Live data from Hacker News

Pi-hole v6

pi-hole.net

81–90 of 316 posts

Re: Pi-hole v6

#81
post #45

Nice. I wish pihole or adguard would add support for change DNS records based on the query subnet. I believe this is called DNS views. That way my local devices and wireguard devices can get the correct IP for internal services.

In unbound those are indeed views[1]. I moved from pihole to unbound+nsd a couple of years ago for precisely this use case. Block filters courtesy of[2].

[1]: https://unbound.docs.nlnetlabs.nl/en/latest/topics/filtering...

[2]: https://github.com/StevenBlack/hosts

Re: Pi-hole v6

#82

Earlier quoted context omitted.

> Really weird, because there's less stuff in it. It's also not subsidized by selling your user data.

Is this really true? The margin must be huge. I've seen 4K smart tv's for half the price of 4k monitors.

TVs usually have lower requirements regarding frame rate and latency compared to computer monitors. That's probably also a factor.

Re: Pi-hole v6

#83

I set up pi-hole recently after hearing about it for years. I was kind of surprised at a lack of really basic features (imo): There isn't any kind of "dry run" or "phantom" mode, where requests are not actually blocked, but appear marked in the log UI as "would be blocked". This is super important because I want to see all the things my home network is doing that would be blocked before I actually hit the big red but…

Is a DNS blackhole the right way to restrict your TV from doing bad things? The software running on the device might not even use DNS lookups to connect to hosts as it pleases. Your router is probably the better place to add guardrails.

It’s a start for sure, a TV that’s really out to track you might well be able to circumvent these blocks, but most TVs (and indeed most tracking technologies on the web) to my understanding are not so sophisticated. For the average person who wants to enjoy some of the smart features of their TV this is a good compromise.

And I’m not sure what you mean by the router being the better place to add guardrails. What sort of guardrails can you possibly add outside of blocking internet access outright to the TV? It would be near impossible to distinguish between legitimate traffic and ad/tracking traffic without resorting to something like SNI sniffing which again can be bypassed.

Re: Pi-hole v6

#84

Earlier quoted context omitted.

I love AdGuard Home but the single binary container from a Russian company makes me nervous. I may move to building it myself. Is this criticism unfair?

>Is this criticism unfair? Yes because you judge people by the country they live in. AdGuard has made their stance clear if something like this is important to you: https://www.reddit.com/r/Adguard/comments/t15gr4/announcemen... & https://adguard.com/en/blog/official-response-to-setapp.html

I actually didn't know this. Thanks!

Re: Pi-hole v6

#85
Not sure if this is the right place to ask, but I've got a semi-obscure DNS question.

I'd like to use Cloudflare's Zero Trust DNS filtering with DoH by running a DNS proxy on my network.

I can get this to work great with github.com/adguardTeam/dnsproxy (running on a Pi 4B) but what I would really like is to have different devices (based on their IP on the network) get their queries forwarded onto a different DoH upstream.

Is this possible in a simple way?

Re: Pi-hole v6

#86

I've been using AdGuard Home, which does pretty much the same thing, but is slightly better polished, with things like support for DoH and OSs other than Linux. https://github.com/AdguardTeam/AdGuardHome

I went from PiHole -> AdGuard -> NextDNS. My patience for tinkering and maintaining wasn't high enough to not just pay someone else to do it :)

The big benefit of running a DNS server locally is caching. Using any external provider means you have to go out to the internet for every single request.

With a local server, most requests are fulfilled from the local cache.

Re: Pi-hole v6

#87

Not sure if this is the right place to ask, but I've got a semi-obscure DNS question. I'd like to use Cloudflare's Zero Trust DNS filtering with DoH by running a DNS proxy on my network. I can get this to work great with github.com/adguardTeam/dnsproxy (running on a Pi 4B) but what I would really like is to have different devices (based on their IP on the network) get their queries forwarded onto a different DoH upst…

Perplexity thinks so:

https://www.perplexity.ai/search/i-d-like-to-use-cloudflare-...

Re: Pi-hole v6

#88

I've been using AdGuard Home, which does pretty much the same thing, but is slightly better polished, with things like support for DoH and OSs other than Linux. https://github.com/AdguardTeam/AdGuardHome

I love AdGuard Home but the single binary container from a Russian company makes me nervous. I may move to building it myself. Is this criticism unfair?

I built it myself for a while but as I mentioned elsewhere, it's now being packaged in the Alpine Linux testing branch. That makes a container image an 'apk add' away.. whether you trust Alpine Linux more or less than the AdGuard Home teams is up to you.

Re: Pi-hole v6

#89
post #87

Not sure if this is the right place to ask, but I've got a semi-obscure DNS question. I'd like to use Cloudflare's Zero Trust DNS filtering with DoH by running a DNS proxy on my network. I can get this to work great with github.com/adguardTeam/dnsproxy (running on a Pi 4B) but what I would really like is to have different devices (based on their IP on the network) get their queries forwarded onto a different DoH upst…

Perplexity thinks so: https://www.perplexity.ai/search/i-d-like-to-use-cloudflare-...

Please don't use AI to write your comments. If I wanted to know what AI thinks I could ask it myself. I read the comments to get feedback from humans.

Edit: OP edited their comment, was previously a very long AI-generated response.

Re: Pi-hole v6

#90
post #87

Not sure if this is the right place to ask, but I've got a semi-obscure DNS question. I'd like to use Cloudflare's Zero Trust DNS filtering with DoH by running a DNS proxy on my network. I can get this to work great with github.com/adguardTeam/dnsproxy (running on a Pi 4B) but what I would really like is to have different devices (based on their IP on the network) get their queries forwarded onto a different DoH upst…

Perplexity thinks so: https://www.perplexity.ai/search/i-d-like-to-use-cloudflare-...

Please don't spam HN with LLM generated slop. The value of HN is the human discussion, everyone here is perfectly capable of asking an LLM of their choice.
Post reply on HN