What are you using for DNS\DHCP? reddit / selfhosted ---------------------------------------------------------------------- root_15 · 2023-09-28 22:20 My Mikrotik router doesn't support adding DHCP hostnames to DNS without a script so I'm thinking about just using something else. What are you using for DNS\\DHCP? ---------------------------------------------------------------------- Raithmir · 2023-09-28 22:26 Technitium for DHCP, DNS, Ad Blocking. ---------------------------------------------------------------------- Snoo-15335 · 2023-09-28 22:28 Pi hole with unbound, DNS, DHCP, & ad blocking ---------------------------------------------------------------------- virtualadept · 2023-09-28 22:38 DNSmasq, configured with a directly linked Pi-Hole as its upstream DNS. ---------------------------------------------------------------------- devkareem · 2023-09-28 23:04 Pfsense ---------------------------------------------------------------------- ScoobieRex208 · 2023-09-28 23:46 DNS: PiHole->MS DNS (Domain Controllers)->Unbound (OPNsense) DHCP: OPNsense ---------------------------------------------------------------------- xisonc · 2023-09-28 23:50 DnsMasq on an RPi4 running debian 12. ---------------------------------------------------------------------- xXAzazelXx1 · 2023-09-28 23:57 pihole ---------------------------------------------------------------------- Wuss912 · 2023-09-29 00:03 Pihole ---------------------------------------------------------------------- Cynyr36 · 2023-09-29 00:07 Dhcp and local dns is dnsmasq in a lxc container. Dns is on a non std port. Im running 2 copies of unbound with dnssec on, that have a stubzone for my local lan name that points at dnsmasq. The two copies of unbound are on separate hosts. That way i can do maintenance and at least keep "the internet" working. ---------------------------------------------------------------------- F1DNA · 2023-09-29 00:29 I do it all in pihole, makes it easy ---------------------------------------------------------------------- djzrbz · 2023-09-29 00:52 Technitium is superior ---------------------------------------------------------------------- NurEineSockenpuppe · 2023-09-29 00:56 I use my fritz box router. Idk why those things never got really got popular outside of germany. They offer a lot of „advanced“ features for consumer grade network equipment. I got their cheapest option and it offers everything that i need. It‘s honestly great of you are looking for something that is like high end consumer equipment not quite professional grade. I use it for network storage, it runs my wireguard vpn and has an extensive interface to configure everything. It even serves my cable tv over the network. You can configure hostnames. ---------------------------------------------------------------------- Franvcg · 2023-09-29 01:36 OpenWRT ---------------------------------------------------------------------- Spooler32 · 2023-09-29 01:50 Bind9. Kea. ---------------------------------------------------------------------- adamshand · 2023-09-29 01:50 I started with Technitum, went to Blocky and now with AdGuardPro (two instances sync'd with AdGuardHome-Sync). Gravity looks worthwhile as well with built in replication. ---------------------------------------------------------------------- Psychological_Try559 · 2023-09-29 01:52 Opnsense. Microtik is very big on just routing on the router, whereas OPNSense & PFSense have many plugins and extra features. It really wouldn't be the worst plan to run Microtik as the router & use OPNSENSE/PFSENSE as a "server" to provide many missing services (DNS/DHCP, OPENVPN, ETC), though possibly a bit inefficient? You could of course run a linux box to do DNS but that's not exactly trivial to setup. ---------------------------------------------------------------------- Bluhb_ · 2023-09-29 02:08 I just use pihole on my home server(a pi). That has the task to do dhcp and dns. I disabled dhcp(actually disabling wasn't possible so I set the range to 1 ip) on my router and set a static IP(that 1 ip) for the pi. Pihole will do dhcp and serve itself as dns server to anything connecting. I also run unbound as recursive dns server on the pi, and pihole is pointed to that. Works perfectly and gives the ability to do internal dns records, I use that to point a lot of internal domains to my server(pi) and use nginx reverse proxy to host different services on all those internal domain names(nginx proxies to internal docker ip:ports) ---------------------------------------------------------------------- l0033z · 2023-09-29 03:01 dnsmasq! I use it for dhcp, dns caching (with stubby as upstream for dns privacy), adblocking (by just importing a list) and even tftp for netbooting some hosts. dnsmasq is great and super low