Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Setting up a Pi Hole made my home network faster

brianchristner.io

Post reply on HN
Print view View original

151–160 of 249 posts

Re: Setting up a Pi Hole made my home network faster

#151

Post by bmurphy1976 »

asdkhadsj wrote: post #68
vorpalhex wrote: post #66

Earlier quoted context omitted.

I run two piholes, rackmounted and battery backed (just plugged into a ups). DNS performance is very fast, better than ISP dns usually. General web usage is much, much more pleasant. No issues with gaming.

Any recommendation on hardware piholes? I have a UDM Pro but honestly i don't know how much i trust modifying it at all - i've found Ubiquiti software to be iffy... so i'm a bit hesitant to modify anything.

I run 2 raspberry pi zeros connected (and powered) to my router as usb network devices both running pihole. I've been running this for years and have had zero issues.

Re: Setting up a Pi Hole made my home network faster

#152

Post by pigbearpig »

jrmg wrote: post #18

Like any other project I run everything in a Docker container, and this project should be no different. What is the advantage of this in this case?

The real advantage is another layer of complexity, so you can write a blog post about running PiHole on a home network, which done by a billion other people (conservative estimate).

Re: Setting up a Pi Hole made my home network faster

#153

Post by heavyset_go »

1vuio0pswjnm7 wrote: post #117
lapser wrote: post #93

Earlier quoted context omitted.

Yes, really the only way would be to set up a MITM proxy on your network and enforce all traffic goes through that. Also means accepting a CA.

Been using this solution myself for a number of years. Works remarkably well. I do not even use DNS recursion or any remote DNS requests because I can load bulk DNS data into the proxy's memory. There is only ever one nonrecursive request to a localhost authoritative DNS server and the answer is always the same: the address of the proxy. Ironically perhaps, DoH outside the browser can be used to gather the bulk DNS d…

Chromecast products, in particular, will not work with self-signed certificates, and you can't adjust their trust stores.

Re: Setting up a Pi Hole made my home network faster

#155

Post by zamadatix »

I love ad blockers such as this and uBlock Origin, they truly will make your experience cleaner than even offering to pay for services will, but you have to be careful to not fall into the "wow, percent/count of my requests were for ads that's crazy!" trap when looking at their statistics. Often when services cannot reach something they are set to retry so it's very easy to turn 1 actual request into 100s of blocked retry-requests in statistics panel.

Re: Setting up a Pi Hole made my home network faster

#156

Post by Falkon1313 »

I was excited to try this once as a weekend project. Got it all set up and working so my desktop sent DNS through the Pi. Then went to set the router to use it instead, and it was a no-go. Comcast routers don't allow you to change the DNS settings.

Of course I could've bought a new router and set that up to work between the Pi and the Comcast one, but that was more than I wanted to put into it.

Now I have a different service with a different router, so if I can ever find the Pi, maybe I'll try it again.

Re: Setting up a Pi Hole made my home network faster

#157

Post by Arnavion »

zeroflow wrote: post #99
slickdork wrote: post #90

Earlier quoted context omitted.

I recommend opnsense [0] over pfsense. I ran pfsense for 5 years and it is great, but there was some bad blood [1] between the two projects and the community. [0] https://opnsense.org/ [1] https://teklager.se/en/pfsense-vs-opnsense/

I've also had to decide if I want to use pfsense or opnsense, but for me, the pfblockerNG plugin was what tipped the scales in favor of pfsense.

If you're just going to use pfBlockerNG for DNS blocking, that's built in to OPNsense without needing any plugins, via Unbound DNSBLs.

Re: Setting up a Pi Hole made my home network faster

#158

Post by jeffkeen »

ferminaut wrote: post #29

I know some folks are anti Ubiquiti Unifi on here, but you can run pihole (along with a bunch of other stuff) right on a UDM/UDM-Pro. IMO it makes the most sense to run this on the router, and you can run it in a docker container. If you're looking for a fun hour or two project, check out: https://github.com/boostchicken-dev/udm-utilities/tree/maste...

I'm afraid to ask, but why are people anti ubiquity? I freaking love my udm-pro and am waiting for their cams to come back in stock so I can ditch my nests.

Re: Setting up a Pi Hole made my home network faster

#159

Post by aetherspawn »

ctur wrote: post #106

For those not wanting the overhead of running a service on your network, NextDNS sells what is basically managed pihole. I’ve used it for about a year and have been very happy. It also lets you use it on mobile devices for when you aren’t on your home network.

+1 for NextDNS, best $20 annually I ever spent. Been using it for close to two years.

Re: Setting up a Pi Hole made my home network faster

#160

Post by Arnavion »

slickdork wrote: post #90
lousken wrote: post #54

Earlier quoted context omitted.

i am considering pfsense for my homelab setup - can you easily troubleshoot issues and whitelist addresses if you need to?

I recommend opnsense [0] over pfsense. I ran pfsense for 5 years and it is great, but there was some bad blood [1] between the two projects and the community. [0] https://opnsense.org/ [1] https://teklager.se/en/pfsense-vs-opnsense/

Your [1] doesn't seem to have been updated for recent events, so:

- pfSense CE is an EOL product (and its replacement Plus is closed source). https://news.ycombinator.com/item?id=26479725 / https://news.ycombinator.com/item?id=27775408

- The Wireguard fiasco. https://news.ycombinator.com/item?id=30719403

Post reply on HN