we are addressing this challenge as part of DNS4EU — the European initiative to build a secure, privacy-preserving DNS infrastructure for all EU citizens.

DNS4EU is Europe’s effort to take back control of its Internet infrastructure — ensuring that privacy, security, and digital sovereignty are not optional.

The Problem

For years, most European DNS traffic has been processed by commercial companies outside the EU. This created dependence and limited the ability to apply European data protection and security standards.

DNS4EU was created to change this by establishing a federated and transparent DNS resolver infrastructure entirely within Europe.
However, operating such a system introduces a new scale of complexity. The platform must process more than 1.5 billion DNS queries every day — equivalent to tens of thousands per second — and still provide accurate, timely detection of new threats.

The Goal

Our goal within DNS4EU is to automatically detect new and unknown malicious domains — those that do not appear in any blacklist, threat intelligence feed, or historic report.

To find them, we needed to design a system capable of identifying abnormal behavioral patterns in DNS traffic and continuously updating its understanding as new evidence appears.

“The challenge is not only to find malicious activity, but to find what has never been seen before — and to do it at a continental scale.”

The Solution

Stratosphere developed a large-scale AI pipeline that transforms raw DNS data into actionable threat intelligence.

Apache Kafka handles the ingestion of high-volume DNS streams from multiple regions, while ClickHouse provides high-performance storage and aggregation over billions of records. Our preprocessing stage removes invalid data, excludes the most popular domains, and extracts meaningful statistical and temporal features from the remaining traffic.

We then apply a combination of unsupervised models — Isolation Forest, DBSCAN, and Gaussian Mixture Models — to identify anomalous or low-density patterns that may represent emerging malicious domains.

Finally, we use Bayesian inference to integrate all the evidence and reduce false positives. Each signal — such as anomaly model outputs or threat intelligence hits — modifies the probability that a domain is malicious.

This approach allows the system to express both a decision and a level of confidence, introducing transparency and adaptability into automated detection.

“Bayesian reasoning allows us to move beyond binary detection. It lets the system express uncertainty — which is exactly what real-world defense requires.”

The Results

The system processes over one terabyte of DNS data each week and generates a daily feed of suspicious domains for further analysis and validation.

Many of these findings have been confirmed as real threats, including fake software update campaigns, DNS tunneling for data exfiltration, and command-and-control infrastructure for Predator spyware and Lumma Stealer.

The combination of scalable infrastructure, unsupervised learning, and Bayesian updates enables the detection of entirely new classes of threats that traditional rule-based systems would miss.

Lessons Learned

Our experience shows that large-scale, privacy-first infrastructure and artificial intelligence can coexist successfully. Reducing false positives is as critical as detecting true threats.

And explainable AI — supported by probabilistic reasoning — can provide both efficiency and trust.
“Defending Europe’s Internet requires more than technology; it requires transparency, cooperation, and scientific rigor.”

At Stratosphere Lab, we are proud to contribute to DNS4EU’s mission of building a strong, resilient, and sovereign digital ecosystem for Europe.
Our work continues toward one goal: turning data into defense — responsibly, transparently, and at scale.

Learn more about Stratosphere Laboratory: https://www.stratosphereips.org
Learn more about DNS4EU: https://www.joindns4.eu

This article was written by Stratosphere Laboratory team

How Will DNS4EU and DNS4GOV Reshape European Cybersecurity? An Interview with George Buhai

DNS4EU — Thu, 16 Oct 2025 08:41:49 GMT

Europe’s public institutions are prime targets for phishing, ransomware, and other cyber threats. DNS4GOV, the governmental solution of DNS4EU, provides a centralised, EU-based protective DNS service to safeguard ministries and other critical infrastructure such as hospitals, schools, and municipalities. In this interview with Mr. George Buhai, Government Liaison at Whalebone, we explore how DNS4GOV enables fast deployment, shared threat intelligence, and digital sovereignty to strengthen Europe’s public services.

Why is DNS considered a strategic control point for protecting government institutions?

Nearly every online interaction begins with a DNS query – and research shows that more than 90% of cyberattacks exploit this same channel, at very least from a command and control perspective. By monitoring DNS traffic, authorities can detect suspicious activity at an early stage, while keeping query data within EU jurisdiction ensures that sensitive metadata remains under European oversight.

