Then he should have made it a lot easier to do so. The whole problem with DNS is the finicky configuration, it is about as tricky to set up properly as a mail server in spite of the outward simplicity. Mail, DNS and also WWW servers are the ideal components of federated systems but the degree to which you have to be a networking guru, security guy and systems administrator to keep all three up and running without iss…
Paul Vixie thinks more people should be running their own DNS servers
91–100 of 155 posts
Re: Paul Vixie thinks more people should be running their own DNS servers
#92Re: Paul Vixie thinks more people should be running their own DNS servers
#93Edit: To answer my own question. Yes it seems
Re: Paul Vixie thinks more people should be running their own DNS servers
#94I live in NZ, and run my own DNS server. It's just unbound on pfsense, super simple. The good thing is when my ISP started blocking websites after the Christchurch attacks, I didn't even notice. (They were simple DNS blocks.)
Re: Paul Vixie thinks more people should be running their own DNS servers
#95Re: Paul Vixie thinks more people should be running their own DNS servers
#96I live in NZ, and run my own DNS server. It's just unbound on pfsense, super simple. The good thing is when my ISP started blocking websites after the Christchurch attacks, I didn't even notice. (They were simple DNS blocks.)
Whats the difference between personal dns server, vs using google, and opendns? Arnt u resolving to that?
Re: Paul Vixie thinks more people should be running their own DNS servers
#97More people should be running their own mail servers, their own web servers, their own IRC servers, etc. But I don't think we are ever going back to that direction. The arguments and benefits for running one locally are not enough the trouble as well. Performance? Due to DNS caching at the resolver level, it is probably faster to use Google's 8.8.8.8 or CloudFlare's 1.1.1.1, than anything local (where all dns request…
For hits that are in the cache (the usual case) it's obviously faster than going out to the 'net,. The black-holing combined with ad-blockers mean browsing is a lot faster and considerably more peaceful.
In terms of maintenance, it's no real effort other than updating every few years (being behind NAT the security risks aren't huge) and it means the entire household sees the benefit (plus access to webservers/wiki's etc on the .local domain).
Obviously the downside is it needs to be on something that runs 24x7 and a modicum of IT skills are required to set it up. One other catch is that your ISP might block you for not using their DNS; BT (UK ISP) did this, but it is possible to turn off this 'security feature' via a rather obfuscated web page (may have changed since I last did it).
Re: Paul Vixie thinks more people should be running their own DNS servers
#98Earlier quoted context omitted.
So you're cool with Google, a company whose primary business is tracking people, seeing all your DNS, but not your ISP, whose primary business is delivering network access, notwithstanding their bumbling efforts to branch out. Now, Google does claim they don't track DNS requests. But consider why that is? Once upon a time they didn't scan Gmail content either, but that was before GMail dominated the webmail space. Wh…
Disclaimer: I work for Google, but not on DNS or Gmail. > Now, Google does claim they don't track DNS requests. But consider why that is? Once upon a time they didn't scan Gmail content either, but that was before GMail dominated the webmail space. You seem to assume that it's a singular organization with a unified agenda, but this really isn't the case. It's the same thing about when folks assume Google looks at you…
1. I do not use google for DNS 2. I do not use chrome. I use firefox with ad blocking 3. I only browse in private browsing mode 99% of the time. 4. I have a script that updates a block list of 10s of 1000s IPs for ad and tracking blocking, etc into my host file.
So I order a box of cigars. Confirmation is to a gmail account. Next day I get stop smoking ads in YouTube. Never seen them before then.
So...
Re: Paul Vixie thinks more people should be running their own DNS servers
#99More people should be running their own mail servers, their own web servers, their own IRC servers, etc. But I don't think we are ever going back to that direction. The arguments and benefits for running one locally are not enough the trouble as well. Performance? Due to DNS caching at the resolver level, it is probably faster to use Google's 8.8.8.8 or CloudFlare's 1.1.1.1, than anything local (where all dns request…
The only chance we have for people to run their own services is if we make it dead easy to do so and the advantages are clearly communicated. Unfortunately, that hasn’t been open source’s forte historically.
Re: Paul Vixie thinks more people should be running their own DNS servers
#100More people should be running their own mail servers, their own web servers, their own IRC servers, etc. But I don't think we are ever going back to that direction. The arguments and benefits for running one locally are not enough the trouble as well. Performance? Due to DNS caching at the resolver level, it is probably faster to use Google's 8.8.8.8 or CloudFlare's 1.1.1.1, than anything local (where all dns request…
Single data point, but I've been running a home DNS server (bind) for many years; it's set to be authoritative for the .local domain and caching for everything else (except for major tracking and advertising sites, which it blackholes). For hits that are in the cache (the usual case) it's obviously faster than going out to the 'net,. The black-holing combined with ad-blockers mean browsing is a lot faster and conside…