Tag: dns

AdGuard DNS Sync Across Two Instances

Run two AdGuard Home instances in sync so one dead node does not kill DNS for your whole house. Here is config sync with VRRP failover, done step by step.

DNS-over-HTTPS at Home: cloudflared vs dnscrypt-proxy

cloudflared vs dnscrypt-proxy for encrypted DNS at home, setup steps, threat model, Pi-hole integration, and which one actually fits your home lab setup.

systemd-resolved: The DNS Resolver You're Already Using Wrong

systemd-resolved does way more than mangle /etc/resolv.conf. Here's how its stub resolver, split DNS, DoT, DNSSEC, and resolvectl actually work.

Assume Your App Gets Popped

How to expose a possibly-vulnerable app to the public internet and survive it: rootless containers, a file-integrity tripwire, and zero inbound SSH on the box.

Unbound vs Technitium vs BIND

Picking a recursive DNS resolver for your home lab, Unbound, Technitium, and BIND9 compared on speed, GUI, DNSSEC, and split-horizon.

Pi-hole vs AdGuard Home: Block Ads for Your Whole Network

Browser ad blockers miss half the ads. DNS blocking kills them everywhere, TV, phone, game console, everything. Pi-hole vs AdGuard Home: here's which one to run.

Cloudflare DNS: Beyond Pointing Records

Stop using your registrar's janky DNS panel. Here's how Cloudflare DNS actually works, proxying, DNSSEC, dynamic DNS, and email records that don't break.

DNS Over HTTPS and TLS: Encrypt Your DNS Before Your ISP Sells It

Understand DoH, DoT, and DoQ encrypted DNS protocols and set up self-hosted encrypted DNS with AdGuard Home or Pi-hole. Stop your ISP from logging every domain you visit.