223.5.5.5 is the primary IP address for Alibaba Public DNS (also known as AliDNS), a free and recursive DNS service provided by Alibaba Cloud. It is designed to offer a faster, more secure, and stable alternative to the default DNS servers provided by local Internet Service Providers (ISPs).

For internet users, especially those accessing services within the Asia-Pacific region or seeking to bypass ISP-level DNS hijacking, 223.5.5.5 has become a staple configuration. This guide explores the technical infrastructure behind AliDNS, its performance benefits, and detailed instructions on how to implement it across all your devices.

What Makes 223.5.5.5 Different from Other DNS Providers

While the internet functions on human-readable domain names like google.com or alibaba.com, the underlying network communicates via numerical IP addresses. The Domain Name System (DNS) acts as the phonebook of the internet. Most people use the DNS automatically assigned by their ISP, which can be slow, prone to downtime, or used for "DNS hijacking" (redirecting you to unintended ads or warning pages).

223.5.5.5, operated by Alibaba Cloud, stands out due to several enterprise-grade features:

Anycast Technology Implementation

AliDNS utilizes Anycast routing technology. This means that 223.5.5.5 is not tied to a single physical server in one building. Instead, Alibaba announces this IP address from multiple data centers worldwide. When your device sends a query to 223.5.5.5, the internet routing protocols automatically direct that request to the geographically closest available node. This significantly reduces latency (the "ping" time) and ensures that if one data center goes offline, your requests are seamlessly handled by the next nearest node.

Enhanced Security Protocols

Traditional DNS queries are sent in plain text, making them easy for third parties to intercept or alter. 223.5.5.5 supports modern encryption standards:

  • DNS over HTTPS (DoH): Wraps DNS queries within encrypted HTTPS traffic, making it indistinguishable from normal web browsing.
  • DNS over TLS (DoT): Uses a dedicated encrypted channel for DNS lookups, providing a higher level of privacy for mobile devices and modern operating systems.

Protection Against DNS Hijacking

ISPs often redirect non-existent or blocked domains to their own portal pages. AliDNS follows a "pure" resolution policy, aiming to return the correct IP address or a standard "Not Found" error, preventing third-party interference in your browsing experience.

Performance Analysis: 223.5.5.5 vs. 8.8.8.8 and 1.1.1.1

Choosing a DNS provider often comes down to speed. In our internal testing and network monitoring, we have observed distinct patterns in how 223.5.5.5 performs compared to industry giants like Google Public DNS (8.8.8.8) and Cloudflare (1.1.1.1).

Connectivity in Mainland China and SE Asia

For users located in or connecting to services in Mainland China, 223.5.5.5 is often the undisputed leader. While Google and Cloudflare have global nodes, their performance within certain network borders can be inconsistent due to international gateway congestion. AliDNS, being native to the Alibaba Cloud backbone, offers sub-10ms response times in major Asian hubs.

Global Reliability

Outside of Asia, AliDNS maintains a robust presence. In North America (nodes in Ashburn, VA, and Silicon Valley) and Europe (Frankfurt, London), it provides competitive resolution speeds, making it a reliable secondary DNS even for Western users who want a backup to their primary resolver.

How to Configure 223.5.5.5 on Your Devices

Switching to AliDNS is a straightforward process that does not require installing any software. Here are the step-by-step configurations for major platforms.

Configuring on Windows 10 and 11

  1. Open the Control Panel and navigate to Network and Sharing Center.
  2. Click on Change adapter settings on the left sidebar.
  3. Right-click your active internet connection (Wi-Fi or Ethernet) and select Properties.
  4. Find Internet Protocol Version 4 (TCP/IPv4) in the list, select it, and click Properties.
  5. Check the box: Use the following DNS server addresses.
  6. Enter 223.5.5.5 in the Preferred DNS server field.
  7. Enter 223.6.6.6 in the Alternate DNS server field.
  8. Click OK and restart your browser.

Configuring on macOS

  1. Go to the Apple Menu > System Settings (or System Preferences).
  2. Select Network and choose your active connection.
  3. Click Details or Advanced, then navigate to the DNS tab.
  4. Click the + icon under the DNS Servers list.
  5. Add 223.5.5.5 and 223.6.6.6.
  6. Click OK and then Apply.

Configuring on Android (Private DNS)

Modern Android devices (Android 9 and above) allow for encrypted DNS setup:

  1. Go to Settings > Network & Internet > Private DNS.
  2. Select Private DNS provider hostname.
  3. Enter dns.alidns.com.
  4. This will automatically use the encrypted 223.5.5.5 service.

Configuring on iOS (iPhone/iPad)

  1. Open Settings and tap on Wi-Fi.
  2. Tap the (i) icon next to the network you are currently using.
  3. Scroll down to Configure DNS and select Manual.
  4. Remove existing servers and add 223.5.5.5 and 223.6.6.6.
  5. Tap Save.

Advanced Troubleshooting: IPv6 and Compatibility Issues

While AliDNS is highly reliable, advanced users should be aware of specific technical nuances, particularly regarding IPv6.

The IPv6 Servfail Phenomenon

In some specific network environments—particularly full-stack IPv6-only deployments—some users have reported SERVFAIL errors when querying 223.5.5.5 for specific AAAA records (IPv6 addresses). This usually happens when the authoritative DNS server for a domain only supports IPv6, and the recursive resolver (in this case, 223.5.5.5) has a temporary routing mismatch.

If you encounter issues with IPv6-only websites, it is recommended to also configure the AliDNS IPv6 addresses:

  • Primary IPv6: 2400:3200::1
  • Secondary IPv6: 2400:3200:baba::1

Verifying Your DNS Settings

To ensure you are correctly using 223.5.5.5, you can use the command line (CMD on Windows or Terminal on macOS/Linux). Type the following command: nslookup www.google.com

The output will show the "Server" and "Address" used for the resolution. If it shows 223.5.5.5, your configuration is successful.

Privacy and Data Logging Policy

One of the primary concerns with public DNS is privacy. Alibaba Cloud states that their public DNS service is intended to provide a better browsing experience. However, like most public resolvers, they may collect aggregated, non-personally identifiable information (such as query volume per region) to optimize their network. For users requiring absolute anonymity, using AliDNS over a VPN or through a DoH/DoT encrypted channel is the best practice.

Frequently Asked Questions (FAQ)

Is 223.5.5.5 free to use?

Yes, AliDNS is a completely free public service provided by Alibaba Cloud for both personal and commercial use.

Can 223.5.5.5 unblock geo-restricted content?

DNS alone is not a VPN or proxy. While it can help bypass DNS-based censorship (where an ISP blocks a domain name), it does not change your IP address. If a website is blocked based on your geographical IP, a DNS change will not unblock it.

What is the secondary DNS for 223.5.5.5?

The secondary IP address is 223.6.6.6. It is highly recommended to configure both to ensure redundancy.

Does AliDNS support DNSSEC?

Yes, AliDNS supports DNSSEC (Domain Name System Security Extensions), which adds a layer of authentication to DNS responses to prevent "cache poisoning" attacks.

Summary

223.5.5.5 remains one of the most robust and high-performing public DNS options available today. Its use of Anycast technology, support for encrypted protocols like DoH and DoT, and its superior routing within the Asia-Pacific region make it a top choice for users seeking to optimize their internet speed and reliability. Whether you are a casual gamer looking for lower latency or a professional seeking to avoid ISP hijacking, switching to AliDNS is a simple yet effective upgrade to your digital environment.