footprint. ---------------------------------------------------------------------- YankeeLimaVictor · 2023-09-29 04:09 AdguardHome for DNS (with cloudflare doh upstream), and the built-in DHCP server in my unifi router. ---------------------------------------------------------------------- bufandatl · 2023-09-29 04:56 DNS pihole. DHCP isc-dhcp-server in failover mode in two Linux boxes. ---------------------------------------------------------------------- ZaxLofful · 2023-09-29 05:31 MikroTik and just use the script…. ---------------------------------------------------------------------- NobodyRulesPenguins · 2023-09-29 05:37 Not much really: Bind9 and isc-dhcp-server. ---------------------------------------------------------------------- gromhelmu · 2023-09-29 05:43 pfblockerng on pfsense CE 2.7.0; unbound on pfsense as DNS ---------------------------------------------------------------------- lunakoa · 2023-09-29 06:03 isc bind and dhcp server. some day kea. clients use pihole (2x) and conditionally forward to isc bind. DOH via cloudflared. ---------------------------------------------------------------------- oscarfinn_pinguin3 · 2023-09-29 06:09 Sophos XG for DHCP and Windows Domain Controllers for internal DNS Zones ---------------------------------------------------------------------- JackCauliflower · 2023-09-29 06:24 How so? ---------------------------------------------------------------------- This-Gene1183 · 2023-09-29 06:46 Firewalla ---------------------------------------------------------------------- michaelpaoli · 2023-09-29 07:33 >What are you using for DNS\\DHCP? For DNS, BIND 9. And if you want your DHCP server - or client to update DNS (notably "reverse" DNS), that's quite easy to set up on BIND, with dynamic DNS (DDNS). E.g. allow clients to update only their own (reverse) DNS and/or allow DHCP server to update DNS - either by use of DDNS, and can have them use IP address to authenticate their request. Many DHCP clients automagically at least attempt this (e.g. from most Microsoft Windows clients) - basically having received DHCP lease, with DNS server information, and the client's hostname, they'll then use that information to use DDNS to request that the DNS server update "reverse" DNS for that client. ---------------------------------------------------------------------- Azuras33 · 2023-09-29 07:36 Pihole inside mikrotik's container features ---------------------------------------------------------------------- Bogus1989 · 2023-09-29 08:00 Poop Trash windows dhcp and dns, but only because ive got a windows domain environment setup. ---------------------------------------------------------------------- ocheret · 2023-09-29 08:20 ... which can also be installed on some MikroTiks (*replacing* the firmware) OR inside of MikroTik's virtual router feature (rarely used but super useful) ---------------------------------------------------------------------- geekonwheel · 2023-09-29 08:26 Stupid question but why both dnsmasq and unbound ? ---------------------------------------------------------------------- Exzellius2 · 2023-09-29 09:13 Pfsense ---------------------------------------------------------------------- phein4242 · 2023-09-29 09:44 NSD filled with data from netbox and unbound for recursion and caching. ---------------------------------------------------------------------- drjekyll_xyz · 2023-09-29 09:55 Install Pihole to your Mikrotik. Slap a USB stick into your router, create a container and install Pihole. It keeps things contained and gives you freedom. If you oppose Pihole, use any other docker DNS solution. Bit more info here: [https://help.mikrotik.com/docs/display/ROS/Container#Container-Summar y](https://help.mikrotik.com/docs/display/ROS/Container#Container- Summary) ---------------------------------------------------------------------- Cynyr36 · 2023-09-29 11:07 Dnsmasq is handling dhcp and my local network. So i get dns names for dhcp clients and my static internal hosts. Unbound because i wanted dnssec and a fully recursive dns server. I didn't feel like sending most of my whole hours browsing history to one place. ---------------------------------------------------------------------- MisterBazz · 2023-09-29 13:30 >Technitium This right here. Once they get DHCP6 going, it'll be almost perfect. ---------------------------------------------------------------------- djzrbz · 2023-09-29 13:33 There are a multitude of reasons why, but I'll touch on the ones that affect me the most. * API - The Web UI is really just an API client, anything you can do/see on the Web UI you can do with code. I have started to work on an Ansible module for this, but had to step away for a bit. * Plugins - There are some really good plugins that can be triggered by