DLS Interview: OpenDNS Founder and CEO David Ulevitch
We are long-time fans of the free DNS-lookup service OpenDNS, which serves as a replacement for your ISP's DNS. We recently got a chance to ask the founder and CEO of OpenDNS, David Ulevitch, for a quick history of OpenDNS and for an update on the service.DLS: What got you involved in DNS?
David: When I was a freshman at Wash U. in St. Louis, I started becoming more active online. I went to buy a domain name and in the process, learned of the need for a solid, reliable DNS service. I was already running my own server, so I took the obvious next step and wrote my own DNS management software. The need became even more obvious when word about my software got around and several people wanted to use it. The software eventually became a service, EveryDNS.net, that's still operating today.
DLS: How did OpenDNS come about?
David: Post college I wanted to continue innovating with the DNS. EveryDNS is an authoritative DNS service. I wanted to improve the other side of DNS - recursive, or the part that maps individual Internet users to Web sites. Since most people get their recursive DNS service from their ISP, and DNS is not an ISP's core competency, I knew there was a lot of room for improvement. I also had some ideas about how to prevent phishing attacks through the DNS. All of those aims came together with the inception of OpenDNS. We now have more than 3 million users. Pretty amazing.
DLS: What has changed at OpenDNS since we last suggested your service to our readers?
David: A lot! Initially we empowered our users to block just phishing sites on their networks. While that in itself was big, now we give them total control over which Web sites don't resolve. In addition to letting users block individual sites on their network, we offer categories of sites they can block all at once. And we teamed up with St. Bernard Software to give OpenDNS users the power to block adult sites. The service is incredibly powerful and thorough. Everyone from parents at home to sys admins at large businesses love having the granularity of control. And since everything OpenDNS offers it free, it opens up budget to be spent on other network improvements.
DLS: So our readers should use your service instead of their ISP's DNS?
David: Absolutely - everyone not yet using OpenDNS should switch immediately. As I mentioned before, DNS is not your ISP's core competency. They're good at giving you an Internet connection. OpenDNS's core competency is DNS service and we provide it to everyone free. In addition to making Web sites load much faster, we've never had any downtime. Often times when your Internet connection goes down, it's the fault of flaky DNS. Some of the largest ISPs are notorious for faulty DNS. Another OpenDNS feature people love is automatic typo correction. When you're typing fast and you type "www.downloadsquad.cmo" we automatically correct it to .com. And of course our phishing protection. We built and operate PhishTank.com, the most timely and accurate source of phishing info on the Internet.
DLS: Are you working on any other enhancements to OpenDNS?
David: I'll get in trouble if I give too much away here, but I can say look for our Web content filtering to get more thorough. Right now the way Internet security works is this: you pay money, you get protected. We don't think this pay-for-protection model is fair for Internet users, and further, it actually cripples the potential of the Internet. A safe Internet shouldn't be available only to those who can afford it.
If you'd like to start using OpenDNS, check out their tutorials.













Comments
9
Subscribe to commentsmxxconJan 15th 2008 10:15AM
If David reads this, i very much hope that he'll direct some resources to EveryDns project. For some people it is just as important as OpenDNS.
Speaking of EveryDns, a while ago i donated to the project, but my profile there still doesn't reflect that. I contacted EveryDns support 5 times but haven't heard a single reply. :(
daftvikingJan 15th 2008 10:44AM
I'm glad you posted - the exact same thing is happening to my account on EveryDNS as well (donated but not shown on my profile), and I've contacted their support addresses three times (both @everydns.net and @everybox.net), with no response or anything. Gotta say that lack of responsiveness makes me a little nervous about the service...
OpenDNS, on the other hand, totally rocks. And I'm not just saying that because I won the "sysadmin haiku" contest they had a while back: http://blog.opendns.com/2007/07/13/challenge-2-winner-announced/
David UlevitchJan 15th 2008 1:22PM
Hey guys... Sorry about the EveryDNS Support issues. I'm working on some things to get it back under a manageable load. For the time being, feel free to email me directly and I'll get you taken care of. I'm sorry you felt ignored and neglected, not my intent at all. I hope you'll give it a second chance. And pretty soon it should be as responsive as things are here at OpenDNS (where we have a team of people who are dedicated to talking with our customers).
PeterJan 15th 2008 10:54AM
I love the premise of opendns, but the performance needs to be improved. At home it seemed ok, but when I switched our 50-user office to it, you could see a noticeable drop in responsiveness. Hopefully the performance will improve.
mxxconJan 15th 2008 10:56AM
you shouldn't haven't switched "50 users". they should be using local dns server, such as your firewall's, and that one in responce should talk to opendns
Todd RitterJan 15th 2008 10:57AM
Peter, do you have any other bandwidth issues? I use OpenDNS for a network of 1500 workstations/3500 users and have no performance problems. Of course I also have internal DNS servers (we use OpenDNS as our forwarders for requests that our internal DNS servers don't have information).
PeterJan 15th 2008 4:35PM
mxxcon & Todd Ritter - Sorry, that was a poorly worded post. I didn't change anything on the 50 user workstations. I changed the forwarders on the DNS server on the firewall. We run an internal DNS server and a caching only server on the firewall. When I changed the forwarders I saw an immediate drop in performance.
Todd RitterJan 16th 2008 9:26AM
Peter, are you in the US? If so, are you extremely far away from any of their data centers http://system.opendns.com/ ?
Diego GarciaJan 17th 2008 7:51PM
OpenDNS is awesome, i'm not an IT Pro like the other guys but the kids of my family hates me since i blocked all the porno sites.
I do it for their security :P But i can do it thanks to OpenDNS, there are tons of parental craps on the web, but no one works like OpenDNS and for free!
Thanks for your service, it's like the internet should be.
PD: Works great from Mexico.