What DNS and DHCP solutions are you using? reddit / selfhosted ---------------------------------------------------------------------- lolinux · 2023-12-10 11:18 Hello, I am currently have isc-dhcp-server and bind9 on a Raspberry Pi 3, running okay I would say. I have managed to "bind" them together, am blocking some domains by using RPZ, have a local domain and caching. However, I am not an expert in these technologies, and to be honest it seems a bit hard, especially since I only use these tools at home. What other tools do you use? Or if you also use bind and isc-dhcp, are there any tools that help you manage them to make life easier? Thanks ---------------------------------------------------------------------- InvaderToast348 · 2023-12-10 11:29 PiHole. The adblocking is a bonus, but I just really like the gui and ease of use. ---------------------------------------------------------------------- thekrautboy · 2023-12-10 11:34 Pihole and Adguard Home are probably very widely used in this community. Not only are they easy to set up and offer good basic DNS but also adblocking/filtering. Personally i start using Technitium a lot, plus OPNsense with its own DNS. ---------------------------------------------------------------------- ElevenNotes · 2023-12-10 11:44 Kea for DHCP and bind as authorative and resolver and adguard for DNS blocking. DNS: Client > AdGuard > bind(auth) > bind(resolver) DHCP: Client > Kea Both systems are running all as HA clustered solutions. ---------------------------------------------------------------------- jusepal · 2023-12-10 12:31 Technitium dns if i need authoritative server ie to host dns zone for my domain myself or to xafr sync icann root zone, or just adguardhome for simple recursive dns and dhcp. Technitium is more powerful but adguardhome got simpler, better ui. I use both depends on situation. ---------------------------------------------------------------------- Anejey · 2023-12-10 12:40 Currently just Pi-Hole for DNS and OPNsense for DHCP. I'm planning to set up PowerDNS to get my own authoritative DNS for my domain, but that's a project for another day.. or month. ---------------------------------------------------------------------- lolinux · 2023-12-10 13:04 Interesting, what do you use for HA? ---------------------------------------------------------------------- ElevenNotes · 2023-12-10 13:09 Pretty simple: Two nodes. Use keepalived for VRRP virtual IP. Use the VIP on your Traefik load balancers and then simply proxy to DNS and DHCP (you can also use the VIP as DHCP helper address on your switches/router). ---------------------------------------------------------------------- kgvarunkanth · 2023-12-10 13:26 I use Knot Resolver + adblocker ---------------------------------------------------------------------- darthrater78 · 2023-12-10 13:37 I just started using Technitium a primary zone in prod and a secondary in my IOT vlan. It works great. Both have discrete pi-holes as forwarders. ---------------------------------------------------------------------- AndreasTheDead · 2023-12-10 14:14 Windows Server for both with upstream nextdns. Its also my homelab so that was the easiest thing to do. ---------------------------------------------------------------------- Comakip · 2023-12-10 14:19 Bind9 but it's not working all the time and I don't know why :D ---------------------------------------------------------------------- bigDottee · 2023-12-10 14:22 I run active directory at home... So: Dns: windows server 2022 dns Dhcp: windows server 2022 dhcp I run AdGuard home as well... So goes: Client > AdGuard home > windows server dns > quad9 privacy dns (upstream) I have thought about setting up something like keepalived and switching from the manual nginx reverse proxy config to traefik. I just haven't taken the time to learn more about these yet. ---------------------------------------------------------------------- lolinux · 2023-12-10 14:39 I'll admit that I wasn't expecting this answer at all, but yeah, why not? :) ---------------------------------------------------------------------- Simon-RedditAccount · 2023-12-10 14:42 RouterOS built-in DNS and DHCP server. ---------------------------------------------------------------------- HoustonBOFH · 2023-12-10 14:42 Ditto. I have deployed this for a few clients as it is easy for the to run. ---------------------------------------------------------------------- APIeverything · 2023-12-10 14:45 I’ve gone for more less the same. Kea for DHCP and Bind for DNS. I created a zone to block ads and malware which for me works a treat. For HA, I’m using a VIP and HAProxy to