Stuff a #Pihole in your #router because your #browser is about to betray you
You could be forgiven for feeling #webbrowser suppliers are actively working to make us trust them less.
#Mozilla bought an #ad company; this month, removed its promise not to sell your info.
https://www.theregister.com/2025/03/08/pi_hole_6_flyby/
Mozilla sells #ads, #Google limits blocking-time for stricter measures
Pi-hole takes over as your network name server, and silently redirects all web requests to known ad-server addresses to a #DNS sinkhole.

DNS is a distributed naming system that converts human-readable domain names into IP addresses. It works through a hierarchy of name servers, each handling part of the domain space, guiding queries step-by-step until the correct IP is found

Here is an illustration of how DNS works #technology #dns #sysadmin

Find high-res pdf books with all my networking related infographics at https://study-notes.org

#DNS
deloitte.com now way over oracle.com for "largest TXT RRset ever".

Now that I have my local DNS trapping and blocklist working I can probably shift my resolver's DoT upstream off of Quad9.

Anything people recommend?

Tonight's homelab puzzle: can I have kubernetes run Technitium for me without making circular dependencies? For example, when k8s starts up, does it have to reach out to the NFS storage, or does that only happen when a container starts using that?

I have Technitium running on 2x Raspberry Pi boards, but I don't need to keep those running if I can just run the container on k8s, which is always on anyways.

I do have an externally facing extcoredns container for *.k8s.home but that's only for kubernetes workloads.

Well had a couple blows to my self image as a good sysadmin this week . I lost nearly two days at $DayJob to chasing down a system config error, that turned out to be #DNS and was fixed with a one-line hosts file config entry. (there were extenuating circumstances for why it took so long to find, but still. Two days to find a DNS error, when we all know It's. Always. DNS.)

Then in my #homelab, my current project is to make EVERYTHING use SSH Certificates, and I lost several hours trying to debug why it wasn't working on my Home Assistant box, before finally realising that I'd truncated a character from the CA's pubkey when copying it into Home Assistant.

I know what I'm doing, honest.

How to Deploy #PowerDNS #Cluster on #Ubuntu #VPS Servers This article provides a detailed guide for how to deploy PowerDNS cluster on Ubuntu VPS servers.
What is PowerDNS?
PowerDNS is an open-source #DNS (Domain Name System) server software that provides both authoritative and recursive DNS services. It’s widely used by ISPs, hosting providers, and enterprises due to its performance, scalability, and flexibility.
Key Features of PowerDNS: ...
Continued https://blog.radwebhosting.com/how-to-deploy-powerdns-cluster-on-ubuntu-vps-servers/?utm_source=mastodon&utm_medium=social&utm_campaign=ReviveOldPost #installguide

Hopefully I can work it out with the support, since they promised to answer in 24 hours, but who knows how it goes with the weekend.

If anyone would like to help me, I'd appreciate the contact btw. It's a matter of connecting blog with #DNS records at #registrar. I have what I need from Google, but I'm confused by Infomaniak settings. #domain

“Evaluating The Effects Of Anycast On DNS Root Nameservers”: https://www.ripe.net/publications/docs/ripe-393/

some interesting statistics for (among other things) reliability of stateful (TCP) connections on anycast nodes, specifically in the context of DNS.

it is from 2006, so i wonder how numbers have changed in the mean time.

I've been running Timothy Miller's cloudflare-ddns service as a k8s container for years now to keep my public IP up to date. Unfortunately it seems he's stopped maintaining the project and I've started to run into bugs.

Thankfully there's a spiritual successor that is written in Go (instead of Python so it uses less memory) and works great! Props to Quentin McGaw for building this for the community.

https://github.com/qdm12/ddns-updater

Version 1.23.0-0 of our #unbound docker image was released by madnuttah-bot yesterday!

#OpenSSL has been updated to 3.5.0 after testing in the #canary image, too.

https://github.com/madnuttah/unbound-docker

https://hub.docker.com/r/madnuttah/unbound

@nlnetlabs

#foss #opensource #selfhosting # homelab #dns #dnssec

Thinking about #DNS recently...

How do you pronounce "AAAA", anyway?

Bloquea anuncios y rastreadores con este DNS local

#Technitium es un resolutor de #dns que lo puedes instalar en tu red local y que te permitirá crear tu propio dominio y bloquear anuncios y trastreadores

En el episodio 643 titulado un resolutor DNS y Traefik con certificados, te expliqué mis razones para levantar mi propio resolutor de DNS local.

https://www.youtube.com/watch?v=OV1VQ-ySSCM

Things I learnt about DNS:

1. You can't "redirect" an entire domain with CNAME, only subdomains, which is why my website has been broken.

2. You can't specify an AAAA record and use a wildcard for the A record. You have to explicitly put both.

If the IP changes, you have to change it everywhere. I wonder if there is a modern DNS server which lets you avoid this sort of data duplication.

NSD 4.12.0 is now available. Our authoritative #DNS server now offers Prometheus metrics, along with several other enhancements. https://github.com/NLnetLabs/nsd/releases/tag/NSD_4_12_0_REL

Unbound 1.23.0 is now available. Our #DNS resolver now features ‘fast reload’, allowing it to read the new config in a thread, and when done only briefly pauses the server to update the settings. This version also contains redis replica support, DNS Error Reporting, and several bug fixes. https://nlnetlabs.nl/news/2025/Apr/24/unbound-1.23.0-released/

. BENTLEY registered 2015-JUL-09, killed yesterday.

https://mastodon.social/@diffroot@mastodns.net/114388791216201848

Bloquea anuncios y rastreadores con DNS n
#Technitium es un resolutor de #dns que lo puedes instalar en tu red local y que te permitirá crear tu propio dominio y bloquear anuncios y trastreadores

Escucha: https://atareao.es/podcast/bloquea-anuncios-y-rastreadores-con-dns/
Feed: https://atareao.es/mp3-feed/