#dnsdist — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #dnsdist, aggregated by home.social.
-
There's an interesting conversation going on on the #NANOG #mailinglist. It's about running a #DNS resolver for a medium-sized service provider network:
Recommended DNS server for a medium 20-30k users isp
I particularly love that the people from @quad9dns chipped in, and revealed how they split their front- and backend with #dnsdist. Splitting the front- and backend of internet-facing services is something that I already learned in University as a best-practice.
-
There's an interesting conversation going on on the #NANOG #mailinglist. It's about running a #DNS resolver for a medium-sized service provider network:
Recommended DNS server for a medium 20-30k users isp
I particularly love that the people from @quad9dns chipped in, and revealed how they split their front- and backend with #dnsdist. Splitting the front- and backend of internet-facing services is something that I already learned in University as a best-practice.
-
Ah bah finalement pas de #DoH3 et #DoQ pour @DNS_Shaftinc 😢
Je pensais que quiche, la bibliothèque de Cloudflare pour faire du Quic, était dans le tarball de #dnsdist, mais après vérif, il y a plutôt un script qui télécharge quiche et compile le truc.
Meh :/
-
Ah bah finalement pas de #DoH3 et #DoQ pour @DNS_Shaftinc 😢
Je pensais que quiche, la bibliothèque de Cloudflare pour faire du Quic, était dans le tarball de #dnsdist, mais après vérif, il y a plutôt un script qui télécharge quiche et compile le truc.
Meh :/
-
@iampytest1 I 100% run my own, would be to weird if I didn't, in that way, it is me, who is in control and I can benefit from RPZ zones via (A|I)XFR and be running my own local #blacklist zone (RPZ) for what I might allow or not in contradictions to the general served zones.
What I have on my Workstation (Server when turned on, but that not much these days do to the power prices) and my laptop
1. PowerDNS #Auth server on each for keeping local copies of the RPZ zones
2. PowerDNS #Recursor to handle the #blacklisting via #RPZ
3. PowerDNS #DnsDist in front of the recursor, the benefit's here are many, but mostly because it allow me to use Regex to blacklist commonly subdomains like matomo.$domain.$TIL, that saves me millions of records in the RPZ zones. Also it is setup to know if the laptop is home or alone in the city.
In short, when the laptop is home, it is using the workstations DNS, any other time, it uses it's own resources.
By doing this you also ensures more privacy. The real ➕, how about a response time at 0 msec for every DNS query? except from the first query... and on a modern webpage this can easily be 200 DNS queries.
PS: My RPZ zones is about to be public available again https://0xacab.org/my-privacy-dns/moderators-room/general/-/issues/629
UPDATE:
Fixed some typos and grama