balance. All updated via Ansible because, I agree with you, if doing this manually it can be time consuming. So automate it 😜 ---------------------------------------------------------------------- ElevenNotes · 2023-12-10 15:07 Perfect, makes me very happy to hear and spread the word about kea, bind and ansible. ---------------------------------------------------------------------- Oujii · 2023-12-10 15:32 Use AdGuardHome for both, but plan on deploying OPNSense as my router, so DHCP would be moved there. ---------------------------------------------------------------------- tebeks · 2023-12-10 15:39 Dnsmasq for both but wanting to move to pihole ---------------------------------------------------------------------- felipefideli · 2023-12-10 15:56 Agreed, it’s awesome. I just wish we had a way to simply way to make it high available. :( ---------------------------------------------------------------------- lmm7425 · 2023-12-10 16:26 The pfSense defaults of ISC DHCP (the latest pfSense just landed experimental Kea support) and unbound. ---------------------------------------------------------------------- utahbmxer · 2023-12-10 17:40 Unbound on OPNsense as recursive resolver, and also authoritative for lab domains and my internal only hosts on my domain. Two instances of pihole, one on a VM and another on an old BeagleBone Black as secondary. They are synced with gravity-sync. The BBB helps when I do maintenance since I only have a single hypervisor and would lose DNS when the VM is offline during host reboot. Piholes point to OPNsense as forwarder. ---------------------------------------------------------------------- Geoffman05 · 2023-12-10 17:54 DHCP is handled by my UDM Pro. DNS is resolved by Unbound/Pihole. ---------------------------------------------------------------------- CincyTriGuy · 2023-12-10 18:06 DHCP from my Ubiquiti UDM. I have 2 Core DNS servers running in containers on different hosts (NUC & rPi 4). ---------------------------------------------------------------------- YankeeLimaVictor · 2023-12-10 18:17 At work we use Windows servers for DHCP and DNS, due to the easiness of configuring an HA with them. I have been looking for a linux-based replacement, with a GUI and HA support, but i can't seem to find a good one. ---------------------------------------------------------------------- lolinux · 2023-12-10 18:37 I agree, there are a few areas where, if you come from the Windows world, you feel you're on your own searching for the right tool. I've been using bind and isc-dhcp-server for my home for 6-7 years maybe, ever since I had my first raspberry pi, but I never really had the time to dig deeper and actually learn them very well, or at least to have HA - since I do have another raspberry pi device ---------------------------------------------------------------------- lolinux · 2023-12-10 18:40 Sorry to hear that:) What problem are you facing? ---------------------------------------------------------------------- lolinux · 2023-12-10 18:41 Yeah, I also want to take the time to learn traefic whenever I can ---------------------------------------------------------------------- bombero_kmn · 2023-12-10 18:57 I gave out a few last year for the holidays, they were a huge hit. ---------------------------------------------------------------------- catfish_dinner · 2023-12-10 19:25 for self hosting, dnsmasq is all you need. bind9 is massive overkill. ---------------------------------------------------------------------- lolinux · 2023-12-10 19:34 Yes, I agree. But there was something in me when I was looking for choices that told me that I'm not going to be pleased with something that's simple to use when there was already something stable that scales well and is used by many large enterprises. I admit I did regret that at times but I've learned a bit. ---------------------------------------------------------------------- MaxGhost · 2023-12-10 20:45 I like CoreDNS. Very simple config file. It's what I recommend if adblocking isn't needed (in which case PiHole or AdGuard are good). I prefer using uBlock Origin (also works with Firefox on Android). ---------------------------------------------------------------------- adamshand · 2023-12-10 21:04 AdGuardHome. ---------------------------------------------------------------------- Adenn76 · 2023-12-10 21:21 Pi-Hole with Unbound for DNS and I am using my router / firewall for DHCP, Ubiquiti Dream Machine Pro. ---------------------------------------------------------------------- hereisjames · 2023-12-10 21:31 If you're looking for something different, you can always try Gravity by the author of