Secondary DNS-as-a-Service reddit / selfhosted ---------------------------------------------------------------------- Tivin-i · 2023-11-24 16:11 Hello Selfhosted community! I know not many folks actually host their own DNS, but for those that do: do you use any hosted secondary DNS servers? Meaning delegating slave servers. What features would you be looking at in such a service? Reason asking: I am looking to build a free service that would allow users to register their zone , choose geographic location and our servers will do the secondary part for it. Though limited on a free tier - say 1-3 zones. It will include a management panel. ---------------------------------------------------------------------- ElevenNotes · 2023-11-24 17:09 Good luck to you. The last time I asked this, to provide free full tier (no limits) DNS, I was pretty much told to go fuck myself. ---------------------------------------------------------------------- Tivin-i · 2023-11-24 18:07 Sorry to hear that, If it was about DNS send me the link to the thread! I am definitely not going to provide FULL/Unlimited tier to anyone. Anyone who asks that will go to choosing beggars sub and just blocked; I do this for fun and if I can help others, nothing more - at the same time, need to make sure that one asshole does not ruin it for everyone else by parking 100k spam domains. ---------------------------------------------------------------------- NikStalwart · 2023-11-25 00:56 I do, indeed, use slave DNS servers, in fact, I'm currently in the market for a second independent provider. What features am I looking for? Honestly, a competitive amount of POPs and ability to accept AXFR in. I don't need much more than that. Oh and pricing: I'm looking for something on the level of AWS or cheaper. I've tried approaching some other players in the field like ns1 and Hurricane Electric's commercial service and those are quoting me $350+/month for < 100 zones and <10m req/month. No thank you. ---------------------------------------------------------------------- Tivin-i · 2023-11-25 02:08 Thank you! What would such a competitive amount would be? 2 per each region covering east and west? or something more distributed such as 1 in a radius of 1,000km? ---------------------------------------------------------------------- NikStalwart · 2023-11-25 02:15 > Thank you! What would such a competitive amount would be? 2 per each region covering east and west? or something more distributed such as 1 in a radius of 1,000km? I certainly don't need anything as robust as 1 per 1000km. I currently utilize ClouDNS as my main slave DNS provider. ClouDNS give me POPs in the capital city of every economically-relevant country. I don't necessarily need something that robust for a backup slave provider. Something like 2 POPs per continent would be more than enough, say South Africa, North Africa, Sydney, Singapore, 1-2 in Europe, 1 in JP/KR, 2 in USA, and one in South America. That should give decent-enough coverage. ---------------------------------------------------------------------- Tivin-i · 2023-11-25 02:33 Thank you! ---------------------------------------------------------------------- OhMyForm · 2023-11-25 13:35 I use Technitium the ideal set up, is put one in one region in one data centre and then another in another region in another data centre. This way the whole Internet would have to break before your website. Breaks this plus a strategy of good time to live policies Infrastructure should stay up forever. ---------------------------------------------------------------------- OhMyForm · 2023-11-25 13:37 Moreover, there’s about 1 million tools that do this if this is all that you’re worried about, you’re definitely far away from being a competitor to someone like cloud flare. Because cloud flare does any cast routing same thing with their IPs ---------------------------------------------------------------------- OhMyForm · 2023-11-25 13:38 You should stay away from pi hole ---------------------------------------------------------------------- OhMyForm · 2023-11-25 15:26 their appliance is not meant for public-facing use its meant for local networks and they're particularly hostile towards people who even suggest it. ---------------------------------------------------------------------- Tivin-i · 2023-11-26 13:12 I love Cloudflare for their offerings and personally know folks over there, I was even a paying customer and still use some of their services for some projects. This however is not to compete with CF. If all people know about DNS is changing the ns to point someplace else, then what I am offering is not for them. Nor am I trying to mask the infra by anycasting and offering multi-dns failover for folks that sign up - I don't have the time nor willing to spend the money to purchase IPs and do all that build. The solution is for those that want to host their own nameserver and want a backup for their zone, but don't want to spend $30 on a VPS to host a single zone. If you are a CF customer, my service is also not for you as you are bound to CF the moment you move your zone over there. ---------------------------------------------------------------------- OhMyForm · 2023-11-26 14:17 Anycasting has nothing to do with masking anything it just makes it so that you always get the shortest route to asset X you can have anycast IP's and you can have anycast DNS. I'm excited to see what you find to be worthy of research into DNS today. ---------------------------------------------------------------------- ElevenNotes · 2023-11-27 00:20 I'm not talking about PiHole, but enterprise grade BIND. ---------------------------------------------------------------------- Tivin-i · 2023-11-27 01:06 >I'm excited to see what you find to be worthy of research into DNS today. I'm just a selfhoster, no amazing insights from me :) Thank you for OhMyForm btw! ---------------------------------------------------------------------- OhMyForm · 2023-11-27 01:14 eh DNS is harder than it initially appears most of the time. If you run an open resolver you run the risk of contributing to DNS Amp attacks (granted it's a dated attack its still a problem) ---------------------------------------------------------------------- OhMyForm · 2023-11-27 01:15 cheers <3 hopefully it can carry on, its limping a bit right now. ---------------------------------------------------------------------- ElevenNotes · 2023-11-27 05:43 Is resolver all you know? Because BIND is mostly used as authorative DNS, not as a resolver, and guess who is running authorative servers since over two decades in the public space? ---------------------------------------------------------------------- ElevenNotes · 2023-11-27 05:43 Is resolver all you know? Because BIND is mostly used as authorative DNS, not as a resolver, and guess who is running authorative servers since over two decades in the public space? ---------------------------------------------------------------------- OhMyForm · 2023-11-27 14:29 did I misspeak I wasn't really looking to start an argument it was just commentary. not a personal attack. I've been running authoritative servers for a while also. Usually if you're posting to reddit (not you specifically) its because you're looking for high level help and less often lower level help especially in this subreddit. ---------------------------------------------------------------------- ElevenNotes · 2023-11-27 14:32 You told me to stay away from PiHole my friend, that was your assumption, not mine. ---------------------------------------------------------------------- OhMyForm · 2023-11-27 21:03 ok