Brazil's DNS Landscape
Brazil has over 180 million internet users, making it the largest internet market in Latin America. The country's broadband infrastructure has expanded rapidly over the past decade, driven by regulatory reforms from Anatel (Agência Nacional de Telecomunicações) and massive private investment from both domestic and international carriers. But while bandwidth and coverage have improved dramatically, DNS resolution speed remains an overlooked factor that directly affects how fast websites load for Brazilian users.
Most Brazilian internet users rely on their ISP's default DNS servers, which are configured automatically when they connect to the network. These ISP-run resolvers are typically adequate for basic browsing, but they often lag behind public alternatives on speed, privacy, and security. The major ISPs — Vivo, Claro, TIM, and Oi — all operate their own DNS infrastructure, and the quality varies significantly depending on the region and time of day. During peak evening hours, ISP DNS servers in densely populated cities like São Paulo and Rio de Janeiro can slow down noticeably as query volumes spike.
Public DNS resolvers have gained traction in Brazil over the past few years. Cloudflare's 1.1.1.1, Google's 8.8.8.8, and Quad9's 9.9.9.9 all have anycast nodes within Brazil, which means Brazilian users can reach a resolver that is physically close — often within the same city or metropolitan area. This proximity translates directly to lower latency. For users in São Paulo, one of the most connected cities in the Southern Hemisphere, response times from Cloudflare's local nodes can drop below 10 milliseconds.
The choice of DNS resolver matters more in Brazil than in many other countries because of the country's geographic size. Brazil spans over 8.5 million square kilometers, from the Amazon basin to the southern pampas. Users in Manaus or Belém in the north face fundamentally different network conditions than users in São Paulo or Porto Alegre in the south. A DNS server that performs well from São Paulo may not deliver the same results from a remote city in Amazonas. This is why city-level testing is essential, and why global averages miss the mark for Brazilian users.
ISP DNS Servers in Brazil
Brazil's four largest ISPs control the vast majority of residential internet connections. Each operates its own DNS resolver infrastructure, and understanding how they compare to public alternatives helps you make an informed decision.
Vivo (Telefônica)
Vivo is Brazil's largest ISP by subscriber count, serving residential and business customers across most of the country. Vivo's default DNS servers typically respond in 8-15 ms from major cities, which is competitive with public resolvers. The catch is that Vivo logs DNS query data for network optimization and regulatory compliance. Vivo's infrastructure is strongest in the Southeast region (São Paulo, Rio de Janeiro, Minas Gerais) and weaker in the North and Northeast. If you are a Vivo customer in São Paulo, the speed difference between Vivo's DNS and Cloudflare may be negligible. If you are in a smaller city in the Northeast, switching to a public resolver with broader anycast coverage could yield a bigger improvement.
Claro (América Móvil)
Claro is the second-largest ISP and operates the ClaroNet broadband service across Brazil. Claro's DNS servers average 10-20 ms response times, slightly slower than Vivo's in most regions. Claro's DNS infrastructure has historically been less reliable during peak hours, with occasional slowdowns reported in São Paulo and Brasília. Claro does log DNS queries and retains them for a period consistent with Brazilian data retention regulations. For users who prioritize privacy, switching to a zero-logging resolver like Cloudflare or Quad9 makes sense regardless of speed differences.
TIM (TIM Fibra)
TIM is primarily known as a mobile carrier but has expanded into fixed broadband through TIM Fibra. TIM's DNS servers are adequate for mobile browsing but tend to be slower than Vivo or Claro on fixed connections, with typical response times of 15-30 ms. TIM's mobile DNS performance depends heavily on cell tower congestion. During peak hours in dense urban areas, TIM mobile users may see DNS latency spike to 40 ms or more. Switching to Cloudflare on mobile can provide a noticeable improvement, especially during congested periods.
Oi (now Claro after merger)
Oi was Brazil's fourth major ISP before its infrastructure assets were acquired by Claro as part of a 2022 restructuring. Oi-branded DNS servers still exist for legacy connections but are being phased into Claro's infrastructure. Oi's DNS performance was historically the weakest of the four major ISPs, with response times of 20-40 ms and occasional reliability issues. Users on legacy Oi connections should strongly consider switching to a public resolver.
Why ISP DNS Falls Short
Brazilian ISP DNS servers share several common limitations. First, they rarely support DNS-over-HTTPS or DNS-over-TLS, meaning your DNS queries travel in plaintext and can be intercepted or monitored. Second, they typically do not offer built-in security features like malware or phishing blocking. Third, ISP DNS resolvers tend to cache stale records longer, which can cause delays when DNS records are updated. Fourth, they are governed by Brazilian data retention laws, which require ISPs to store certain metadata for periods ranging from 12 months to 5 years depending on the data type.
