# Issues with 1.1.1.1 public resolver in Canada

- Provider: [Cloudflare](https://down.guide/providers/cloudflare)
- Confidence: Confirmed
- Impact: Degraded
- lasted 1h 8m
- started 2026-11-13 23:53 UTC
- Recursive DNS
- ca
- id: DWN-5f0eb1c8fd
- Official page: https://www.cloudflarestatus.com/incidents/rikplz89rpml

## Summary
Cloudflare says issues with the 1.1.1.1 public resolver in Canada, potentially affecting multiple users, coincided with an active hijack of 1.1.1.0/24. The network with the offending route leak has fixed the issue on its end, and Cloudflare is monitoring the effect.

_Written by anthropic/claude-haiku-5.5 from Cloudflare's own updates._

## Updates from Cloudflare
### 2026-11-13 23:53 UTC: investigating
Cloudflare is aware of, and investigating, an issue which potentially impacts multiple users in Canada that use 1.1.1.1 public resolver. 
Further detail will be provided as more information becomes available.

### 2026-11-14 00:06 UTC: identified
We have reached out to the network where we see an active hijack of 1.1.1.0/24. 
1.0.0.1 and public resolver IPv6 prefixes are fully operational and reachable at this time.

### 2026-11-14 00:52 UTC: monitoring
The network with the offending route leak has fixed the issue on their end. We are currently monitoring the effect of this fix.

### 2026-11-14 01:01 UTC: resolved
This incident has been resolved.

From the builder: does your app depend on Cloudflare? [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=cloudflare) detects problems in your own logs without hand-written monitors, and you can ask it in plain language which errors mention Cloudflare.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=DWN-5f0eb1c8fd), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.