Hosting your own authoritative DNS: yay or nay?

2»

Comments

  • foxonefoxone OG

    @AaronSS said:
    This could not have been posted at a better time. I’m also considering this. I’m looking at this:

    https://technitium.com/dns/

    Isn't that a recursive server though? We are talking about authoritative servers here.

  • skorousskorous OG

    @foxone said:

    @AaronSS said:
    This could not have been posted at a better time. I’m also considering this. I’m looking at this:

    https://technitium.com/dns/

    Isn't that a recursive server though? We are talking about authoritative servers here.

    Technetium can do both.

  • wankelwankel OG

    @skorous said:

    @foxone said:

    @AaronSS said:
    This could not have been posted at a better time. I’m also considering this. I’m looking at this:

    https://technitium.com/dns/

    Isn't that a recursive server though? We are talking about authoritative servers here.

    Technetium can do both.

    The trouble is not whether it's recursive or authoritative, the trouble is that in either form it's unstable as hell!

  • skorousskorous OG

    @wankel said:

    @skorous said:

    @foxone said:

    @AaronSS said:
    This could not have been posted at a better time. I’m also considering this. I’m looking at this:

    https://technitium.com/dns/

    Isn't that a recursive server though? We are talking about authoritative servers here.

    Technetium can do both.

    The trouble is not whether it's recursive or authoritative, the trouble is that in either form it's unstable as hell!

    Ah, so you've run it? I wondered if it was worth exploring or not. I've always just run BIND.

  • rootroot OG
    edited January 25

    I am always for self-hosting stuff because this is the low-end way in my opinion. I believe authoritative DNS is the easiest to self-host due to low resource requirements; but even if one may grab the cheapest bare-bone low-end VPS offers with dedicated IP, it has to be from different providers (in different datacenters), so if one falis, the DNS still stands to resolve using other servers.

  • wankelwankel OG

    @skorous said:

    @wankel said:

    @skorous said:

    @foxone said:

    @AaronSS said:
    This could not have been posted at a better time. I’m also considering this. I’m looking at this:

    https://technitium.com/dns/

    Isn't that a recursive server though? We are talking about authoritative servers here.

    Technetium can do both.

    The trouble is not whether it's recursive or authoritative, the trouble is that in either form it's unstable as hell!

    Ah, so you've run it? I wondered if it was worth exploring or not. I've always just run BIND.

    No, haven't... Running around with it for too long would burn a hole in my pocket on decay, besides the obvious health risks :p

    Thanked by (1)skorous
  • mfsmfs OG

    @skorous said: I've always just run BIND.

    I'd suggest you to at least give dnsdist a try, it's a "highly DNS-, DoS- and abuse-aware loadbalancer" that can be put in front of authoritative and recursive resolvers (BIND is fine too); when used in front of an authoritative one, it won't be problematic with AXFR/IXFR

    Thanked by (1)skorous
  • skorousskorous OG
    edited January 25

    @mfs said:

    @skorous said: I've always just run BIND.

    I'd suggest you to at least give dnsdist a try, it's a "highly DNS-, DoS- and abuse-aware loadbalancer" that can be put in front of authoritative and recursive resolvers (BIND is fine too); when used in front of an authoritative one, it won't be problematic with AXFR/IXFR

    Interesting. I'll take a look. Since I'm running a hidden-master I'm not sure whether it'll be relevant to my specific circumstance but an interesting read either way I'm sure.

    EDIT: Oh, that's why this sounded familiar. It's part of PowerDNS. Yeah, I have checked this out when I was running my HA Pi-Hole environment for the lulz.

Sign In or Register to comment.

© LowEndSpirit 2024

ipv6 ready