Self-hosted alternatives to cloudflare/next secure dns servers?
reddit / selfhosted

----------------------------------------------------------------------
porkchopsandwiches · 2023-11-24 18:24

I've seen a lot of threads here about self-hosting DNS from people
that host their own services, but nothing beginner-friendly on hosting
your own DNS server just for privacy. It seems to me that your biggest
privacy risk as a consumer is your ISP snooping on your DNS requests,
and replacing your ISP with another mega-corp doesn't seem like much
of an improvement. Does anyone know of an easy way to spin up your own
secure DNS server? Something like a digital ocean droplet that's idiot
proof and not too expensive?

----------------------------------------------------------------------
bka-informant · 2023-11-24 18:32

If you are really only looking for a DNS resolver and do not want to
manage your own DNS records, it is sufficient to simply use trusted
DNS resolvers such as OpenNIC or Quad9

----------------------------------------------------------------------
ElevenNotes · 2023-11-24 18:42

You can use BIND as your DNS resolver with root zone, it's also faster
than any of the public DNS.

----------------------------------------------------------------------
jusepal · 2023-11-24 19:14

Coincidentally thats my setup rn. Hosted my domain myself using
technitium. Then i further xafr icann root zone and setup dns over
tls. The dns over tls queried the local icann root zone copy i got.
Its also blocking ads and tracker craps. Basically self reliant dns.

Can be done with bind9 too but i prefer technitium gui than bind9 cli.

----------------------------------------------------------------------
sarkyscouser · 2023-11-24 20:31

Adguard Home or pihole for starters.

Or run unbound and go straight to authoritative DNS servers.

----------------------------------------------------------------------
desnudopenguino · 2023-11-25 09:15

Unbound is pretty easy if you have experience with editing config
files.