home.social

#dnsdist — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #dnsdist, aggregated by home.social.

  1. There's an interesting conversation going on on the #NANOG #mailinglist. It's about running a #DNS resolver for a medium-sized service provider network:

    Recommended DNS server for a medium 20-30k users isp

    I particularly love that the people from @quad9dns chipped in, and revealed how they split their front- and backend with #dnsdist. Splitting the front- and backend of internet-facing services is something that I already learned in University as a best-practice.

  2. There's an interesting conversation going on on the #NANOG #mailinglist. It's about running a #DNS resolver for a medium-sized service provider network:

    Recommended DNS server for a medium 20-30k users isp

    I particularly love that the people from @quad9dns chipped in, and revealed how they split their front- and backend with #dnsdist. Splitting the front- and backend of internet-facing services is something that I already learned in University as a best-practice.

  3. There's an interesting conversation going on on the #NANOG #mailinglist. It's about running a #DNS resolver for a medium-sized service provider network:

    Recommended DNS server for a medium 20-30k users isp

    I particularly love that the people from @quad9dns chipped in, and revealed how they split their front- and backend with #dnsdist. Splitting the front- and backend of internet-facing services is something that I already learned in University as a best-practice.

  4. There's an interesting conversation going on on the #NANOG #mailinglist. It's about running a #DNS resolver for a medium-sized service provider network:

    Recommended DNS server for a medium 20-30k users isp

    I particularly love that the people from @quad9dns chipped in, and revealed how they split their front- and backend with #dnsdist. Splitting the front- and backend of internet-facing services is something that I already learned in University as a best-practice.

  5. There's an interesting conversation going on on the #NANOG #mailinglist. It's about running a #DNS resolver for a medium-sized service provider network:

    Recommended DNS server for a medium 20-30k users isp

    I particularly love that the people from @quad9dns chipped in, and revealed how they split their front- and backend with #dnsdist. Splitting the front- and backend of internet-facing services is something that I already learned in University as a best-practice.

  6. PowerDNS Security Advisory 2025-02 for DNSdist: Denial of service via crafted DoH exchange

    Impact: Denial of service
    Exploit: This problem can be triggered by an attacker crafting a DoH exchange

    CVE-2025-30194

    dnsdist.org/security-advisorie

    #dnsdist

  7. PowerDNS Security Advisory 2025-02 for DNSdist: Denial of service via crafted DoH exchange

    Impact: Denial of service
    Exploit: This problem can be triggered by an attacker crafting a DoH exchange

    CVE-2025-30194

    dnsdist.org/security-advisorie

    #dnsdist

  8. PowerDNS Security Advisory 2025-02 for DNSdist: Denial of service via crafted DoH exchange

    Impact: Denial of service
    Exploit: This problem can be triggered by an attacker crafting a DoH exchange

    CVE-2025-30194

    dnsdist.org/security-advisorie

    #dnsdist

  9. PowerDNS Security Advisory 2025-02 for DNSdist: Denial of service via crafted DoH exchange

    Impact: Denial of service
    Exploit: This problem can be triggered by an attacker crafting a DoH exchange

    CVE-2025-30194

    dnsdist.org/security-advisorie

    #dnsdist

  10. PowerDNS Security Advisory 2025-02 for DNSdist: Denial of service via crafted DoH exchange

    Impact: Denial of service
    Exploit: This problem can be triggered by an attacker crafting a DoH exchange

    CVE-2025-30194

    dnsdist.org/security-advisorie

    #dnsdist

  11. The goal was to shrink #dnsdist to fit in a CPE router, using OpenWRT on small hardware.

    #FOSDEM

  12. The goal was to shrink #dnsdist to fit in a CPE router, using OpenWRT on small hardware.

    #FOSDEM

  13. The goal was to shrink #dnsdist to fit in a CPE router, using OpenWRT on small hardware.

    #FOSDEM

  14. The goal was to shrink #dnsdist to fit in a CPE router, using OpenWRT on small hardware.

    #FOSDEM

  15. The goal was to shrink #dnsdist to fit in a CPE router, using OpenWRT on small hardware.

    #FOSDEM

  16. And to end the day at the #DNS devroom, "Honey, I shrunk DNSdist" by @habbie (replacing @rgacogne, the maintainer who is sick without even the fault of the FOSDEM)

