DNS servers that offer privacy and filtering • Hacker News Board

Re: DNS servers that offer privacy and filtering

#91

Post by acranox » Thu, Feb 07, 2019, 6:49 PM UTC

icedchai wrote: post #88

acranox wrote: post #86

Earlier quoted context omitted.

I know all that. IMHO in that configuration the root servers are your upstream servers. That’s what I was trying to convey. And serving expired records does generally work, but is not suggested practice.

Technically, you don't have upstream DNS servers in that configuration. The root servers are not recursive resolvers like an upstream. But this isn't a problem... DNS caching works very well. I've been running my own nameservers for over two decades.

potato potato

Re: DNS servers that offer privacy and filtering

#92

Post by yaleman » Fri, Feb 08, 2019, 1:13 PM UTC

dbg31415 wrote: post #3

krylon wrote: post #2

I know this is not for everyone, but I strongly prefer to run my own recursive resolver at home. Performance is great, plus I get regular DNS for the machines on my home network. Also, it was a fun little project. :)

I love my Pi Hole! Great for blocking ads on everything. * Pi-hole®: A black hole for Internet advertisements – curl -sSL https://install.pi-hole.net | bash || https://pi-hole.net/

The docker image is pretty trivial to set up too, so it's even easier :)

Re: DNS servers that offer privacy and filtering

#93

Post by yaleman » Sun, Feb 10, 2019, 1:20 AM UTC

dx034 wrote: post #29

prepend wrote: post #21

Earlier quoted context omitted.

Only non-cached requests go to a third party. And I don’t think there’s an easy way to prevent this unless you get a hold of all the zone files and copy in bulk. What’s nice about pi-hole is that you get one request to sites like google.com until the record expires in the cache. If you use 8.8.8.8 as your dns you might end up requesting the same domain name a bunch of times depending on how your client caches and the…

In a network of just a few computers, are there really that many cached requests? Local DNS caches will already cache short term and TTL of most domains is probably too short to get much caching beyond that.

I've got a pihole running at one of my family members' houses and am seeing ~20% caching.. at my place I'm seeing about 35%.

Re: DNS servers that offer privacy and filtering

#94

Post by gmac » Fri, Feb 15, 2019, 10:52 AM UTC

theandrewbailey wrote: post #32

gmac wrote: post #26

Another option here is DNS servers that block ads. I can't vouch for the company itself, but I have found AdGuard DNS reliable and effective, if not memorable: 176.103.130.130, 176.103.130.131 https://adguard.com/en/adguard-dns/overview.html

Run your own: https://pi-hole.net/

Genuine question: what benefits does this have over using a service provided for free by someone else? Privacy?

Re: DNS servers that offer privacy and filtering

#95

Post by theandrewbailey » Fri, Feb 15, 2019, 6:56 PM UTC

gmac wrote: post #94

theandrewbailey wrote: post #32

Earlier quoted context omitted.

Run your own: https://pi-hole.net/

Genuine question: what benefits does this have over using a service provided for free by someone else? Privacy?

Yes, privacy, plus it's a DNS cache that's running on your local network, so your DNS resolution is faster. Its also customizable (you can add/blacklist/whitelist specific domains from the control panel).