lookups. For example, I can return different responses based on the source IP of the query. * Split-Horizon - This is the only solution that I have been able to get to work properly with Split Horizon for my use case. I am able to override DNS queries and forward on anything that isn't overridden. For example, If I host a web app on my LAN I can override that to the actual reverse proxy or host itself while not needing to update all of my publicly available resources in the local DNS. * Root DNS - I am able to setup a secondary instance to act as a root resolver and have a local cache that is resistant to censorship. I can then point my recursive resolver to the root resolver and not need to rely on [8.8.8.8](https://8.8.8.8) or [1.1.1.1](https://1.1.1.1) etc... * Support for advanced features such as SSHFP, DNSSEC, and TSIG, not sure if PiHole has these or not. * The developer is sponsored by his employer and is very active in developing new features. I have made quite a few feature requests that were added within only a few release cycles. The biggest thing I don't like about it, no dark mode... ---------------------------------------------------------------------- APIeverything · 2023-09-29 13:44 Don’t forgot HAProxy for your TLS 1.3 needs. While you are at it, add keepalived for a nice Ha setup ---------------------------------------------------------------------- maxwelldoug · 2023-09-29 14:00 DHCP is allocated on the opnsense box, DNS is on a raspberry pi running pi-hole and upstream from 8.8.8.8 ---------------------------------------------------------------------- TinyMicron · 2023-09-29 14:53 I'm actually using a script on my Mikrotik router for this, has worked flawlessly for years. Have you given it a try? Might be worth it instead of setting up a new system and/or purchasing new hardware. If you have a newer Mikrotik router you could try running dnsmasq, bind9, pi-hole, coredns or something in a container. Haven't tried it but it might work. :) ---------------------------------------------------------------------- cpt_justice · 2023-09-29 15:39 That looks pretty nice. Just finishing setting up Unbound, but I plan on having a second DNS server and will look into Technitium for that. ---------------------------------------------------------------------- HotNastySpeed77 · 2023-09-29 16:11 This is what I do - my router is purely an Internet gateway, and all my services run separately. Pfsense and opnsense are both very good. ---------------------------------------------------------------------- SelectCase · 2023-09-29 17:40 \+1 for dnsmasq. It's also super easy to manipulate via script. I assign hostnames to every service I run and use through all of my configuration. It makes it super easy to failover services between hosts in my home network, since monitoring, reverse proxy, authentication, and even replication are pointed at the hostname for each service. ---------------------------------------------------------------------- Snoo-15335 · 2023-09-29 18:52 Looks like it's Windows only. A deal breaker for me. ---------------------------------------------------------------------- djzrbz · 2023-09-29 19:31 Umm, what? I'm running it in a Podman Container on Fedora... ---------------------------------------------------------------------- PaulEngineer-89 · 2023-09-29 19:52 I just use DHCP in my TP wireless router because I don’t care as long as it passes out IPs. I have DNS disabled and DNS comes through Pihole. I know OPNSense is popular but I need an actual router if I’m going to run that. My LAN and FTTH sustains 1 Gbps so cheap solutions are too slow. ---------------------------------------------------------------------- Snoo-15335 · 2023-09-29 23:50 I stand corrected. And it looks like they support the Pi! https://blog.technitium.com/2023/02/technitium-dns- server-v11-released.html ---------------------------------------------------------------------- geekonwheel · 2023-09-30 19:41 Mokay, makes sense funny how you mostly don't use dnsmasq for ... dns ahah. I was curious cause I know dnsmasq can do dnssec as well Separation makes sense tho ---------------------------------------------------------------------- Cynyr36 · 2023-09-30 21:02 It can do dns well, but it's not a recursive resolver. I could point it at google (8.8.8.8) or cloudflare (1.1.1.1) but then all my dns queries are in one place. I could also use dnsmasq to do dns over https, but again all my dns queries are in one spot. I looked at running Kea and NSD for DHCP and dns, but as of a few months ago Kea couldn't do dynamic dns for dualstack (ipv6 and ipv4) clients. Which i found useful. Though if I'm honest i have about 3 clients that i care about having names for that are on dhcp, and they could just get static leases.