How does DNS4GOV block phishing, malware, and ransomware at the DNS level?

DNS4GOV continuously updates its resolvers with curated threat intelligence feeds When a user attempts to access a malicious domain, the resolver checks the query against its blocklists. If a match is found, the query is intercepted before it can resolve to the attacker’s server.

What is the added value of DNS as a central defence and telemetry point?

While DNS-based security is lightweight and non-intrusive, making it easy to deploy across diverse institutions – from large ministries to small schools – without disrupting operations, it also covers a security gap that is commonly exploited by over 90% of malware (e.g. via command and control).

Why was DNS4GOV created and what problems does it solve for public institutions?

DNS4GOV was established to support the need for strategic autonomy at the national level. It is “individual” because each EU Member State has its own cultural context, governmental structure, and legal framework. It is “strategic” because public authorities require DNS security that is fully consistent with EU jurisdiction and regulatory standards.

How does DNS4GOV fit into the broader DNS4EU initiative and EU cybersecurity strategy?

DNS4EU is an initiative by the European Commission that aims to offer an alternative to the public DNS resolvers currently dominating the market. DNS4GOV is the public-sector component of that initiative. While DNS4EU covers the general market, DNS4GOV is tailored specifically to the needs of public administrations, critical infrastructure and all Governmental verticals including but not limited to Health, Education, Internal Affairs, etc.

As a dynamic component of national protective DNS planning, it contributes directly to the goals of the EU Cybersecurity Strategy for the Digital Decade and NIS2 Directive, by ensuring essential public services are protected against DNS-based threats.

What was the main driver behind creating DNS4GOV, and how does it differ from existing protective DNS services?

The driving force behind this entire process stems from the needs articulated by governments – voiced through national CERTs, CSIRTs, NCSCs, Cybersecurity Centres, and digitalisation agencies – to ensure a safe online environment for citizens and to foster a trust-based digital ecosystem for public institutions.

How does DNS4GOV fit into Europe’s broader push for digital sovereignty and cyber resilience?

For European entities, DNS4GOV ensures that the critical function of DNS resolution for public institutions is managed within the EU, under EU law and governance, under national and local law and governance because – and this is something that our partners find to be a crucial characteristic of this product – they can draw up their own DNS4GOV depending on their specific architecture.

What kinds of public services or sectors (healthcare, education, local administration, justice, etc.) are expected to benefit the most from DNS4GOV?

It is difficult to provide a definitive answer, as each EU Member State is structured differently and pursues distinct cybersecurity objectives. From a strategic perspective, however, institutions connected to critical infrastructure would likely benefit the most. The healthcare sector, in particular, stands out given its interconnection with numerous societal and infrastructural elements. Education would follow closely, as it generates significant traffic and involves highly sensitive data – especially concerning minors. Municipalities, with the various public services they provide, also have a huge responsibility in keeping their provisions running and secure.

How does DNS4GOV balance its role as a technical cybersecurity service with its broader public service mission?

The team behind DNS4EU and DNS4GOV is actively engaged in advisory work, as well as in the design and implementation of national protective DNS projects. The experience gained through these activities has shaped the understanding that, while functional needs may vary across countries and institutions, the overarching priority remains the security of the digital environment in which citizens and public bodies coexist. It is this shared foundation of safety and trust that ultimately enables resilience, fosters digital sovereignty, and supports the delivery of reliable public services across the EU.

What are the long-term ambitions – could DNS4GOV become a standard baseline for all EU member states’ digital infrastructures?

It was designed to be that, so definitely yes. Our ambition is to build momentum and bring DNS4GOV protection into every city hall, school, hospital, and police station. As with the most advanced use cases of Protective DNS (PDNS), the journey begins by inspiring people, raising awareness, attracting stakeholders, and establishing both credibility and a strong identity.

How can governments deploy DNS4GOV quickly (cloud/on-prem options, minimal infrastructure)?

We adhere to established best-practice guidelines, maintaining close cooperation with National Cybersecurity Centres (NCSCs) and regularly exchanging information on sector-specific activities and institutions interested in testing DNS4GOV. Deployment options are tailored to the needs of each NCSC – whether for hosting or monitoring – and can take the form of cloud-based, on-premises, or hybrid solutions. We have already carried out proofs of concept (POCs) at individual, group, and institutional-cohort levels, demonstrating our ability to adapt and accommodate a wide range of requirements.

