top 50 comments

sorted by: hot top controversial new old
[–] 57 points 1 year ago (10 children)

I've been thinking of setting one up for a while, if I have a home server would I be better off hosting it on that or as a separate device? What are the alternatives to a raspberry pi? They've shot up in price over the years.

  • source
  • hideshow 15 child comments
  • [–] 38 points 1 year ago* (1 child)

    If you have a server running, I wouldn't buy more hardware. They have good example documentation for just such a configuration:

    https://docs.pi-hole.net/docker/

    If your server already has those ports bound (specifically the DNS port 53) you are going to have to get creative; otherwise it'll work well!

    Worst case, a cheapo pi 3 will do the job. At one point I had it running on a pi zero, so hardware requirements are pretty low.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 21 points 1 year ago* (last edited 1 year ago) (3 children)

    If your using docker and the ports are bound you can just use the network mode host so the container gets it's own ip. It's how I have adguard running on my unraid server

    edit: Sorry I mixed up the details as @starkzarn@infosec.pub pointed out. It's a macvlan configuration. My intention was to point out it's possible. Here's some documentation https://docs.docker.com/engine/network/drivers/macvlan/

  • source
  • parent
  • hideshow 4 child comments
  • load more comments (2 replies)
  • [–] 23 points 1 year ago*

    I personally like it on a dedicated Pi simplly because I don't want DNS to die if i'm doing other server maintenance. the Pi is pretty much set it and forget it.

    But i guerss you might as well try it on your server first and you can always buy a Pi if you find it to be too much of a pain.

  • source
  • parent
  • [–] 16 points 1 year ago

    I put it onto my home server and it is working great. I can't tell you about all the options, but it was so easy to start another VM for it that I didn't look at other options too carefully.

  • source
  • parent
  • [–] 9 points 1 year ago

    if you've already got something running 24/7, you could just put it there. it doesn't need much for resources.

    pihole does not need it's own box. it can run as a container (docker instructions in the official docs) or in a small vm.

    i have two small vm running dietpi and used that to install pihole. i fully expected to run a few more things on them, that's why i chose dietpi--just have never gotten that far (it's only been like three years now).

  • source
  • parent
  • [–] 7 points 1 year ago

    Definitely dont bother with buying a pi if you've got other hardware.

    I have one physical (a 3b I had no use for anymore), and two running as containers. The containers do most of the heavy lifting, since they are so much faster than a pi they respond far faster, but the physical is nice for when I take down the clusters for maintenance (or when I lose power, the clusters shut down after about 3 minutes, the pi will keep going for a while on UPS).

  • source
  • parent
  • load more comments (5 replies)
    [–] 50 points 1 year ago (4 children)

    Don't fall for the trap that they recommend an expensive Pi 5: I am running Pi-hole on a Pi 2 but you can basically run this on obsolete hardware, whether that's a Pi or a PC/laptop

  • source
  • hideshow 7 child comments
  • [–] 12 points 1 year ago*

    I'm running Pi-hole and Pi-VPN on a Zero W (using a Geekworm case w/RJ45). It's not very taxing at all.

    I also run two other Pi-hole instances in my server cluster (one in Docker and one in an LXC container). Mostly just for uptime reasons, so I can take any one of them down at any time to perform maintenance and/or upgrade.

  • source
  • parent
  • load more comments (1 reply)
    [+] 47 points 1 year ago* (last edited 1 year ago) (1 child)
  • [–] 43 points 1 year ago (3 children)

    Misleading statement. It doesn't block "traffic", it blocks DNS requests... you don't know how much traffic this corresponds to.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 23 points 1 year ago (6 children)

    Correct. The payload of DNS requests is tiny compared to, say requesting a webpage. So there might not be a huge decrease of bandwidth usage reduction. However, having 66.6% less DNS requests is still a win. The router/gateway doesn't have to work that hard because of the dropped requests.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 29 points 1 year ago (7 children)

    It isn't so much about the payload of the DNS requests, but about the content that would have been loaded if the DNS request hadn't been blocked.

