Running own DNS server reddit / selfhosted ---------------------------------------------------------------------- Beautiful-Log5632 · 2023-10-27 18:11 I have always used external DNS services because it is easy and reliable. Would like to learn more about DNS by trying to use my own. I have selfhosted some apps on linux VPS and some more people have accounts to use the apps so it's not only internal. In domain registrar I have set name server to DNS service provided by VPS service. And in VPS console I have set the DNS records such as A record. Not sure what I need to do and get started. Install unbound (or something else you recommend) on the VPS and set up same DNS records I set up with the VPS service? And change the name server with registrar to be my own VPS IP address? Seem too simple so could be I am missing some things. Any problem with running unbound on the same VPS as the apps? ---------------------------------------------------------------------- thekrautboy · 2023-10-27 18:48 Why do you want to run your own public DNS? If you just want to learn about it, run it through a VPN only, or host it privately in your home network. Running a public DNS has a high risk of easily being abused by others and it can quickly lead to your VPS provider shutting your VPS down, and even kicking you out as a customer. I dont know what things you did in your VPS console, maybe find support community about your specific provider. If they provide the DNS for your then it shouldnt be a problem, providers have measurements in place to avoid having their DNS abused. ---------------------------------------------------------------------- Beautiful-Log5632 · 2023-10-27 18:50 > Running a public DNS has a high risk of easily being abused by others and it can quickly lead to your VPS provider shutting your VPS down, and even kicking you out as a customer. How can it be abused isn't it just resolving DNS queries? ---------------------------------------------------------------------- thekrautboy · 2023-10-27 18:52 See the link i just added. DNS is a very old protocol and a simple DNS server like a Pihole or Adguard Home can, and will, be very easily abused. ---------------------------------------------------------------------- Not_a_Candle · 2023-10-27 19:04 Do not host a recursive DNS open on the web, if you don't know what you are doing. You putting yourself and other people at high risk. Search for dns amplification attacks for example. ---------------------------------------------------------------------- yolomoonie · 2023-10-27 23:40 As far as I can see that concerns only DNS resolvers. An authoritative DNS Server just provides the entries of it's root/slave zones and cannot be used to amplify ddos attacks on other domains. Off course care should be taken if using bind9 or unbound as authoritive DNS server as both are also capable or even intended to be used as resolver. ---------------------------------------------------------------------- yolomoonie · 2023-10-27 23:50 I don't see the point to use it's own dns server for a single VPS. It is recommended to run at least two authoritative dns server for a a zone and it seems really strange to use a dns server which just references it's own IP address. If you just want to learn how to configure dns records I would recommend something like [https://desec.io/](https://desec.io/) . They provide the dns server infrastructure and you can configure the zones as you desire. ---------------------------------------------------------------------- thekrautboy · 2023-10-28 00:17 +1 for deSEC, they are great. Not only do they offer free DNS management but also free "DDNS" subdomains like `example.dedyn.io". One account can manage up to 15 domains in total which should be plenty for most private users, but even if you reach that limit you can contact them and ask nicely for them to increase your allowance. (no promises) ---------------------------------------------------------------------- Affectionate-Fig-805 · 2023-10-28 13:48 For years, I used to run our own authoritative DNS servers using BIND. Switched to Cloudflare and never looked back.