How easy is onboarding for diverse institutions (e.g. ministries, hospitals, schools, municipalities)?

Put simply, onboarding is just as straightforward for a large ministry with thousands of employees and a complex IT architecture as it is for a small school in a remote region without a data center or dedicated cybersecurity staff. Whether the focus is on vertical sectors, individual tenants, or remote institutions, DNS4GOV is designed around the needs of its users. They can direct their traffic either to the national resolver – hosted by the National Cybersecurity Center – or to a cloud-based resolver, with DNS4GOV providing the flexibility to support all deployment options.

How does DNS4GOV integrate real-time intelligence from CERTs, NCSCs, and trusted EU partners?

By aligning national and European cybersecurity expertise, DNS4GOV maintains a dynamic, adaptive security layer that evolves in real time with the threat landscape. The result is a DNS service that not only resolves queries securely, but also embodies Europe’s collective capacity to protect its citizens and institutions from emerging digital threats.

George Buhai is a government expert and the lead for the DNS4EU initiative in the public sector context. With a focus on strengthening national cybersecurity through DNS-based protections, George works closely with European governments, regulatory bodies, and national CERTs to drive the adoption and integration of Protective DNS (PDNS) across the EU.

DNSC Presents DNS4EU at BCC 2025: Key Insights

DNS4EU — Tue, 14 Oct 2025 07:16:21 GMT

The DNSC project team presented the “DNS4EU and European DNS Shield” project in Bucharest Cybersecurity Conference 2025, on 7th of October 2025, in the Dissemination Event on EU funded projects. BCC2025 was organised as a three-day event by the Romanian National Cyber Security Directorate (DNSC), with the support of the Romanian National Coordination Centre (NCC-RO) and the National Association for Information Systems Security (ANSSI), in close collaboration with the EU Agency for Cybersecurity (ENISA) and the European Cybersecurity Competence Centre (ECCC), and is set to be one of the year’s most significant cybersecurity conferences in Europe.

The theme of BCC2025, “Working together on cybersecurity in a time of global uncertainty”, reflects the urgent need for international cooperation to rapidly address evolving cyber threats, protect critical infrastructure, and align national and regional policies in an increasingly interconnected digital landscape.

The presentation highlighted DNS4EU as a secure, resilient, and GDPR-compliant European alternative to existing public DNS services, contributing to the EU’s digital sovereignty and strengthening cybersecurity and privacy for citizens and public institutions alike. It was also remarked the official launch of the DNS4EU Public Service - a free, privacy-focused and secure DNS resolver designed to protect users against malware and phishing attacks, offering several configuration options tailored to different needs (protective resolution, child protection, ad blocking, unfiltered mode, etc.).

The project enjoyed an audience of over 150 participants, underlining the core message and significance of the project for Europe’s digital sovereignty.

Event Details

📅 Date: October 6-9, 2025

📍 Location: Bucharest, Romania

More about the event: https://bcc.dnsc.ro/

Elindult a DNS4EU nyilvános szolgáltatása: a Google és a Cloudflare DNS európai alternatívája, a Whalebone támogatásával

DNS4EU — Mon, 13 Oct 2025 09:06:08 GMT

A Whalebone vezette DNS4EU konzorcium hivatalosan elindította a DNS4EU nyilvános szolgáltatását – egy ingyenes, adatvédelemre fókuszáló és biztonságos DNS-feloldót, amelynek célja az Európai Unió polgárainak védelme. Ez a kezdeményezés fontos mérföldkő az EU azon törekvéseiben, hogy erősítse az európai polgárok digitális szuverenitását és kiberbiztonságát.

Mi az a DNS4EU nyilvános szolgáltatás?

A DNS4EU nyilvános szolgáltatása egy mindenki számára elérhető DNS-feloldó, amely biztonságosabb és adatvédelmi szempontból megbízhatóbb internetes élményt nyújt az uniós polgároknak.
A rendszer blokkolja a rosszindulatú domainneveket, szigorúan betartja a GDPR előírásait, és gondoskodik arról, hogy minden DNS-feloldás az EU digitális terén belül történjen. A szolgáltatás a tágabb értelemben vett DNS4EU projekt része, amelynek célja mintegy 100 millió ember védelme nyilvános és kereskedelmi szolgáltatások kombinációjával.

