Recommendations to replace AWS DNS?
from pinball_wizard@lemmy.zip to selfhosted@lemmy.world on 15 Dec 00:22
https://lemmy.zip/post/55017093

I’ve been de-googling, de-microsofting, and de-Amazoning my life.

One thing I still use for self hosting is AWS Route 53 for Domain Name Services (DNS).

I don’t feel ready to self-host DNS.

Do you all have recommendations for reliable and ethical DNS hosting providers?

Or is self hosting some DNS records less of a big deal than I’m imagining?

Advice on either would be welcome. Thank you!

#selfhosted

threaded - newest

bmcgonag@lemmy.world on 15 Dec 00:42 next collapse

Just my opinion and experience. Setup a couple of cheap VPS instances, and setup recognition, one primary, one secondary.

non_burglar@lemmy.world on 15 Dec 02:11 collapse

What do you mean by “recognition”?

frongt@lemmy.zip on 15 Dec 04:16 next collapse

It’s probably a typo for replication

bmcgonag@lemmy.world on 15 Dec 13:27 collapse

Yes, mistyped “replication” and got autocorrected to “recognition”. Sorry, didn’t notice at the time.

non_burglar@lemmy.world on 15 Dec 14:38 collapse

No worries. But you’re talking about zone transfers?

burning_beard@lemmy.world on 15 Dec 00:43 next collapse

There are plenty of good options out there! Many use Cloudflare, though they are another giant. I’ve been happy with dsec and freedns, and would recommend both.

Ive used freedns for over a decade; it’s simple and straightforward. Their free tier is plentiful, and their subscription costs are reasonable.

I recently moved my self-hosted services to dsec so I could better automate SSL certs. It’s been nice and easy too!

pinball_wizard@lemmy.zip on 15 Dec 03:02 next collapse

Thank you!

immobile7801@piefed.social on 15 Dec 04:21 collapse

I’ve been using desec for a couple years as well. Great service and features considering its free.

Wxfisch@lemmy.world on 15 Dec 00:54 next collapse

I use cloudflare mostly because I buy my domains through them as they offer at cost domain names for many TLDs. Internally I use PiHole and then just point what I need externally to cloudflare trough a reverse proxy and a DMZ box.

fizzle@quokk.au on 15 Dec 02:26 collapse

I use cloudflare also but I suspect that OP will find them unfavourable because they’re just another giant. I’d like to de-cloudflare myself.

pinball_wizard@lemmy.zip on 15 Dec 03:04 collapse

Yes. I’m inclined to avoid Cloudflare, if I’m able, for now.

Cloudflare feels like they’re doing the same kind of “were too big and cool to pay our staff or think about uptime” that I’ve been suffering from under AWS, recently.

[deleted] on 15 Dec 01:08 next collapse

.

[deleted] on 15 Dec 01:56 next collapse

.

fizzle@quokk.au on 15 Dec 02:29 collapse

I think OP wants somewhere to configure a DNS zone, not just a DNS server to query.

potatoguy@lemmy.eco.br on 15 Dec 02:33 collapse

Got it wrong! Sorry

pinball_wizard@lemmy.zip on 15 Dec 03:02 collapse

Haha. Yes, I’m looking for a DNS service, at the moment. Thanks anyway!

msokiovt@lemmy.today on 15 Dec 02:40 next collapse

I have some options: AdGuard (Cypress), ControlD (Austria), Mullvad (Sweeden), and Quad9 (Switzerland) come to mind.

pinball_wizard@lemmy.zip on 15 Dec 02:56 next collapse

Thank you!

stratself@lemdro.id on 15 Dec 03:09 collapse

Those are not authoritative DNS providers where you can publish records…

msokiovt@lemmy.today on 15 Dec 19:47 collapse

All of them, as far as I’m aware, are no-log. That’s why I made those recommendations.

phil@gotosocial.quokka.today on 15 Dec 00:36 next collapse

@pinball_wizard It'll cause much intake of breath through teeth, but #Cloudflare #DNS might be worth a look.
Possibly easier if you plan to use their tunnels or email forwarding later (more intake of breath heard).

pinball_wizard@lemmy.zip on 15 Dec 02:59 collapse

It’ll cause much intake of breath through teeth,

Made me laugh, thanks.

I forgot CloudFlare does DNS, thank you.

I do think I’ll start with something smaller and more independent, for now. If only because I feel like I have been intermittentlt cursing their outages for the last couple of months.

stratself@lemdro.id on 15 Dec 04:49 next collapse

Desec.io is a solid option - it allows for various types of records like TLSA and SRV. It can also generate scoped API tokens e.g. for “only TXT records of the _acme-challenge subdomain of example.com” to use in automated cert renewals, so pretty good for granularity. It’s also a nonprofit.

I think selfhosting DNS is beneficial when you wanna control your own DNSSEC keys, but you’d need to account for high availability and safety. With that, you could do what’s called a “hidden primary + public secondary” setup to protect your master DNS data from the public prying. You can even use 3rd-party services like ns-global.zone as your secondaries for redundancy and to reduce load on your infra, too. I recommend Technitium and their guidance if you wanna get started

mhzawadi@lemmy.horwood.cloud on 15 Dec 06:46 next collapse

If your looking for a great DNS provider, OVH is rock solid. They also register domains, I have all my domains and zones with them.

Also a dedi and a VPS, also they have an API for DNS updates that can be used to get certificates for internal domains

Cyber@feddit.uk on 15 Dec 07:20 next collapse

Just chiming in with my suggestion - if the company’s location also benefits you:

Mythic Beasts

A private UK company which also hosts VPS in US and NL

I’ve moved my domain here and used their DNS API to remove the need to pay for a couple of DynDNS companys.

0 downtime over… dunno… 5 years?

irmadlad@lemmy.world on 15 Dec 13:43 collapse

It’s refreshing to actually see truth in advertising:

This is a service aimed at hobbyists, and shouldn’t be used for nuclear power station command and control systems.

zarlin@lemmy.dbzer0.com on 15 Dec 10:07 next collapse

Take a look at Bunny ( bunny.net/dns/ ), they’re based in Europe with worldwide coverage, and have a lot of other useful services as well.

30p87@feddit.org on 15 Dec 12:46 next collapse

servfail.network

Mulch8304@lemmy.dbzer0.com on 15 Dec 19:41 collapse

I have used CloudDNS with success in the past.