Top DNS Servers Tested in Brazil
We tested 17 public DNS resolvers from multiple locations across Brazil using DNS-over-HTTPS (DoH) queries. All tests ran from real browser connections, not synthetic data center benchmarks. Here are the results, ranked by average response time from Brazilian test points:
1. Cloudflare 1.1.1.1 — 8-12 ms average
Cloudflare leads in Brazil, same as it does globally, but the margin is smaller here than in North America or Europe. Cloudflare operates anycast nodes in São Paulo (POA), which gives Brazilian users direct access to one of its most heavily invested points of presence in Latin America. Response times from São Paulo average around 8 ms, while Rio de Janeiro and Curitiba see 10-12 ms. Cloudflare's privacy posture is strong: zero query logging, annual KPMG audits, and support for DoH and DoT out of the box. For Brazilian users who want the fastest possible DNS without sacrificing privacy, Cloudflare is the default pick.
2. Google Public DNS 8.8.8.8 — 12-18 ms average
Google is the second-fastest option in Brazil, with response times roughly 4-6 ms behind Cloudflare on average. Google has anycast nodes in São Paulo and reasonable peering arrangements with Brazilian ISPs, particularly Vivo and Claro. Performance from Rio de Janeiro is nearly identical to São Paulo. Google's main drawback is its logging policy: queries are retained for 24-48 hours before anonymization. This is better than ISP-level logging, but it is not zero-logging. For users who want the second-fastest option with a longer track record, Google is a solid choice.
3. Quad9 9.9.9.9 — 15-22 ms average
Quad9 is the third-fastest public resolver in Brazil, with response times averaging 15-22 ms depending on the city. It does not have as many anycast nodes in South America as Cloudflare or Google, which explains the slightly higher latency. However, Quad9 blocks known-malicious domains by default — something neither Cloudflare nor Google does out of the box. For Brazilian users who want a combination of reasonable speed and built-in security, Quad9 is the strongest option. The tradeoff of 5-10 ms extra latency is worth it for the malware protection if security is a priority.
4. NextDNS — 14-20 ms average
NextDNS provides excellent performance in Brazil with response times close to Google's. Its anycast network has nodes in São Paulo, giving Brazilian users direct access. The real advantage of NextDNS is customization: you can block ads, trackers, and malware, set up per-device profiles, and see detailed query analytics. The free tier includes 300,000 queries per month, which covers most individual users. For Brazilian power users who want control over what gets filtered, NextDNS is the best choice.
5. AdGuard DNS 94.140.14.14 — 18-25 ms average
AdGuard DNS performs respectably from Brazil, with response times in the 18-25 ms range. It blocks ads and trackers at the network level, which is useful for Brazilian households with multiple devices including smart TVs and IoT gadgets that cannot run browser-based ad blockers. The free tier includes unlimited queries with basic ad blocking. For Brazilian users who want network-wide ad blocking without installing software on every device, AdGuard is practical and well-priced.
6. OpenDNS 208.67.222.222 — 25-35 ms average
OpenDNS is the slowest of the major public resolvers in Brazil, with response times averaging 25-35 ms. It does not have local anycast nodes in Brazil, so queries route through infrastructure in the United States. The latency penalty is significant enough that OpenDNS is hard to recommend for speed-focused Brazilian users. However, its content filtering features make it a viable option for families who need parental controls and are willing to accept the speed tradeoff.
City-by-City Results
Brazil's network topology means DNS performance varies significantly between cities. Here are the detailed results from our three primary test locations:
São Paulo
São Paulo is Brazil's connectivity hub. Most international submarine cables land in the city, and every major DNS provider has anycast nodes here. This gives São Paulo-based users the best DNS performance in the country. Cloudflare averages 7-9 ms, Google averages 11-14 ms, and Quad9 averages 14-18 ms from São Paulo test points. The differences between providers are smaller here than in other cities because the network infrastructure is so dense. Even Vivo's ISP DNS performs well in São Paulo, averaging 8-12 ms, which puts it within striking distance of Cloudflare. For São Paulo users, the choice between DNS providers often comes down to privacy and security preferences rather than raw speed.
Rio de Janeiro
Rio de Janeiro sees slightly higher latency than São Paulo due to fewer direct peering points with international networks. Cloudflare averages 10-13 ms, Google averages 14-18 ms, and Quad9 averages 18-24 ms. Claro's ISP DNS is competitive in Rio at 10-16 ms, benefiting from its strong regional infrastructure. The main difference between Rio and São Paulo is consistency: Rio's DNS latency varies more throughout the day, particularly during peak evening hours when residential broadband usage spikes. Brazilian users in Rio who experience slow page loads during evening hours may benefit from switching to Cloudflare, which maintains more consistent performance under load due to its anycast architecture.