Elérhető DNS4EU nyilvános szolgáltatási opciók

A felhasználók öt különböző, igényeikhez szabható DNS-feloldó beállítás közül választhatnak:

Védett feloldás
Védett + Gyermekvédelem
Védett + Hirdetésblokkolás
Védett + Gyermekvédelem + Hirdetésblokkolás
Szűrés nélküli feloldás

Típus	IP cim	DNS HTTPS-en keresztül	IPv6	Leírás
Védett feloldás	86.54.11.1	protective.joindns4.eu/dns-query	2a13:1001::86:54:11:1	Megakadályozza a csaló vagy rosszindulatú tartalmú webhelyek elérését.
Védett + Gyermekvédelem	86.54.11.12	child.joindns4.eu/dns-query	2a13:1001::86:54:11:12	Megakadályozza a gyermekek számára nem megfelelő webhelyek — például szexuális tartalmú, erőszakos vagy droggal kapcsolatos oldalak — elérését, a védett funkcionalitás kiegészítéseként.
Védett + Hirdetésblokkolás	86.54.11.13	noads.joindns4.eu/dns-query	2a13:1001::86:54:11:13	Elrejti a webhelyeken és alkalmazásokban megjelenő hirdetéseket, a védett funkcionalitás kiegészítéseként.
Védett + Gyermekvédelem + Hirdetésblokkolás	86.54.11.11	child-noads.joindns4.eu/dns-query	2a13:1001::86:54:11:11	Megakadályozza a gyermekek számára nem megfelelő webhelyek – például szexuális tartalmú, erőszakos vagy droggal kapcsolatos oldalak – elérését, valamint kiszűri a hirdetéseket, a védett funkcionalitás kiegészítéseként.
Szűrés nélküli feloldás	86.54.11.100	unfiltered.joindns4.eu/dns-query	2a13:1001::86:54:11:100	Azoknak a felhasználóknak ajánlott, akik megbíznak eszközeik és kapcsolataik biztonságában, és gyors, megbízható, valamint anonimizált DNS-feloldási szolgáltatást keresnek.

Minden beállítás támogatja a DNS-t HTTPS-en (DoH) és TLS-en (DoT) keresztül, biztosítva a titkosított és biztonságos DNS-lekérdezéseket.

DNS4EU ökoszisztéma

A DNS4EU nyilvános szolgáltatása egy nagyobb ökoszisztéma része. A DNS4EU projekt négy pillérének egyike.

A további pillérek a következők:

DNS4GOV (DNS4EU kormányzati szervek számára): Központosított DNS-védelmet nyújt kormányzati intézményeknek, beleértve kórházakat, iskolákat és állami hivatalokat.
Aura Infrastructure (DNS4EU telekommunikációs szolgáltatók számára): Biztonságos DNS-szolgáltatásokat integrál közvetlenül a távközlési szolgáltatók hálózataiba.
Threat Intelligence Exchange : Platform a kiberfenyegetések megosztására és koordinálására a partnerek között.

Ezek a szolgáltatások együttesen átfogó DNS-biztonságot nyújtanak különböző szektorokban, hozzájárulva a 100 millió felhasználó védelméhez.

Fenyegetettségi hírszerzés erősítése Európában

A DNS4EU egyik alapköve az EU CERT-ekkel és CSIRT-ekkel való együttműködés, amely a fenyegetettségi információk megosztását hivatott erősíteni. A projekt saját Malware Information Sharing Platformot (MISP, egy nyílt forráskódú szoftvermegoldás kiberbiztonsági mutatók és fenyegetések gyűjtésére, tárolására, terjesztésére és megosztására) működtet, amely lehetővé teszi a fenyegetettségi adatok valós idejű továbbítását az EU-szerte működő DNS-feloldóknak. Ez biztosítja, hogy az egyik országban azonosított fenyegetést a többi országban is gyorsan blokkolni lehessen, erősítve ezzel az EU kollektív kiberbiztonsági állóképességét.