    Disclaimer: #dnsdist is used by the public DNS resolver {doh,dot,doq}.bortzmeyer.fr

    #FOSDEM

  17. And to end the day at the #DNS devroom, "Honey, I shrunk DNSdist" by @habbie (replacing @rgacogne, the maintainer who is sick without even the fault of the FOSDEM)

    Disclaimer: #dnsdist is used by the public DNS resolver {doh,dot,doq}.bortzmeyer.fr

    #FOSDEM

  18. And to end the day at the #DNS devroom, "Honey, I shrunk DNSdist" by @habbie (replacing @rgacogne, the maintainer who is sick without even the fault of the FOSDEM)

    Disclaimer: #dnsdist is used by the public DNS resolver {doh,dot,doq}.bortzmeyer.fr

    #FOSDEM

  19. And to end the day at the #DNS devroom, "Honey, I shrunk DNSdist" by @habbie (replacing @rgacogne, the maintainer who is sick without even the fault of the FOSDEM)

    Disclaimer: #dnsdist is used by the public DNS resolver {doh,dot,doq}.bortzmeyer.fr

    #FOSDEM

  20. And to end the day at the #DNS devroom, "Honey, I shrunk DNSdist" by @habbie (replacing @rgacogne, the maintainer who is sick without even the fault of the FOSDEM)

    Disclaimer: #dnsdist is used by the public DNS resolver {doh,dot,doq}.bortzmeyer.fr

    #FOSDEM

  21. @SIDNlabs Thanks for contributing to the #DNS resolution diversity.
    The original part is that you use many proxies (@PowerDNS #dnsdist ) and only a few backends (@nlnetlabs #unbound ). I know by experience that both work well together (esp. with PROXYv2).
    What were the advantages (practical, technical, financial) that lead to this setup?
    Also, do you share cache between nodes either at the proxy or backend (cachedb)?

  22. @SIDNlabs Thanks for contributing to the #DNS resolution diversity.
    The original part is that you use many proxies (@PowerDNS #dnsdist ) and only a few backends (@nlnetlabs #unbound ). I know by experience that both work well together (esp. with PROXYv2).
    What were the advantages (practical, technical, financial) that lead to this setup?
    Also, do you share cache between nodes either at the proxy or backend (cachedb)?

  23. @SIDNlabs Thanks for contributing to the #DNS resolution diversity.
    The original part is that you use many proxies (@PowerDNS #dnsdist ) and only a few backends (@nlnetlabs #unbound ). I know by experience that both work well together (esp. with PROXYv2).
    What were the advantages (practical, technical, financial) that lead to this setup?
    Also, do you share cache between nodes either at the proxy or backend (cachedb)?

  24. @SIDNlabs Thanks for contributing to the #DNS resolution diversity.
    The original part is that you use many proxies (@PowerDNS #dnsdist ) and only a few backends (@nlnetlabs #unbound ). I know by experience that both work well together (esp. with PROXYv2).
    What were the advantages (practical, technical, financial) that lead to this setup?
    Also, do you share cache between nodes either at the proxy or backend (cachedb)?

  25. @SIDNlabs Thanks for contributing to the #DNS resolution diversity.
    The original part is that you use many proxies (@PowerDNS #dnsdist ) and only a few backends (@nlnetlabs #unbound ). I know by experience that both work well together (esp. with PROXYv2).
    What were the advantages (practical, technical, financial) that lead to this setup?
    Also, do you share cache between nodes either at the proxy or backend (cachedb)?

  26. The Custom API widget from #hompage is super dope! I can now see some stats from #dnsdist and my other #dns server that it doesn't have integrations for.

    #homelab #selfhosted #selfhosting

  27. The Custom API widget from #hompage is super dope! I can now see some stats from #dnsdist and my other #dns server that it doesn't have integrations for.

    #homelab #selfhosted #selfhosting

  28. The Custom API widget from is super dope! I can now see some stats from and my other server that it doesn't have integrations for.

  29. The Custom API widget from #hompage is super dope! I can now see some stats from #dnsdist and my other #dns server that it doesn't have integrations for.

    #homelab #selfhosted #selfhosting

  30. The Custom API widget from #hompage is super dope! I can now see some stats from #dnsdist and my other #dns server that it doesn't have integrations for.

    #homelab #selfhosted #selfhosting

  31. Ugh, Turns out letting your #dns server mirror the root zone is a good way to amplify ddos attacks...

    Added a rule to #dnsdist that drops incoming packets with RD set while I come up with something more elegant.