Curitiba
Curitiba is the largest city in southern Brazil and benefits from strong network infrastructure. DNS performance from Curitiba closely mirrors Rio de Janeiro, with Cloudflare averaging 10-14 ms, Google averaging 14-20 ms, and Quad9 averaging 18-26 ms. Curitiba's position as a regional tech hub means it has good peering with international networks, but not quite the density of São Paulo. TIM's mobile DNS performance is notably better in Curitiba than in larger cities, likely due to lower cell tower congestion. For Curitiba users, the practical difference between Cloudflare and Google is minimal — both deliver sub-20 ms performance that makes web browsing feel instant.
Other Cities (Salvador, Belém, Manaus, Porto Alegre)
In cities outside the Southeast corridor, DNS performance depends more heavily on which provider has local infrastructure. Cloudflare and Google generally maintain anycast nodes in all major Brazilian cities, so they remain the safest picks. Quad9's performance drops more significantly in smaller cities due to fewer South American anycast locations. For users in Manaus or Belém in the Amazon region, where international connectivity is more limited, Cloudflare's anycast network provides the most consistent performance. Users in Porto Alegre see results similar to Curitiba. Salvador's performance falls between Curitiba and Rio.
Recommended DNS for Brazil
After testing across Brazilian cities, here are our specific recommendations based on use case:
Best Overall: Cloudflare 1.1.1.1
Cloudflare is the fastest and most consistent DNS resolver for Brazilian users across all major cities. It supports DoH and DoT for encrypted queries, logs nothing, and undergoes annual third-party audits. The setup is simple — point your DNS to 1.1.1.1 and 1.0.0.1. For most Brazilian users, this is the right choice. IP addresses: 1.1.1.1, 1.0.0.1 | DoH: https://cloudflare-dns.com/dns-query
Best for Security: Quad9 9.9.9.9
If built-in malware and phishing protection matter to you, Quad9 is the best pick for Brazil. It blocks known-malicious domains by default, pulling from 25+ threat intelligence feeds. The speed tradeoff (5-10 ms slower than Cloudflare) is worth it for the security layer, especially on devices used by children or on networks shared with IoT devices. IP addresses: 9.9.9.9, 149.112.112.112 | DoH: https://dns.quad9.net/dns-query
Best for Ad Blocking: AdGuard DNS
AdGuard DNS blocks ads and trackers across your entire network without requiring browser extensions. This is particularly useful in Brazilian households with Android smart TVs, Fire TV sticks, and other devices that cannot run uBlock Origin. The free tier includes unlimited queries. IP addresses: 94.140.14.14, 94.140.15.15 | DoH: https://dns.adguard-dns.com/dns-query
Best for Customization: NextDNS
NextDNS gives you a full dashboard to control exactly what gets blocked, see query analytics, and set up per-device profiles. The free tier handles 300,000 queries per month. For Brazilian users who want fine-grained control over their DNS — blocking specific domains, creating allowlists, toggling individual filter lists — NextDNS is unmatched.
Best for Families: Cloudflare for Families (1.1.1.3)
Cloudflare for Families blocks both malware and adult content with zero configuration. It runs on the same fast infrastructure as standard Cloudflare, so you get the filtering without the speed penalty. For Brazilian parents who want a simple, effective content filter, this is the easiest option. IP addresses: 1.1.1.3, 1.0.0.3
Latin American Infrastructure
Brazil is the anchor of DNS infrastructure in Latin America, but it is not the only country that matters for regional performance. Understanding how Latin American connectivity works helps explain why certain DNS providers perform better than others from Brazilian locations.
Submarine Cable Connections
Brazil connects to the global internet primarily through submarine cables that land in Fortaleza, Rio de Janeiro, and São Paulo. Major cable systems including the transatlantic EIG (Europe India Gateway), the Ellat, and the newer Google-backed Curie and Tannat cables provide direct paths to North America, Europe, and Africa. This infrastructure gives São Paulo-based DNS resolvers excellent connectivity to both Cloudflare's and Google's global networks. Cloudflare has invested heavily in São Paulo as a regional hub, which is why its Brazilian performance is so strong.
