this post was submitted on 11 Aug 2025
29 points (93.9% liked)

Selfhosted

50456 readers
342 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

Hi guys! So...I have a self-hosted DNS server. Initially I'd use pihole, with unbound, and the more or less basic blocklists. But from time to time things would start acting wonky. Sometimes a reboot would fix it. Sometimes...not really and I was really not sure what was going wrong, but it was clearly DNS. Changing the clients settings from my own server to something like 9.9.9.9 would immediately get it sorted out.

So I went with an adguard server. In the last few days I've started to notice weird behaviors. Today I've lost the Azure desktop I was connected, and it was very clearly looking like DNS. So I checked...and yup, 9.9.9.9 again would sort it all out. So...I'm not sure what's going wrong. I'm selfhosting these on an LXC container in proxmox. Nothing else seems to have issues connecting, and I see almost no resources being used. Any ideas? Any other DNS server I might be able to try?

Thanks!

you are viewing a single comment's thread
view the rest of the comments
[–] Onomatopoeia@lemmy.cafe 1 points 10 hours ago* (last edited 10 hours ago) (1 children)

Ah, unbound has the root DNS servers hard coded. That's a significant point.

Any reason you couldn't do the same with any other DNS server such as PiHole?

I'm really trying to understand why I'd run two DNS servers in serial, instead of one. All this sounds like it's just a different config that (in the case of unbound) has been built in - is there something else I'm missing that unbound does differently?

Why couldn't you just config the TLD's as your upstream DNS in whatever local DNS server? Isn't that what enterprises do?

[–] InnerScientist@lemmy.world 1 points 8 hours ago* (last edited 8 hours ago)

Because pi-hole asks the configured DNS the whole domain, the root server will promptly because that's not how DNS is supposed to work.

There's a difference between asking about the individual domain parts of the domain to the corresponding authorative DNS server and just sending the whole thing to a root server. If you did that then the root server would get ddosed to death.
Pi-hole can't ask the root servers, it can only forward. Unbound can forward or be authorative or ask using the root servers and go down the chain or do all of those at once.