Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Setting up a Pi Hole made my home network faster

brianchristner.io

Post reply on HN
Print view View original

11–20 of 249 posts

Re: Setting up a Pi Hole made my home network faster

#11

Post by guerrilla »

chollida1 wrote: post #9
lapser wrote: post #4

Earlier quoted context omitted.

This is already happening. The likes of Google Home et al already hardcode their own servers. I noticed that no DNS requests were being made through my Pi Hole, so when I looked, it turned out their DNS servers were hardcoded. However, I'm more worried about when they start hardcoding DoH servers.

What is a DoH server?

DNS over HTTP

Re: Setting up a Pi Hole made my home network faster

#12

Post by phillipseamore »

0daystock wrote: post #2

Won't be long now until IoT and other crap-ware devices catch on to this trend and start hard-coding DNS servers in code, or worse, using DNS encryption to avoid this sort of routine blocking by end-users. I wonder how people are thinking about solving this problem.

I already translate all port 53 traffic to my local resolver and block known DoH addresses.

Re: Setting up a Pi Hole made my home network faster

#13

Post by teeray »

0daystock wrote: post #2

Won't be long now until IoT and other crap-ware devices catch on to this trend and start hard-coding DNS servers in code, or worse, using DNS encryption to avoid this sort of routine blocking by end-users. I wonder how people are thinking about solving this problem.

DNAT ftw

Re: Setting up a Pi Hole made my home network faster

#14

Post by gruez »

phillipseamore wrote: post #12
0daystock wrote: post #2

Won't be long now until IoT and other crap-ware devices catch on to this trend and start hard-coding DNS servers in code, or worse, using DNS encryption to avoid this sort of routine blocking by end-users. I wonder how people are thinking about solving this problem.

I already translate all port 53 traffic to my local resolver and block known DoH addresses.

If they're really evil, they'd proxy all traffic through a single host (eg. d2v3i0u0qtn52v.cloudfront.net), so you have to choose between no IOT features, or getting subjected to all the ads/telemetry.

Re: Setting up a Pi Hole made my home network faster

#15

Post by kayson »

While the interface may not be as pretty, you can do the same thing if you're running pfsense using the pfblocker-ng package: https://docs.netgate.com/pfsense/en/latest/packages/pfblocke... You can also so geo-based IP blocking

Combined with pfsense's recursive resolved (unbound), it makes for a pretty great home dns setup.

Re: Setting up a Pi Hole made my home network faster

#16

Post by thinkmassive »

chollida1 wrote: post #9
lapser wrote: post #4

Earlier quoted context omitted.

This is already happening. The likes of Google Home et al already hardcode their own servers. I noticed that no DNS requests were being made through my Pi Hole, so when I looked, it turned out their DNS servers were hardcoded. However, I'm more worried about when they start hardcoding DoH servers.

What is a DoH server?

DNS over HTTPS

Re: Setting up a Pi Hole made my home network faster

#17

Post by [deleted] »

chollida1 wrote: post #9
lapser wrote: post #4

Earlier quoted context omitted.

This is already happening. The likes of Google Home et al already hardcode their own servers. I noticed that no DNS requests were being made through my Pi Hole, so when I looked, it turned out their DNS servers were hardcoded. However, I'm more worried about when they start hardcoding DoH servers.

What is a DoH server?

[deleted]
Post reply on HN