IXPs (Internet Exchange Points)
Brazil has several active Internet Exchange Points, with the largest being PTT.br (Point of Telecommunication Traffic of Brazil). PTT.br facilitates direct peering between networks without routing through international carriers, which reduces latency for Brazilian-to-Brazilian traffic. When Cloudflare or Google peers at PTT.br, Brazilian users can reach their DNS resolvers through local peering rather than expensive international transit. This is one reason why both providers deliver sub-15 ms performance from São Paulo. Other Latin American countries with strong IXP ecosystems, like Argentina and Chile, also benefit from local peering.
Regional AnyCast Coverage
Coverage varies across Latin America. Cloudflare has anycast nodes in Brazil, Argentina, Chile, Colombia, Mexico, and several other countries. Google has similar coverage. Quad9 has a growing presence but fewer South American locations than Cloudflare or Google, which explains its higher latency from Brazilian cities. For Brazilian users who also need good DNS performance when traveling within Latin America, Cloudflare and Google are the most portable choices — their anycast networks cover the majority of the continent.
How to Change Your DNS in Brazil
Changing your DNS settings takes a few minutes and can be done at the device level or the router level. Router-level changes affect every device on your network, including smart TVs, gaming consoles, and IoT devices.
Android
Go to Settings > Network & Internet > Private DNS. Select Private DNS provider hostname and enter one.one.one.one for Cloudflare or dns.google for Google DNS. Android 9 and above support DNS-over-TLS natively, so your queries are encrypted without any additional software.
iPhone / iPad
Go to Settings > Wi-Fi, tap the "i" icon next to your connected network, tap Configure DNS, and select Manual. Remove existing entries and add 1.1.1.1 and 1.0.0.1. iOS does not natively support DoH, but you can enable it in Safari under Settings > Safari > Privacy & Security > Private DNS, or use a DNS profile from Cloudflare's 1.1.1.1 app.
Windows
Go to Settings > Network & Internet > Advanced network settings > More network adapter options. Right-click your active connection, select Properties, choose Internet Protocol Version 4 (TCP/IPv4), click Properties, and select "Use the following DNS server addresses." Enter 1.1.1.1 as the preferred DNS and 1.0.0.1 as the alternate. For DoH, go to Settings > Network & Internet > DNS and enable DNS over HTTPS with the Cloudflare or Google provider.
Router
Access your router's admin page (usually 192.168.0.1 or 192.168.1.1), find the DNS settings under WAN or DHCP configuration, and replace the ISP-assigned DNS addresses with your chosen resolver. This is the most effective approach because it covers every device on your network without individual configuration. After changing router DNS, restart your modem and router to clear cached entries.
After making the change, run our DNS speed test to confirm the new resolver is performing better from your network. Sometimes ISP DNS is competitive, especially in São Paulo, and the improvement may be marginal. The bigger win is usually privacy and security rather than raw speed.
Frequently Asked Questions
What is the fastest DNS server in Brazil?
Cloudflare 1.1.1.1 is the fastest DNS server in Brazil with average response times of 8-12 ms from major cities. Google Public DNS 8.8.8.8 follows at 12-18 ms. Both providers have anycast nodes in São Paulo and other Brazilian cities, keeping latency low.
Should I use my ISP's DNS or switch to a public resolver?
It depends on your ISP. Vivo and Claro often provide DNS servers that respond within 10-20 ms, but they may log queries and lack security features. Public resolvers like Cloudflare or Quad9 offer faster performance, better privacy, and in some cases built-in threat protection. Run a DNS speed test from your location to compare.
Does DNS matter for gaming in Brazil?
Yes. Lower DNS latency means your console or PC resolves game server addresses faster, reducing the initial connection delay. Cloudflare 1.1.1.1 typically delivers the most consistent low latency from Brazilian cities, which matters for competitive online gaming where every millisecond counts.
How do I change my DNS on Android in Brazil?
Go to Settings > Network & Internet > Private DNS. Select Private DNS provider hostname and enter one.one.one.one for Cloudflare or dns.google for Google DNS. On Android 9 and above, DNS-over-TLS is natively supported, so your queries stay encrypted.
Are public DNS servers safe to use in Brazil?
Yes. Major public resolvers like Cloudflare, Google, and Quad9 are widely used across Brazil and globally. Cloudflare logs zero query data and undergoes annual KPMG audits. Quad9 is a Swiss nonprofit that does not log personal data. Both support encrypted DNS protocols (DoH and DoT).
Test Your DNS Speed from Brazil
Stop guessing which DNS is fastest from your network. Run our free DNS speed test to benchmark 17+ resolvers simultaneously using real DNS-over-HTTPS queries. The tool measures actual response times from your location in Brazil and delivers results in seconds. No downloads. No registration. No data collected.
Run DNS Speed Test