Live data from Hacker News

Technitium DNS Server: Self host a DNS server for privacy and security

technitium.com

31–40 of 87 posts

Re: Technitium DNS Server: Self host a DNS server for privacy and security

#32

and what does this do that pi-hole doesn't? or what does this do better than pi-hole does?

Can't add anything for the first question, but as for the second

>what does this do better than pi-hole does?

I block or redirect a few external DNS servers, like Google's, to a local DNS server and some devices go absolutely abeshit if the reply doesn't look like they expect. Like thousands of DNS lookups in minutes. Enough to kill pi-hole both on an RPI4, but also running on the same server as Technitium (dual Xeon proliant). So it seems it is more robust?

Re: Technitium DNS Server: Self host a DNS server for privacy and security

#34

and what does this do that pi-hole doesn't? or what does this do better than pi-hole does?

It does what pi-hole does and a lot more. Has encrypted DNS protocols like DNS-over-HTTPS, DNS-over-TLS, and DNS-over-QUIC support and also has built-in recursive resolver.

Re: Technitium DNS Server: Self host a DNS server for privacy and security

#36

and what does this do that pi-hole doesn't? or what does this do better than pi-hole does?

It does what pi-hole does and a lot more. Has encrypted DNS protocols like DNS-over-HTTPS, DNS-over-TLS, and DNS-over-QUIC support and also has built-in recursive resolver.

It is trivial to get pihole working with DoH. Just pair pihole with DNSCryptProxy.

Re: Technitium DNS Server: Self host a DNS server for privacy and security

#38

Isn’t self-hosting a dns server kind off pointless if you are the only user? Like doesn’t that make you unique to tracking?

Its actually much more beneficial to use a local DNS server even for a single user. A single user will keep querying for DNS requests since OS/apps cache DNS only for a minute or so. Local DNS will keep cache for the full TTL of the record and thus reduce the number of DNS requests that go out of your network. Plus there is Serve Stale feature which improves resiliency. For privacy, depending on your scenario, you can either run recursive resolver or use encrypted DNS protocols to hide DNS from your ISP. There is also support for configuring SOCKS5 or HTTP proxy to route requests via another server or via Tor network.

Re: Technitium DNS Server: Self host a DNS server for privacy and security

#39

I really do want to self host DNS, but I am afraid it will cause problems. Aren't DNS servers easily used in DoS attacks against other servers?

If you are looking for self hosting local resolver then just make sure its not accessible from public Internet. If you wish to host your own authoritative DNS server for your domain names then just configuring query rate limiting will mitigate DoS or DNS amplification attacks. I have been self hosting all my domain names since 2+ years now and its not much of an issue.

Re: Technitium DNS Server: Self host a DNS server for privacy and security

#40
post #36

Earlier quoted context omitted.

It does what pi-hole does and a lot more. Has encrypted DNS protocols like DNS-over-HTTPS, DNS-over-TLS, and DNS-over-QUIC support and also has built-in recursive resolver.

It is trivial to get pihole working with DoH. Just pair pihole with DNSCryptProxy.

Sure, but its not what pi-hole does or support. You need to install another software and forward requests to it. Technitium DNS has this feature built-in along with support for DoT and DoQ, including support for DoH/3.
Post reply on HN