A fenyegetettségi információk alkalmazása nyilvános DNS-feloldóinkon csak a kezdete annak, amit a DNS4EU kínálhat. Arra ösztönözzük az internetszolgáltatókat, távközlési cégeket és kormányzati szervezeteket, hogy csatlakozzanak hozzánk, és fedezzék fel fenyegetettségi hírszerzési képességeink teljes potenciálját. Az együttműködés és az információmegosztás erősítésével egy ellenállóbb és proaktívabb kiberbiztonsági környezetet építhetünk Európa-szerte.

A Whalebone és egy páneurópai konzorcium támogatásával

A DNS4EU nyilvános szolgáltatását a konzorcium vezetője, a Whalebone üzemelteti, egy cseh kiberbiztonsági vállalat, amely világszerte több millió felhasználót véd. Ez a kezdeményezés azonban nem valósulhatott volna meg a teljes DNS4EU konzorcium elkötelezettsége, szakértelme és együttműködése nélkül.

Ezek a szervezetek együttesen szilárd és ellenálló alapot képeznek a DNS4EU számára, biztosítva, hogy a szolgáltatás nemcsak technológiailag fejlett legyen, de az uniós tagállamok különböző igényeinek és szabályozásának is megfeleljen.

Hogyan veheti igénybe a szolgáltatást

A DNS4EU nyilvános szolgáltatásának beállítása egyszerű. Látogasson el a DNS4EU nyilvános szolgáltatásának hivatalos weboldalára, válassza ki az Ön igényeinek leginkább megfelelő feloldó opciót, és kövesse az eszközeire vonatkozó lépésről lépésre szóló beállítási útmutatókat.

Whalebone in Action at DNS-OARC

DNS4EU — Thu, 09 Oct 2025 11:35:50 GMT

Whalebone representatives attended the OARC 45 Conference, held on October 7–8, 2025, in Stockholm, Sweden, which brought together DNS professionals, researchers, and operators to discuss critical topics in DNS operations and security. The event featured a series of presentations addressing various aspects of DNS infrastructure, challenges, and advancements.

Main topics addressed DNS attacks and defence, DNSSEC automation and management, DNS transport improvements, and monitoring and analytics, emphasising security, resilience, and observability in DNS operations.

Roman Šilhan, Site Reliability Engineer at Whalebone, had a chance to present a short Lightning talk "Launch of Public DNS4EU service" which informed the audience about the actions needed for the launch of Public service in June as well as the latest statistics and users' experience.

Event Details

📅 Date: October 7-8, 2025

📍 Location: Stockholm, Sweden

More about the event: https://indico.dns-oarc.net/event/55/

Details about the talk: https://indico.dns-oarc.net/event/55/contributions/1202/

Servicio Público DNS4EU entra en funcionamiento: Una alternativa europea a Google y Cloudflare DNS, impulsada por Whalebone

DNS4EU — Thu, 09 Oct 2025 07:14:59 GMT

El consorcio DNS4EU, liderado por Whalebone, ha lanzado oficialmente el Servicio Público DNS4EU – un servidor público y gratuito de resolución de DNS, centrado en la privacidad y la seguridad, diseñado para proteger a los ciudadanos de toda la Unión Europea. Esta iniciativa marca un hito clave en los esfuerzos de la UE por fortalecer la soberanía digital y la ciberseguridad de todos los europeos.

¿Qué es el Servicio Público DNS4EU?

El Servicio Público DNS4EU es un servidor público de resolución de DNS que ofrece a los ciudadanos de la UE una experiencia en internet más segura y privada. Bloquea el acceso a dominios maliciosos, cumple estrictamente con el Reglamento General de Protección de Datos (GDPR), y garantiza que todas las resoluciones DNS ocurran dentro del espacio digital europeo.
El servicio forma parte del proyecto más amplio DNS4EU, cuyo objetivo es proteger a 100 millones de personas mediante una combinación de servicios públicos y comerciales.