    The victim seems to be a small Brazilian ISP Jupiter. :(

  32. Ugh, Turns out letting your #dns server mirror the root zone is a good way to amplify ddos attacks...

    Added a rule to #dnsdist that drops incoming packets with RD set while I come up with something more elegant.

    The victim seems to be a small Brazilian ISP Jupiter. :(

  33. Ugh, Turns out letting your #dns server mirror the root zone is a good way to amplify ddos attacks...

    Added a rule to #dnsdist that drops incoming packets with RD set while I come up with something more elegant.

    The victim seems to be a small Brazilian ISP Jupiter. :(

  34. As I always say reboot the shit out of your #homelab! I thought I had HA on my #dnsdist dns loadbalancer. Updated my #incus deployment and some kernel and zfs stuff and.... boom, I don't have fucking internet!

    HA huh!! 🤣💥🫤

    #selfhosted

  35. As I always say reboot the shit out of your #homelab! I thought I had HA on my #dnsdist dns loadbalancer. Updated my #incus deployment and some kernel and zfs stuff and.... boom, I don't have fucking internet!

    HA huh!! 🤣💥🫤

    #selfhosted

  36. As I always say reboot the shit out of your ! I thought I had HA on my dns loadbalancer. Updated my deployment and some kernel and zfs stuff and.... boom, I don't have fucking internet!

    HA huh!! 🤣💥🫤

  37. As I always say reboot the shit out of your #homelab! I thought I had HA on my #dnsdist dns loadbalancer. Updated my #incus deployment and some kernel and zfs stuff and.... boom, I don't have fucking internet!

    HA huh!! 🤣💥🫤

    #selfhosted

  38. As I always say reboot the shit out of your #homelab! I thought I had HA on my #dnsdist dns loadbalancer. Updated my #incus deployment and some kernel and zfs stuff and.... boom, I don't have fucking internet!

    HA huh!! 🤣💥🫤

    #selfhosted

  39. Ah bah finalement pas de #DoH3 et #DoQ pour @DNS_Shaftinc 😢

    Je pensais que quiche, la bibliothèque de Cloudflare pour faire du Quic, était dans le tarball de #dnsdist, mais après vérif, il y a plutôt un script qui télécharge quiche et compile le truc.

    Meh :/

  40. Ah bah finalement pas de #DoH3 et #DoQ pour @DNS_Shaftinc 😢

    Je pensais que quiche, la bibliothèque de Cloudflare pour faire du Quic, était dans le tarball de #dnsdist, mais après vérif, il y a plutôt un script qui télécharge quiche et compile le truc.

    Meh :/

  41. Ah bah finalement pas de #DoH3 et #DoQ pour @DNS_Shaftinc 😢

    Je pensais que quiche, la bibliothèque de Cloudflare pour faire du Quic, était dans le tarball de #dnsdist, mais après vérif, il y a plutôt un script qui télécharge quiche et compile le truc.

    Meh :/

  42. Ah bah finalement pas de #DoH3 et #DoQ pour @DNS_Shaftinc 😢

    Je pensais que quiche, la bibliothèque de Cloudflare pour faire du Quic, était dans le tarball de #dnsdist, mais après vérif, il y a plutôt un script qui télécharge quiche et compile le truc.

    Meh :/

  43. Ah bah finalement pas de #DoH3 et #DoQ pour @DNS_Shaftinc 😢

    Je pensais que quiche, la bibliothèque de Cloudflare pour faire du Quic, était dans le tarball de #dnsdist, mais après vérif, il y a plutôt un script qui télécharge quiche et compile le truc.

    Meh :/

  44. I keep getting brought back to #nextdns. So I decided to use #dnsdist to balance between internal domains and pushing everything else out to nextdns to see if that works as a thing in the #homelab !

  45. I keep getting brought back to #nextdns. So I decided to use #dnsdist to balance between internal domains and pushing everything else out to nextdns to see if that works as a thing in the #homelab !

  46. I keep getting brought back to . So I decided to use to balance between internal domains and pushing everything else out to nextdns to see if that works as a thing in the !

  47. I keep getting brought back to #nextdns. So I decided to use #dnsdist to balance between internal domains and pushing everything else out to nextdns to see if that works as a thing in the #homelab !