Live data from Hacker News

Setting up a secondary Pi-Hole on my home network

dzombak.com

21–30 of 75 posts

Re: Setting up a secondary Pi-Hole on my home network

#21
post #19

A simpler solution: Deploy one Pi-Hole instance and then set clients to use Pi-Hole as the primary resolver and your ISP/router as the secondary. In the rare circumstance that the Pi-Hole device is down, you fallback and get the "normal" ISP DNS service.

That's exactly what I do. Never been concerned about downtime with my pihole, except the odd smart TV is something that won't using the secondary dns

Re: Setting up a secondary Pi-Hole on my home network

#22
post #7

I recently set up a Pi-Hole for the first time, but I spun it down pretty quickly. On desktop / mobile I already have client-side ad-blocking, and it's not like the Pi-Hole can block embedded ads in adware apps like YouTube on iOS, so I just couldn't really justify keeping it powered. I suppose if you have a house full of Samsung / Huawei / etc. IoTs that you really need to keep connected to the Internet for whatever…

My kids have school-issued devices, and there is a ton of tracking on them.

I set up my Pi-Hole on a Raspberry Pi Zero W. I have some brief notes here on my setup: https://www.thelis.org/blog/pi-hole. It works well.

Re: Setting up a secondary Pi-Hole on my home network

#23
post #7

I recently set up a Pi-Hole for the first time, but I spun it down pretty quickly. On desktop / mobile I already have client-side ad-blocking, and it's not like the Pi-Hole can block embedded ads in adware apps like YouTube on iOS, so I just couldn't really justify keeping it powered. I suppose if you have a house full of Samsung / Huawei / etc. IoTs that you really need to keep connected to the Internet for whatever…

> it's not like the Pi-Hole can block embedded ads in adware apps like YouTube on the iOS

Thanks for the info. I thought this was possible and it was the sole reason why I considered setting one up. Now I procrastinated on that project long enough to learn I can cancel it.

Re: Setting up a secondary Pi-Hole on my home network

#24
post #19

A simpler solution: Deploy one Pi-Hole instance and then set clients to use Pi-Hole as the primary resolver and your ISP/router as the secondary. In the rare circumstance that the Pi-Hole device is down, you fallback and get the "normal" ISP DNS service.

The problem is that many devices instantly spill over to the secondary Pi-Hole. And rogue devices bypass the primary altogether once they begin to get blocked for a short period of time. Having a secondary without blocking nearly negates the benefit of having the primary pi-hole, for the devices that it matters for most.

Re: Setting up a secondary Pi-Hole on my home network

#25

This line/'service'; Really?! Why? Finally, since 32GB is a relatively small disk, I installed a daily cron job to clean the apt cache[0]: Which is a Debian package to run `apt-get clean` that the author of the blog created. Here you go, no package required: # printf 'apt-get clean\n\n' > /etc/cron.daily/daily-apt-clean && chmod +x /etc/cron.daily/daily-apt-clean` [0] - https://github.com/cdzombak/apt-daily-clean

Way back this was a solid way of systems management, write a collection of packages that did things and then system config would be a matter of installing a list of packages.

Re: Setting up a secondary Pi-Hole on my home network

#26
post #19

A simpler solution: Deploy one Pi-Hole instance and then set clients to use Pi-Hole as the primary resolver and your ISP/router as the secondary. In the rare circumstance that the Pi-Hole device is down, you fallback and get the "normal" ISP DNS service.

Quite a few DNS clients don't make any distinction between "primary" and "secondary". You may enter them in order when configuring them but that has no bearing on which ends up being the server queries are sent to.

Re: Setting up a secondary Pi-Hole on my home network

#27

Having two main servers hosting Pi-Home works great - until both of them are offline for any random reason. So I added a third Pi-Hole following Techno Tims easy to follow guide. By using keepalived and VIP I can update, restart and tinker with the two servers as much as I want. https://youtu.be/hPfk0qd4xEY

But what if all three go offline for any random reason? Are you planning to add a fourth?

Obviously the fourth instance should be hosted on AWS connected to your local Tailnet.

Re: Setting up a secondary Pi-Hole on my home network

#28
post #19

A simpler solution: Deploy one Pi-Hole instance and then set clients to use Pi-Hole as the primary resolver and your ISP/router as the secondary. In the rare circumstance that the Pi-Hole device is down, you fallback and get the "normal" ISP DNS service.

I did that. Then saw that filtering was inconsistent. It turns out that some systems treat the DNS list as alternatives, not as primary and failover.

The spec only says the dns IPs should be specified in preference order. Nothing says to treat it as primary and failover.

Re: Setting up a secondary Pi-Hole on my home network

#29
post #2

I am also running a Pi-Hole and have wondered about what happens when/if the Pi-Hole goes down. Is there a simple way to have a failover/fallback DNS configured rather than requiring two Pi's? On failure, I'd like my DNS to just fallback to my routers default DNS - yes I'd get ad's but I think that's acceptable.

DNS isn't really suitable for an active/backup solution. Generally, you can't do that without some automation or some explicit support from the device, which is basically non-existent.

In my mikrotik device I do have a small script to replace my DNS entry with Cloudflare in case it becomes unresponsive (and then back again once it's up). That is not very transparent though and devices will get errors until the switch happens.

Re: Setting up a secondary Pi-Hole on my home network

#30
If anyone wants a redundant system and is happy not to self-host, then I can recommend NextDNS.

Works great, but not free over a certain number of requests.

Can’t speak to its privacy levels though - as with anything, assume records will be supplied to authorities when required.

But overall it has been great - provides network wide DNS filtering and has clients for mobile and desktop devices!

With a good dashboard, reporting and setting too.

Cost is minimal and I’ve been happy to pay for it.

A local PiHole is probably faster, but NDNS is set and forget.

Post reply on HN