Opciones disponibles del Servicio Público DNS4EU

Los usuarios pueden elegir entre cinco configuraciones de resolución de DNS, adaptadas a diferentes necesidades:

Resolución con Protección
Protección + Protección Infantil
Protección + Bloqueo de Publicidad
Protección + Protección Infantil + Bloqueo de Publicidad
Resolución sin Filtros

Tipo	Dirección IP	DNS sobre HTTPS	IPv6	Descripción
Resolución con Protección	86.54.11.1	protective.joindns4.eu/dns-query	2a13:1001::86:54:11:1	Evita el acceso a sitios web con contenido fraudulento o malicioso.
Protección + Protección Infantil	86.54.11.12	child.joindns4.eu/dns-query	2a13:1001::86:54:11:12	Evita el acceso a sitios inapropiados para menores (contenido sexual, violencia o drogas), además de la protección básica.
Protección + Bloqueo de Publicidad	86.54.11.13	noads.joindns4.eu/dns-query	2a13:1001::86:54:11:13	Oculta anuncios y publicidad en sitios web y aplicaciones, además de la protección básica.
Protección + Protección Infantil + Bloqueo de Publicidad	86.54.11.11	child-noads.joindns4.eu/dns-query	2a13:1001::86:54:11:11	Bloquea sitios inapropiados para menores y filtra publicidad, sumado a la protección básica.
Resolución sin Filtros	86.54.11.100	unfiltered.joindns4.eu/dns-query	2a13:1001::86:54:11:100	Para usuarios que confían en la seguridad de sus dispositivos y buscan un servicio rápido, confiable y anonimizado.

Todas las opciones soportan DNS sobre HTTPS (DoH) y DNS sobre TLS (DoT), garantizando consultas DNS cifradas y seguras.

Ecosistema DNS4EU

El Servicio Público DNS4EU es solo una parte de un ecosistema más amplio. Representa uno de los cuatro pilares del proyecto DNS4EU.

Los pilares restantes son:

DNS4GOV (DNS4EU para Gobiernos): ofrece protección DNS centralizada a instituciones gubernamentales, incluidos hospitales, escuelas y oficinas públicas.
Aura Infrastructure (DNS4EU para Telecomunicaciones): integra servicios DNS seguros directamente en las redes de los operadores de telecomunicaciones.
Threat Intelligence Exchange : plataforma para compartir y coordinar información sobre ciberamenazas entre los socios.

En conjunto, estos servicios buscan ofrecer una protección DNS integral en distintos sectores, contribuyendo al objetivo de proteger a 100 millones de usuarios.

Fortaleciendo la inteligencia de amenazas en toda Europa

Uno de los pilares de DNS4EU es su colaboración con los CERT y CSIRT europeos para mejorar el intercambio de inteligencia de amenazas (Threat Intelligence).

El proyecto opera su propia Plataforma de Intercambio de Información sobre Malware (MISP), que permite la propagación en tiempo real de datos sobre amenazas a los servidores públicos de resolución de DNS de toda la UE. Esto garantiza que una amenaza identificada en un país pueda bloquearse rápidamente en otros, fortaleciendo la postura colectiva de ciberseguridad de la Unión Europea.

La inteligencia de amenazas aplicada a nuestros servidores de resolución de DNS públicos es solo el comienzo de lo que DNS4EU puede ofrecer. Invitamos a proveedores de servicios de internet (ISP), operadores de telecomunicaciones y gobiernos a colaborar con nosotros y explorar todo el potencial de nuestras capacidades de inteligencia.

Al fortalecer la cooperación y compartir conocimientos, podemos construir un entorno de ciberseguridad más resiliente y proactivo en toda Europa.

Impulsado por Whalebone y un consorcio paneuropeo

El Servicio Público DNS4EU es operado por Whalebone, líder del consorcio y empresa checa de ciberseguridad reconocida por proteger a millones de usuarios en todo el mundo.

Sin embargo, esta iniciativa no habría sido posible sin la dedicación, experiencia y colaboración de todos los miembros del consorcio DNS4EU.

El consorcio está compuesto por 13 miembros principales de 10 países de la UE, que incluyen empresas privadas, instituciones de investigación, CERT nacionales y organizaciones del sector público.

Juntos, estos organismos conforman una base sólida y resiliente para DNS4EU, garantizando que el servicio sea tecnológicamente avanzado y esté alineado con las necesidades y regulaciones de los Estados miembros de la UE.

Cómo aprovechar el servicio

Configurar el Servicio Público DNS4EU es sencillo. Visita la página oficial del servicio y elige la opción de resolutor que mejor se adapte a tus necesidades. Luego, sigue las guías paso a paso de configuración para tus dispositivos.