DNSSEC definitely is a good advise.

You forgot one thing: DNSSEC. If someone can spoof your nameservers, SPF/DKIM/DMARC is pretty much useless. So before doing anything else, I'd recommend starting with securing DNS.

(Quote)

To avoid confusion, I'm talking specifically about Yandex.Mail (which is the topic of this thread). Yandex also offers a number of other services (e.g., a way to make electronic payments) that I've ne

(Quote)

2. Will act as my secondary DNS server (not much traffic).

Germany, Berlin (DNS:NET) 1027.87 Mbit/s 1625.36 Mbit/s 14.369 ms

Just nslookup with different dns, 1.1.1.1 or 8.8.8.8 and problem resolves. Shouldn't be any difference using cf or goog dns

usually you won't see a real performance hit just because you don't use the inhouse dns. while latency to another dns server can be a bit bigger, stuff like that gets cached for a reason even locally

* What kind of performance hit I can expect after changing the DNS? I'm not much aware of that part on the server-side.

nobody forces you to use hetzner dns (or hetzner at all) ... so maybe just change that?

NewsHosting isn't resolving on Hetzner's DNS.

This is very accurate. Changing DNS is a far, far easier change to roll out with little or no disruption.

(Quote)

than whole (poorer) countries, and (b) a DNS system where A records only hold an address but no port (or the lack of an 'A+' record) which leads to massive IP4 waste for http servers (which are among

(Quote)

A small intro about the company, CloudCone, LLC is a Cloud Hosting Services Provider that provides Fully Managed hourly billed cloud virtual private servers, AnyCast DNS, and high-performance bare met

No. SmartDNS is about unblocking Streaming services like Flix, BBC, Hulu etc. DNS Firewall is smth like AdGuard.

Is SmartDNS the same as the DNS firewall that appears not to be included in the offers you post?

(Quote)