    If you load a page that has 100kB of useful information, but 1MB of banner ads and trackers ... you've blocked a lot more than 66%. But if you block 1MB of banner ads on a page that hosts a 200MB video, you've blocked a lot less.

    Also a 66% blocked percentage seems very high. I have installed pihole on 2 networks, and I'm seeing 1.7% on my own network, but I do run uBlock on almost everything which catches most stuff before it reaches the pihole, and 25% on the other network.

  • source
  • parent
  • hideshow 7 child comments
  • load more comments (7 replies)
  • load more comments (5 replies)
  • load more comments (2 replies)
  • [–] 38 points 1 year ago (12 children)

    I recommend having two. Otherwise your home internet goes down everytime you update or reboot or it crashes.

  • source
  • hideshow 16 child comments
  • [–] 35 points 1 year ago* (9 children)

    Interesting... And this is not a criticism, simply an observation...

    I've a single Pihole instance running on a RPi 4 and have experienced not a single instance of any of the 3 probs you mention. Except, of course, the very few minutes it takes for a reboot which I can schedule and am aware when it's happening...

    🤷‍♂️

  • source
  • parent
  • hideshow 12 child comments
  • [–] 6 points 1 year ago (1 child)

    I didn't have a problem on my Pi-hole for a very long time too. OP has that probably because s/he's using it as a DHCP server as well.

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (6 replies)
  • [–] 6 points 1 year ago (3 children)

    Huh? Typically you have a secondary DNS entry on your router

  • source
  • parent
  • hideshow 5 child comments
  • [–] 10 points 1 year ago* (1 child)

    Secondary DNS is not for redundancy!

    The way secondary DNS works is that a client distributes DNS requests across the primary and secondary DNS servers. So if you have pihole as your primary DNS and, say, 8.8.8.8 as your secondary DNS, you're sending half of your DNS requests to google unfiltered. And if your pihole DNS goes down, half of your DNS queries time out.

    The way to have redundancy with DNS is with a standby server that takes over the IP of the primary server if it goes down. You can do this with keepalived.

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (1 reply)
  • load more comments (1 reply)
  • load more comments (8 replies)
    [–] 23 points 1 year ago (1 child)
  • [–] 9 points 1 year ago* (3 children)

    Raspberry Pi 1b > DietPi > Pi-hole > Unbound <3

  • source
  • hideshow 4 child comments
  • load more comments (2 replies)
    [–] 7 points 1 year ago (2 children)

    I played with a pi-hole setup for a bit. It was nice. I got distracted and set up NextDNS. That’s where I am now.

    I like I can easily turn it on/off when I just need to do something and no time to fuss with it.

    I’ve got a home server, just not fully setup and going yet, but someday…

    Any thoughts on why I might do pi-hole over something like NextDNS? I think the cost is roughly $1/mo.

  • source
  • hideshow 3 child comments
  • [–] 14 points 1 year ago (1 child)

    If that's what you're happy with and works for you, continue.

    Personally, I'm creating an environment in which I'm not dependent on any cloud provider on the front end.

    I do have a cloud backup solution for all my data files on the off chance I lose every single on-site backup and closely-held remote backups (read: not in main building but still on property...).

    Just trying to get away from reliance on the existence of someone else's computer/datacenter...

    🤷‍♂️

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (1 reply)
  • load more comments (1 reply)
    [–] 7 points 1 year ago

    The beauty is that you can shove Pi in it of course.

  • source
  • [–] 6 points 1 year ago (3 children)

    Is it possible to do something like this with a newer router? My wireless-G router is finally dying after 20 years, and if I need to upgrade it'd be nice to wrap it all in one.

  • source
  • hideshow 4 child comments
  • load more comments (2 replies)
    [–] 6 points 1 year ago

    I use adguard home in conjunction with NextDNS.

    I find adguard a little better in the UI department. Have it in a docker container so it's a set and forget.

  • source
  • [–] 5 points 1 year ago (4 children)

    Getting an error trying to access this:

    https://den.dev/blog/pihole has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site.

  • source
  • hideshow 5 child comments
  • load more comments (3 replies)
    load more comments
    view more: next ›