Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Which DNS servers are you pointing to?

which.nameserve.rs

Post reply on HN
Print view View original

41–50 of 97 posts

Re: Show HN: Which DNS servers are you pointing to?

#41

Post by minerjoe »

znpy wrote: post #36

I run my own DNS servers at home. I have a small virtualization cluster and run a small DNS vm on each physical host. My resolvers perform queries against the root servers directly and cache results. It's refreshing to skip all the DNS fuckery that's going on nowadays.

I do the same, but I read that that is also sending your IP all around the internet, which can have repercussions? The alternative is to not use a recursive resolver, but just punt to one of the "safer" ones such as 1.1.1.1?

edit: downvoting honest questions?

Re: Show HN: Which DNS servers are you pointing to?

#42

Post by Denvercoder9 »

dheera wrote: post #19
compsciphd wrote: post #14

I'm using 8.8.8.8 and its coming up as cloudflarenet not whatever google should presumably be?

Gosh, I feel old, how do I set DNS servers in Linux these days? I used to just edit /etc/resolv.conf and add 8.8.8.8 to it but now recent distros have "Do not edit." in resolv.conf and don't tell you what to actually edit. Why do they have to do this to us ... things used to be simple.

You can still edit /etc/resolv.conf. If it has a "Do not edit" comment in it, it's probably a symlink to some file that's dynamically managed (most likely to automatically use or fallback to the DNS server advertised on the network, as needed for e.g. captive portals). Just replace the symlink with a text file with your prefered DNS server in there.

Re: Show HN: Which DNS servers are you pointing to?

#43

Post by Symbiote »

jwilk wrote: post #34
arminiusreturns wrote: post #21

This is really cool, especially because I can just 'wget -qO- $RANDOM.which.nameserve.rs/api.json?callback=myfunction' which means I can use this in scripts. (For example an added field to scripts that grab from ifconfig.co)

Note that $RANDOM is just 15 bits of entropy. You should use something more random.

$RANDOM$RANDOM$RANDOM$RANDOM$RANDOM should be fine :-)

Re: Show HN: Which DNS servers are you pointing to?

#44

Post by daneel_w »

WarOnPrivacy wrote: post #9

I have a local DNS server that forwards over TLS (DoT) to Cloudflare & Quad9, round-robin. Page alternately returns WOODYNET @ rrdns.pch.net and CLOUDFLARENET. I like the pch.net info - it's something about Quad9 I didn't know.

This was a surprise to me as well. For anyone else reading this it means that Quad9, not your system, is relaying DNS traffic to WoodyNet.

Re: Show HN: Which DNS servers are you pointing to?

#45

Post by jlgaddis »

minerjoe wrote: post #41
znpy wrote: post #36

I run my own DNS servers at home. I have a small virtualization cluster and run a small DNS vm on each physical host. My resolvers perform queries against the root servers directly and cache results. It's refreshing to skip all the DNS fuckery that's going on nowadays.

I do the same, but I read that that is also sending your IP all around the internet, which can have repercussions? The alternative is to not use a recursive resolver, but just punt to one of the "safer" ones such as 1.1.1.1? edit: downvoting honest questions?

What, exactly, does "sending your IP all around the internet" even mean?

Re: Show HN: Which DNS servers are you pointing to?

#46

Post by imglorp »

znpy wrote: post #36

I run my own DNS servers at home. I have a small virtualization cluster and run a small DNS vm on each physical host. My resolvers perform queries against the root servers directly and cache results. It's refreshing to skip all the DNS fuckery that's going on nowadays.

Except for certain applications that want to do their own DNS, eg DOH...

Re: Show HN: Which DNS servers are you pointing to?

#47

Post by surround »

afkqs wrote: post #23

What are the best practices/choices today when choosing your DNS servers when it comes to privacy?

I recommend running your own DNS resolver, so that you don’t have to trust any 3rd party server with your DNS traffic.

I run Unbound (a DNS resolver) alongside Pi-hole on a dedicated raspberry pi for my home network.

Re: Show HN: Which DNS servers are you pointing to?

#48

Post by vetinari »

dheera wrote: post #19
compsciphd wrote: post #14

I'm using 8.8.8.8 and its coming up as cloudflarenet not whatever google should presumably be?

Gosh, I feel old, how do I set DNS servers in Linux these days? I used to just edit /etc/resolv.conf and add 8.8.8.8 to it but now recent distros have "Do not edit." in resolv.conf and don't tell you what to actually edit. Why do they have to do this to us ... things used to be simple.

Because it is not adequate to use cases today.

Today, you can set up DNS per interface and designate, which DNS accessible via which interface can resolve which zones. So your intranet.company.com can go through specific VPN connection and the rest via your default route, for example.

You can't do that with simple /etc/resolv.conf.

Re: Show HN: Which DNS servers are you pointing to?

#50

Post by minerjoe »

jlgaddis wrote: post #45
minerjoe wrote: post #41

Earlier quoted context omitted.

I do the same, but I read that that is also sending your IP all around the internet, which can have repercussions? The alternative is to not use a recursive resolver, but just punt to one of the "safer" ones such as 1.1.1.1? edit: downvoting honest questions?

What, exactly, does "sending your IP all around the internet" even mean?

Meaning, if you don't want people to know you are searching for snm.donkeyporn.com than going out to the nameserver that donkeyporn is using is not exactly keeping the information private.
Post reply on HN