Authentik. https://gravity.beryju.io/ It's basically CoreDNS and Blocky running on top of etcd, with a DHCP server. I've not had time to try it out yet and there's two missing features I'd quite like - proper blocklist management and an HA DHCP leader - but in theory it sounds great. ---------------------------------------------------------------------- adriaticsky · 2023-12-10 22:13 I'm not running it atm, but you might consider trying PowerDNS. I'd put it in a similar class as bind9 in that it's made to be able to scale to very large environments and has a feature set to match, but I find it more "modern" and with more in the way of convenience features for the administrator. For example, instead of being based on zone files directly, it has pluggable database backends so you can store your zones in Postgres, MariaDB, SQLite...or even BIND-format zone files. There's also a Web-based admin tool out there (I think it's a separate project but I can't remember) if that's something you'd find helpful. I think the PowerDNS official docs are pretty good too. I haven't worked with bind9 a ton, but when I did I didn't find it the easiest/friendliest software package I've ever used; it's not just you. And I say this as a professional Linux admin with some years of experience :) ---------------------------------------------------------------------- FroSSTII · 2023-12-10 22:21 For DNS I am using an opnsense box with adguard installed on it, in combination with unbound. Client -> Adguard -> unbound -> DNS root servers. For DHCP just using opnsense built in. ---------------------------------------------------------------------- adriaticsky · 2023-12-10 22:22 legit choice; going straight for bind9 is hard mode but it is the granddaddy of DNS software if you wanted the learning experience more than you wanted something that you could just fire up quickly and would probably work right away. that said, though it may look humble, dnsmasq has surprised me at times when I've gone to configure it, browsed through its documentation, and glanced at the fairly advanced features it seemed to support. It can be deceptively simple, I think, because of how for basic deployments all the advanced features can be ignored, and for a basic setup the whole config file might be a dozen lines or possibly fewer. ---------------------------------------------------------------------- billiarddaddy · 2023-12-11 00:11 Pihole for DNS. Edge router for DHCP because multiple pools. ---------------------------------------------------------------------- Jazzlike-Fox5758 · 2023-12-11 01:31 AdGuardHome on Opnsense for general DNS query in my home. PowerDNS for my zones. Kea-dhcp for DHCP. Both kea and PowerDNS are backed by mysql storage. ---------------------------------------------------------------------- sidusnare · 2023-12-11 01:32 PowerDNS and ISC DHCP ---------------------------------------------------------------------- rjrbytes · 2023-12-11 02:59 I’m using the DHCP and DNS in FreshTomato on my router. ---------------------------------------------------------------------- d4nowar · 2023-12-11 04:41 When I run it myself I like to use dnsmasq over isc-dhcp-server. ---------------------------------------------------------------------- homemediajunky · 2023-12-11 04:43 I run active directory at home. I used to just run bind, manually adding the required active directory A, TXT, SOA, etc records. Moved DNS to AD, DHCP is controlled by pfSense. Clients use pihole which forwards requests to the active directory DNS for local domains or whatever resolver I'm currently using. I'm looking into setting up PowerDNS since phpIPAM integrates with it though. I use phpIPAM to allocate IPs so why not use one tool? ---------------------------------------------------------------------- Klynn7 · 2023-12-11 04:49 I was about to set this up but it doesn’t support wildcard DNS records? PITA. ---------------------------------------------------------------------- circularjourney · 2023-12-11 14:33 I consolidated everything down to my Proctelli box. The host does FW, and a unprivileged container for each service; DNS, DHCP, & VPN. DNS runs bind and it uses views for various subnets. I use to forward off AD traffic to my DC but that went away years ago. DHCP moved over to Kea last year. I want to play around with HA but just don't really have the need for it. Buying another box just to play isn't in the cards right now. ---------------------------------------------------------------------- reoccurcat · 2023-12-11 22:59 OPNsense’s default DHCP, and Unbound that forwards to NextDNS mainly for the AI threat protection etc