this post was submitted on 29 Nov 2023
6 points (87.5% liked)

Self-Hosted Main

504 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
[email protected]
6
How do you guys DNS? (alien.top)
submitted 11 months ago by [email protected] to c/[email protected]
54 comments fedilink hide all child comments
 

So I've been a pihole user for a long long time....but seeing the advancements in AdGuard Home and some of the nicer UI facets, I was interested in giving it a try. I also have an active directory domain that I need to manage as well.

So, prior to recently, I had routed all DNS requests thought the AD DCs, and their upstream resolver was PiHole, and then Pihole routed to its internal install of cloudflared with DNS over HTTPS to the cloudflare DNS services.

More recently, I changed my DNS services in DNS to point directly to pihole, managed my local dns records in pihole and then used conditional forwarding to my AD DCs for local DNS resolution. The biggest benefit I saw in this adjustment is that I can identify what hosts are making what requests.

More recently than that, I brought Adguard Home into the environment and am using it as a secondary DNS server. I ended up taking it out of the mix for the moment. My thought process was having one DNS server on each of my active VM hosts just in case.....but managing internal DNS records in adguard home is a bit of a pain in the ass, and there is no way to import in bulk.

So, the questions, 1) do you just use one or the other... pihole, vs adguard home.... 2) do you use multiple dns servers or just a single one upstream...3) whats your preferred method of internal dns management in conjunction w/ pihole/adguard home?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 11 months ago (5 children)

I use Adguard. I dumped pi-hole a long time ago and never looked back.

[–] [email protected] 1 points 11 months ago

I get it...it's awesome. Just took a second to wrap my head around some of the nuances that I needed for my environment. But hellz yea, works great. I wish the dashboard had automatic ajax refreshing though.

[–] [email protected] 1 points 11 months ago (2 children)

What made you move away from Pi-Hole?

[–] [email protected] 1 points 11 months ago

Also dumped Pi-hole & moved to AGH over a year now. It's easier to set up. Encrypted DNS (DoT, DoH, DoQ, etc.) supported with no added install. On Pi-hole I have to install Cloudflared for DoH. AGH also has a large number of blocklists to choose from on DNS blocklists setting. You don't have to Google search for it like that of Pi-hole. Adding a blocklist is as simple as clicking on the check box & checking for updates. On Pi-hole you have to go through a couple of steps (gui >tools>update gravity). AGH software update also is very simple. An update notice will show up on top if there's a new update & you just need to click it to update. On Pi-hole you have to login via SSH & issue a pihole -up command to update.

[–] [email protected] 1 points 11 months ago

I moved away from pihole because every time I had a fiddle, I bought down the DNS of my whole house, resulting in lots of stressed children :) the solution I switched to is against the ethos of this sub, but it's good and worth the cost.

[–] [email protected] 1 points 11 months ago (1 children)

ugh. this is my sign, but I'm not happy about it

[–] [email protected] 1 points 11 months ago

If one rando/shill says something sucks you bail out? Hmm.

[–] [email protected] 1 points 11 months ago

What was your reasoning for dumping pi-hole?

[–] [email protected] 1 points 11 months ago

I dumped Pi-hole for Adguard and two technitium dns servers. Personally, I found /r/pihole community toxic. Adguard is also way easier to back up and replicate since the config file is a single yaml file.