Hosting your own authoritative DNS: yay or nay?

foxone

@AaronSS said:
This could not have been posted at a better time. I’m also considering this. I’m looking at this:

https://technitium.com/dns/

Isn't that a recursive server though? We are talking about authoritative servers here.

skorous

@foxone said:

@AaronSS said:
This could not have been posted at a better time. I’m also considering this. I’m looking at this:

https://technitium.com/dns/

Isn't that a recursive server though? We are talking about authoritative servers here.

Technetium can do both.

wankel

@skorous said:

@foxone said:

@AaronSS said:
This could not have been posted at a better time. I’m also considering this. I’m looking at this:

https://technitium.com/dns/

Isn't that a recursive server though? We are talking about authoritative servers here.

Technetium can do both.

The trouble is not whether it's recursive or authoritative, the trouble is that in either form it's unstable as hell!

skorous

@wankel said:

@skorous said:

@foxone said:

@AaronSS said:
This could not have been posted at a better time. I’m also considering this. I’m looking at this:

https://technitium.com/dns/

Isn't that a recursive server though? We are talking about authoritative servers here.

Technetium can do both.

The trouble is not whether it's recursive or authoritative, the trouble is that in either form it's unstable as hell!

Ah, so you've run it? I wondered if it was worth exploring or not. I've always just run BIND.

root

I am always for self-hosting stuff because this is the low-end way in my opinion. I believe authoritative DNS is the easiest to self-host due to low resource requirements; but even if one may grab the cheapest bare-bone low-end VPS offers with dedicated IP, it has to be from different providers (in different datacenters), so if one falis, the DNS still stands to resolve using other servers.

wankel

@skorous said:

@wankel said:

@skorous said:

@foxone said:

@AaronSS said:
This could not have been posted at a better time. I’m also considering this. I’m looking at this:

https://technitium.com/dns/

Isn't that a recursive server though? We are talking about authoritative servers here.

Technetium can do both.

The trouble is not whether it's recursive or authoritative, the trouble is that in either form it's unstable as hell!

Ah, so you've run it? I wondered if it was worth exploring or not. I've always just run BIND.

No, haven't... Running around with it for too long would burn a hole in my pocket on decay, besides the obvious health risks

mfs

@skorous said: I've always just run BIND.

I'd suggest you to at least give dnsdist a try, it's a "highly DNS-, DoS- and abuse-aware loadbalancer" that can be put in front of authoritative and recursive resolvers (BIND is fine too); when used in front of an authoritative one, it won't be problematic with AXFR/IXFR

skorous

@mfs said:

@skorous said: I've always just run BIND.

I'd suggest you to at least give dnsdist a try, it's a "highly DNS-, DoS- and abuse-aware loadbalancer" that can be put in front of authoritative and recursive resolvers (BIND is fine too); when used in front of an authoritative one, it won't be problematic with AXFR/IXFR

Interesting. I'll take a look. Since I'm running a hidden-master I'm not sure whether it'll be relevant to my specific circumstance but an interesting read either way I'm sure.

EDIT: Oh, that's why this sounded familiar. It's part of PowerDNS. Yeah, I have checked this out when I was running my HA Pi-Hole environment for the lulz.