Hosting your own authoritative DNS: yay or nay?

Comments

• foxone OG

  January 25

  @AaronSS said:
  This could not have been posted at a better time. I’m also considering this. I’m looking at this:

  https://technitium.com/dns/

  Isn't that a recursive server though? We are talking about authoritative servers here.
• skorous OG

  January 25

  @foxone said:

  @AaronSS said:
  This could not have been posted at a better time. I’m also considering this. I’m looking at this:

  https://technitium.com/dns/

  Isn't that a recursive server though? We are talking about authoritative servers here.

  Technetium can do both.
• wankel OG

  January 25

  @skorous said:

  @foxone said:

  @AaronSS said:
  This could not have been posted at a better time. I’m also considering this. I’m looking at this:

  https://technitium.com/dns/

  Isn't that a recursive server though? We are talking about authoritative servers here.

  Technetium can do both.

  The trouble is not whether it's recursive or authoritative, the trouble is that in either form it's unstable as hell!
• skorous OG

  January 25

  @wankel said:

  @skorous said:

  @foxone said:

  @AaronSS said:
  This could not have been posted at a better time. I’m also considering this. I’m looking at this:

  https://technitium.com/dns/

  Isn't that a recursive server though? We are talking about authoritative servers here.

  Technetium can do both.

  The trouble is not whether it's recursive or authoritative, the trouble is that in either form it's unstable as hell!

  Ah, so you've run it? I wondered if it was worth exploring or not. I've always just run BIND.
• root OG

  January 25 edited January 25

  I am always for self-hosting stuff because this is the low-end way in my opinion. I believe authoritative DNS is the easiest to self-host due to low resource requirements; but even if one may grab the cheapest bare-bone low-end VPS offers with dedicated IP, it has to be from different providers (in different datacenters), so if one falis, the DNS still stands to resolve using other servers.
• wankel OG

  January 25

  @skorous said:

  @wankel said:

  @skorous said:

  @foxone said:

  @AaronSS said:
  This could not have been posted at a better time. I’m also considering this. I’m looking at this:

  https://technitium.com/dns/

  Isn't that a recursive server though? We are talking about authoritative servers here.

  Technetium can do both.

  The trouble is not whether it's recursive or authoritative, the trouble is that in either form it's unstable as hell!

  Ah, so you've run it? I wondered if it was worth exploring or not. I've always just run BIND.

  No, haven't... Running around with it for too long would burn a hole in my pocket on decay, besides the obvious health risks

  Thanked by (1)skorous
• mfs OG

  January 25

  @skorous said: I've always just run BIND.

  I'd suggest you to at least give dnsdist a try, it's a "highly DNS-, DoS- and abuse-aware loadbalancer" that can be put in front of authoritative and recursive resolvers (BIND is fine too); when used in front of an authoritative one, it won't be problematic with AXFR/IXFR

  Thanked by (1)skorous
• skorous OG

  January 25 edited January 25

  @mfs said:

  @skorous said: I've always just run BIND.

  I'd suggest you to at least give dnsdist a try, it's a "highly DNS-, DoS- and abuse-aware loadbalancer" that can be put in front of authoritative and recursive resolvers (BIND is fine too); when used in front of an authoritative one, it won't be problematic with AXFR/IXFR

  Interesting. I'll take a look. Since I'm running a hidden-master I'm not sure whether it'll be relevant to my specific circumstance but an interesting read either way I'm sure.

  EDIT: Oh, that's why this sounded familiar. It's part of PowerDNS. Yeah, I have checked this out when I was running my HA Pi-Hole environment for the lulz.