Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Duck DNS – free dynamic DNS hosted on AWS

duckdns.org

Post reply on HN
Print view View original

71–80 of 103 posts

Re: Duck DNS – free dynamic DNS hosted on AWS

#71

Post by 1MachineElf »

blowfish721 wrote: post #6
1MachineElf wrote: post #4

I'm currently on the search for a service to facilitate DDNS. Duck DNS seems popular, but I'm skeptical of things that are simply offered for free. What assurance do we have that Duck DNS is secure, or that it will not just disappear one day? The alternative that seems better to me is Namecheap with their API.

I went the API way but with Gandi, works like a charm!

Gandi is my registrar! Yes, I'm a fan. I may be mistaken, but something I worry about after trying Gandi's API for Let's Encrypt is the API keys provide permission for everything. I would love it if the permissions could be narrowed down to specific domains, records, and operations on them... AWS Route53 comes to mind, but my router (OPNsense) didn't have it available as an option. :(

Re: Duck DNS – free dynamic DNS hosted on AWS

#72

Post by 1MachineElf »

k8sToGo wrote: post #11
1MachineElf wrote: post #4

I'm currently on the search for a service to facilitate DDNS. Duck DNS seems popular, but I'm skeptical of things that are simply offered for free. What assurance do we have that Duck DNS is secure, or that it will not just disappear one day? The alternative that seems better to me is Namecheap with their API.

Why does it matter if it just disappears one day if you are not paying for it anyways?

I think I see your point, however, what I'm saying is I'd rather pay for something in exchange for some semblance of availability and security guarantees.

Re: Duck DNS – free dynamic DNS hosted on AWS

#73

Post by k8sToGo »

1MachineElf wrote: post #72
k8sToGo wrote: post #11

Earlier quoted context omitted.

Why does it matter if it just disappears one day if you are not paying for it anyways?

I think I see your point, however, what I'm saying is I'd rather pay for something in exchange for some semblance of availability and security guarantees.

That's ok. But I think for private projects something like this is fine. That's why I meant that even if it disappears it doesn't matter.

I would definitely not use something like this commercially.

Re: Duck DNS – free dynamic DNS hosted on AWS

#74

Post by bullen »

goosedragons wrote: post #62
bullen wrote: post #58

That's great and all but since dyndns providers are hardcoded in my router this does not help.

If you have a machine running all the time anyways you can have it update the IP instead of the router. They have instructions for a bunch of different ways to do it on various OSs.

Then I rather use my own DNS solution.

Re: Duck DNS – free dynamic DNS hosted on AWS

#76

Post by haxxorfreak »

mittermayr wrote: post #26

For anyone hosting their domain on Google Domains, there's a neat API endpoint they're offering for updating the DNS with a simple CURL. I've been using this for years now for a public Raspberry PI behind a home router that changes IPs every other day. curl -s -k --user "username:password" "https://domains.google.com/nic/update?hostname=yourdomain.com" There's more parameters (and you can specify an IP, the above req…

I had no idea about this, really handy!

Quick question, is there a reason the -k (--insecure) flag is included? I imagine that https://domains.google.com would use a cert trusted by curl so it seems unnecessary and adds a risk that your traffic could be MitM.

Re: Duck DNS – free dynamic DNS hosted on AWS

#77

Post by benmanns »

haxxorfreak wrote: post #76
mittermayr wrote: post #26

For anyone hosting their domain on Google Domains, there's a neat API endpoint they're offering for updating the DNS with a simple CURL. I've been using this for years now for a public Raspberry PI behind a home router that changes IPs every other day. curl -s -k --user "username:password" "https://domains.google.com/nic/update?hostname=yourdomain.com" There's more parameters (and you can specify an IP, the above req…

I had no idea about this, really handy! Quick question, is there a reason the -k (--insecure) flag is included? I imagine that https://domains.google.com would use a cert trusted by curl so it seems unnecessary and adds a risk that your traffic could be MitM.

I could see people doing this on old routers with outdated CA certs and etc. But agreed, it seems like a bad idea unless absolutely necessary.

Re: Duck DNS – free dynamic DNS hosted on AWS

#78

Post by creeble »

pygar wrote: post #16
1MachineElf wrote: post #4

I'm currently on the search for a service to facilitate DDNS. Duck DNS seems popular, but I'm skeptical of things that are simply offered for free. What assurance do we have that Duck DNS is secure, or that it will not just disappear one day? The alternative that seems better to me is Namecheap with their API.

I cobbled together a bash script that used the cloudflare API to update the A record when my IP changed. It worked well. Prior to that i used https://freedns.afraid.org which is free if you are willing to share your domain (people can create subdomains that point to their IP) or you can pay to keep it private. It's been around for a very long time, so it's unlikely to vanish. It's a very good service.

+1 on Cloudflare’s API for this. You can generate an API key (per domain only, I think) and it’s a simple curl call from there.

And it works on their free account level! Maybe someday they’ll kill that, but they have a history of keeping features in free going.

Re: Duck DNS – free dynamic DNS hosted on AWS

#80

Post by jgrahamc »

creeble wrote: post #78
pygar wrote: post #16

Earlier quoted context omitted.

I cobbled together a bash script that used the cloudflare API to update the A record when my IP changed. It worked well. Prior to that i used https://freedns.afraid.org which is free if you are willing to share your domain (people can create subdomains that point to their IP) or you can pay to keep it private. It's been around for a very long time, so it's unlikely to vanish. It's a very good service.

+1 on Cloudflare’s API for this. You can generate an API key (per domain only, I think) and it’s a simple curl call from there. And it works on their free account level! Maybe someday they’ll kill that, but they have a history of keeping features in free going.

they have a history of keeping features in free going.

Correct.

Post reply on HN