Start here
First work out which job you have, because these eight products do three unrelated things and every comparison we could find ranks them in one list anyway.
- You own a domain and the internet needs to find it → authoritative hosting: Route 53, Cloudflare, Google Cloud DNS, NS1
- You want your network to resolve names privately or with filtering → a resolver: Unbound, Technitium
- Your services need to find each other inside a cluster → CoreDNS, and you almost certainly already have it
- You want both, self-hosted → PowerDNS
Evaluating Unbound against Route 53 is a category error. You could reasonably run both.
Compare
| Product | Job | Run by | Licence | Cost | Score | Confidence |
|---|---|---|---|---|---|---|
| AWS Route 53 | Authoritative | AWS | Proprietary | Usage-based | 60.7 | 0.25 |
| Cloudflare DNS | Authoritative | Cloudflare | Proprietary | Free tier, from $20/mo | 45.7 | 0.63 |
| Google Cloud DNS | Authoritative | Proprietary | Free tier | 46.0 | 0.15 | |
| IBM NS1 Connect | Authoritative | IBM | Proprietary | Subscription | 56.6 | 0.33 |
| PowerDNS | Both | You | Open source | From $8,330/yr support | 43.8 | 0.08 |
| Unbound | Resolver | You | BSD-3-Clause | Free | 46.5 | 0.15 |
| Technitium DNS Server | Resolver | You | GPL-3.0 | Free | 49.9 | 0.07 |
| CoreDNS | Cluster discovery | You | Apache-2.0 | Free | 53.6 | 0.26 |
Authoritative hosting
AWS Route 53
Usage-based, 30-day trial. 10 integrations. Score 60.7, confidence 0.25.
Highest-scoring here, largely on integration breadth, and the obvious default if your infrastructure is already in AWS.
Pick it ifyou are in AWS and want DNS managed as code alongside everything else. Don't if you want a free tier; Route 53 charges per hosted zone.
Cloudflare DNS
Free tier, paid from $20/month. Score 45.7, confidence 0.63, the best-evidenced entry here.
The strongest free tier in practice, and the fastest propagation of the group in general reputation, though we cannot measure that.
Pick it ifyou want a capable free tier and a good API. Don't if you need features that sit behind the enterprise plan.
Google Cloud DNS and IBM NS1 Connect
Google: free tier, 4 integrations, confidence 0.15. NS1: subscription, free tier, confidence 0.33.
VerdictGoogle Cloud DNS is the GCP default. NS1 is aimed at traffic-steering and multi-CDN setups, which is a narrower requirement than most readers have.
Resolvers
Unbound
BSD-3-Clause, free. 4,878 stars. Shipped 2026-08-04. No known advisories.
Validating, recursive, caching, and it has done one job for a long time. The smaller surface area is the argument for production use.
Pick it ifyou are putting a resolver into infrastructure. Don't if you want a web console.
Unbound alternatives
unbound alternatives is our most-clicked query here.
| Leaving because | Go to |
|---|---|
| You want a UI and ad-blocking | Technitium |
| You want authoritative too | PowerDNS |
| You want it managed | any authoritative provider above |
| You are actually resolving inside Kubernetes | CoreDNS |
Technitium DNS Server
GPL-3.0, free. 9,884 stars. Shipped 2026-07-11. No known advisories. Confidence 0.07.
Bundles ad-blocking, DHCP and a web console.
Pick it ifyou are setting up DNS for a home network or small office and want to see what is happening. coredns vs technitium is one of our clicked queries, and the honest answer is that they solve different problems. Don't if you want the smallest possible attack surface.
Cluster DNS
CoreDNS
Apache-2.0, free. 14,304 stars. Shipped 2026-08-19. 16 advisories, 8 in the last 12 months (HIGH).
Highest disclosure rate in this category by a distance. It is also the DNS server inside essentially every Kubernetes cluster, written in Go with a large plugin surface, and much of that history comes from dependencies rather than CoreDNS itself.
Pick it ifyou run Kubernetes. You already did; you did not choose it. Don't treat this as a shopping decision. The action is keeping your cluster patched.
Also in this category
PowerDNS
Open source, with commercial support from $8,330/year. Confidence 0.08.
The only product here doing both authoritative and recursive, as two separate daemons. That price is a support subscription for software that is free to run, so comparing it to Cloudflare's $20/month is comparing an enterprise contract to a retail plan.
How we scored this
Signals are properties of the software: licence, release cadence, published advisories, integrations, pricing transparency. No reviews, no company size, no web traffic, no vendor ad spend. Facts retrieved 2026-09-11. Full method · Independence
This is the most thinly-evidenced category in this tranche and we would not present these scores as a ranking. Confidence runs 0.07 to 0.63 with five of eight below 0.30.
The reason is that the useful facts about DNS are operational rather than published: propagation speed, anycast reach, API quality, DNSSEC depth, and query cost at volume. Those four decide an authoritative DNS choice and we hold none of them. We would rather say so than rank on the things we happen to have.