I was thinking (I know it’s dangerous) ‚could we use #DNS to provide more information?

E.g. provide a link to a logo for a given domain or contact information for businesses‘. Or any #microTagging information,

I found out that the TEXT record type can do that and is used to do similar things. But wouldn’t a dedicated label / value record type a better solution?

The more important question probably is ‚should we do this?‘ and ‚is there already a solution I don’t know about?‘

What's the go-to for a simple to administer, caching DNS server these days?

Platform either macOS or OpenBSD.

Stuff a #Pihole in your #router because your #browser is about to betray you
You could be forgiven for feeling #webbrowser suppliers are actively working to make us trust them less.
#Mozilla bought an #ad company; this month, removed its promise not to sell your info.
https://www.theregister.com/2025/03/08/pi_hole_6_flyby/
Mozilla sells #ads, #Google limits blocking-time for stricter measures
Pi-hole takes over as your network name server, and silently redirects all web requests to known ad-server addresses to a #DNS sinkhole.

DNS is a distributed naming system that converts human-readable domain names into IP addresses. It works through a hierarchy of name servers, each handling part of the domain space, guiding queries step-by-step until the correct IP is found

Here is an illustration of how DNS works #technology #dns #sysadmin

Find high-res pdf books with all my networking related infographics at https://study-notes.org

#DNS
deloitte.com now way over oracle.com for "largest TXT RRset ever".

Now that I have my local DNS trapping and blocklist working I can probably shift my resolver's DoT upstream off of Quad9.

Anything people recommend?

“Evaluating The Effects Of Anycast On DNS Root Nameservers”: https://www.ripe.net/publications/docs/ripe-393/

some interesting statistics for (among other things) reliability of stateful (TCP) connections on anycast nodes, specifically in the context of DNS.

it is from 2006, so i wonder how numbers have changed in the mean time.

Version 1.23.0-0 of our #unbound docker image was released by madnuttah-bot yesterday!

#OpenSSL has been updated to 3.5.0 after testing in the #canary image, too.

https://github.com/madnuttah/unbound-docker

https://hub.docker.com/r/madnuttah/unbound

@nlnetlabs

#foss #opensource #selfhosting # homelab #dns #dnssec

With a goal of simplifying enterprise network security, Infoblox and Google Cloud partner on DNS security solutions
https://www.admin-magazine.com/News/Infoblox-and-Google-Cloud-Partner-on-DNS-Security-Solutions?utm_source=mam
#Infoblox #Google #security #DNS #enterprise #networking

Thinking about #DNS recently...

How do you pronounce "AAAA", anyway?

Things I learnt about DNS:

1. You can't "redirect" an entire domain with CNAME, only subdomains, which is why my website has been broken.

2. You can't specify an AAAA record and use a wildcard for the A record. You have to explicitly put both.

If the IP changes, you have to change it everywhere. I wonder if there is a modern DNS server which lets you avoid this sort of data duplication.

NSD 4.12.0 is now available. Our authoritative #DNS server now offers Prometheus metrics, along with several other enhancements. https://github.com/NLnetLabs/nsd/releases/tag/NSD_4_12_0_REL

Unbound 1.23.0 is now available. Our #DNS resolver now features ‘fast reload’, allowing it to read the new config in a thread, and when done only briefly pauses the server to update the settings. This version also contains redis replica support, DNS Error Reporting, and several bug fixes. https://nlnetlabs.nl/news/2025/Apr/24/unbound-1.23.0-released/

The entire domestic LAN (plus VPN clients attached to Wireguard) has been reworked and is now under PiHole again.

insert feels good man meme

. BENTLEY registered 2015-JUL-09, killed yesterday.

https://mastodon.social/@diffroot@mastodns.net/114388791216201848

#DNS
Et, sinon, le domaine de premier niveau (TLD) .ලංකා déménage, il passe de l'université à une boite commerciale.
https://www.iana.org/domains/root/db/xn--fzc2c9e2c.html

Die URLs filmpalast.to und serienfans.org sind offenbar von einer DNS-Sperre betroffen.

In #Firefox oder #LibreWolf kann man in den Einstellungen bei "DNS über HTTPS" die Option "Maximaler Schutz" auswählen.

about:preferences#privacy

hdfilme.my scheint nicht betroffen zu sein.

#dnscap v2.3.1 released!
- fix 64bit time structures on 32bit platforms
- require libpcap with `DLT_LINUX_SLL2` support
^JL
#DNS #Capture #PCAP #OpenSource
https://github.com/DNS-OARC/dnscap/releases/tag/v2.3.1