August 22nd, 2024

Self-Hosting DNS

The author self-hosted a DNS resolver using AdGuard Home for customization, favoring it over Pi-hole. The setup involved Docker and SSL configuration, enhancing privacy and control over DNS queries.

Read original articleLink Icon
Self-Hosting DNS

The article discusses the author's experience in self-hosting a DNS resolver using AdGuard Home, motivated by a desire for customization and control over DNS queries. Initially, the author subscribed to NextDNS but sought a self-hosted solution due to its limitations. Key requirements for a custom DNS resolver included the ability to create custom blocking lists, forward requests to chosen DNS providers, and support modern encrypted DNS protocols. The author compared AdGuard Home with Pi-hole, ultimately favoring AdGuard Home for its comprehensive feature set, including built-in DHCP server capabilities and support for encrypted DNS. The setup process involved using Docker and configuring various settings, including SSL certificates for secure connections. The article also covers how to use the new DNS resolver across different operating systems, including Windows, macOS, Linux, and Android, providing specific instructions for each. The author emphasizes the benefits of self-hosting, such as enhanced privacy and the ability to manage DNS requests more effectively.

- The author transitioned from NextDNS to self-hosting with AdGuard Home for greater customization.

- AdGuard Home was chosen over Pi-hole due to its superior feature set and support for encrypted DNS.

- The setup process involved Docker and required configuration of SSL certificates for secure connections.

- Instructions for using the DNS resolver on various operating systems were provided.

- Self-hosting offers benefits like improved privacy and control over DNS queries.

Related

The FreeBSD-native-ish home lab and network

The FreeBSD-native-ish home lab and network

The author details a complex home lab setup with a FreeBSD server on a laptop, utilizing Jails for services like WordPress and emphasizing security measures and network configurations for efficiency and functionality.

Self Hosting 101 – A Beginner's Guide

Self Hosting 101 – A Beginner's Guide

Self-hosting involves running personal servers for control over data and services. It suits privacy-conscious individuals, tech enthusiasts, small businesses, educators, and cost-conscious users. Benefits include independence, customization, and savings. Challenges include technical complexity and security risks.

Journeying into XDP: Fully-fledged DNS service augmentation (2022)

Journeying into XDP: Fully-fledged DNS service augmentation (2022)

Utilizing eXpress Data Path (XDP) enhances DNS services by implementing rate-limiting queries to combat DoS attacks efficiently. DNS Cookies whitelist returning requesters, aiding in mitigating spoofed queries and enhancing security. XDP's implementation includes verifying cookies and overcoming technical challenges.

How to Use Tailscale VPN to Embrace Remote Work and Explore the World

How to Use Tailscale VPN to Embrace Remote Work and Explore the World

The rise of remote work has led to increased interest in digital nomadism, with Tailscale recommended for secure, flexible internet access through a self-hosted VPN, enhancing privacy while traveling.

Migrating Mess with DNS to Use PowerDNS

Migrating Mess with DNS to Use PowerDNS

Julia Evans migrated her project Mess With DNS to PowerDNS, addressing DNS issues, improving performance with SQLite, upgrading the frontend to Vue 3, and enhancing user experience in the new version.

Link Icon 13 comments
By @bananapub - 3 months
DNS resolver, which it is deeply silly to not include in the title.
By @Schwobaland - 3 months
Want to throw in blocky (https://github.com/0xERR0R/blocky). Supports modern protocols and easy to configure in one file. Migrated to this from pi-hole and never looked back.
By @globular-toast - 3 months
Why forward requests to a DNS server like 1.1.1.1 at all? I used to use stuff like pi-hole/dnsmasq, but now I'm using unbound on my opnsense router which supports using blocklists and custom overrides (as well as automatic for DHCP clients). I found the default blocklists in pi-hole broke a few things but not had any problems with the lists I'm using now.
By @gbrindisi - 3 months
I run coredns with a blocklist, the config is like 4 lines.

What am I missing by not using AdGuard, PiHole and similar?

By @onlyspaceghost - 3 months
My journey of DNS, including self-hosting with Pi-hole and AdGuard Home, using paid services like NextDNS and AdGuard DNS, and public privacy-respecting resolvers.
By @shivajikobardan - 3 months
I also want to selfhost variosu servers like dns, email(just to send email to myself).....ldap, dhcp etc. Where do I get started with? I know linux command line.
By @johnea - 3 months
Aparently signing up for a subscription service now qualifies as "self-hosting" 8-)

I've been running bind9 on a computer under my desk for about 20 years.

The only subdscription required is an ISP contract that includes static IP.

Maybe I'll get a netflix acct (never had one), and "self-host" some videos...

By @Havoc - 3 months
> By using multiple different resolvers, operated by different companies, no single one gets the whole picture.

I’d say exact opposite. Now you’re sharing data with multiple parties and each is potentially getting enough data to extrapolate the whole picture

By @packetlost - 3 months
Does anyone know of a good authoritative DNS server that supports Dynamic DNS updates? Preferably exclusively standardized stuff. I currently run CoreDNS on my network, but dynamic registration isn't supported and might never be.
By @ThePowerOfFuet - 3 months
>I wanted to be able to access it with a static IP, and I don’t feel like calling my ISP to get one.

Not "feeling like" calling your ISP to get a static IP, but also wanting to self-host?

By @thedanbob - 3 months
I recently switched from Pi-Hole to AdGuard Home, it was pretty straightforward to migrate my configuration and so far it's working great. I've actually got two servers running AGH + unbound (authoritative) so my internet keeps working if one setup breaks/reboots.
By @jakobjs - 3 months
Fun project.

But I would just use https://pi-hole.net/

By @sulandor - 3 months
this seems like a massively overcomplicated exercise.

dns-blocking is evil, no matter who does it.

stop lying to yourself and install contentblocker on your devices