Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Paul Vixie thinks more people should be running their own DNS servers

businessinsider.com

Post reply on HN
Print view View original

151–155 of 155 posts

Re: Paul Vixie thinks more people should be running their own DNS servers

#151

Post by bo1024 »

johnny22 wrote: post #148
bo1024 wrote: post #139

Earlier quoted context omitted.

That would be really cool! I feel like one of the surprisingly-big barriers is just the difficulty of geting a static IP address assigned to your home. If you could do that, then (I think) they could run everything from a Raspberry Pi: their own website, hosting their own email, etc etc. (It's actually not much harder technically to set this all up on a VPS, but then the kid has to put a monthly fee on a card -- prob…

If you don't have distributed backups handled, then you're just putting most users in a worse situation. Now they can lose important parts of their digital life in one disk crash.

Great point, though I'd point out backups don't have to be distributed or cloud-based.

I was thinking it would be interesting to have a protocol (probably built on bittorrent) that encrypts your data and backs it up onto other's servers in return for storing some of their encrypted backups on yours.

Re: Paul Vixie thinks more people should be running their own DNS servers

#152

Post by bo1024 »

rannug wrote: post #142
bo1024 wrote: post #139

Earlier quoted context omitted.

That would be really cool! I feel like one of the surprisingly-big barriers is just the difficulty of geting a static IP address assigned to your home. If you could do that, then (I think) they could run everything from a Raspberry Pi: their own website, hosting their own email, etc etc. (It's actually not much harder technically to set this all up on a VPS, but then the kid has to put a monthly fee on a card -- prob…

I don't have a static IP at home. It changes every few weeks. I have a hack where a cron job uploads my home IP to a cloud server so I can know what it is when the IP changes. Maybe a Distributed Hash Table DNS interface is in order? I think it could work if you cache your peers, and reach out to let them know your current state. Even during the Venezuela blackouts, not all IPs went dark.

That would be really cool! The question I see is how to handle resolutions where two people both claim to be example.com. Maybe you could use some cryptography to make sure it's always whoever first claims a domain.

Re: Paul Vixie thinks more people should be running their own DNS servers

#154

Post by jlgaddis »

rannug wrote: post #142
bo1024 wrote: post #139

Earlier quoted context omitted.

That would be really cool! I feel like one of the surprisingly-big barriers is just the difficulty of geting a static IP address assigned to your home. If you could do that, then (I think) they could run everything from a Raspberry Pi: their own website, hosting their own email, etc etc. (It's actually not much harder technically to set this all up on a VPS, but then the kid has to put a monthly fee on a card -- prob…

I don't have a static IP at home. It changes every few weeks. I have a hack where a cron job uploads my home IP to a cloud server so I can know what it is when the IP changes. Maybe a Distributed Hash Table DNS interface is in order? I think it could work if you cache your peers, and reach out to let them know your current state. Even during the Venezuela blackouts, not all IPs went dark.

> I have a hack where a cron job uploads my home IP to a cloud server so I can know what it is when the IP changes.

I don't have a clue what a "Distributed Hash Table DNS interface" is, but I'll note that a solution [0] to this problem has been around for over two decades.

[0]: https://tools.ietf.org/html/rfc2136

Re: Paul Vixie thinks more people should be running their own DNS servers

#155

Post by bluejekyll »

tomjakubowski wrote: post #62
raggi wrote: post #49

Quick, name a non-niche dns server that is easy to configure and maintain that hasn't had a major vulnerability in the last six months.

dnsmasq's last CVE was in October 2017 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=dnsmasq despite that "safety record", I am probably going to switch to https://github.com/bluejekyll/trust-dns

Thanks for the shoutout to trust-dns.

I would take the fact that there have been no CVEs on the server with a grain of salt, as I don’t think it’s seeing a lot of use. The embedded resolver is getting a lot...

Feel free to open any issues for features you’d like to see.

Post reply on HN