c/selfhosted · by pinball_wizard@lemmy.zip · 249d

Recommendations to replace AWS DNS?

I've been de-googling, de-microsofting, and de-Amazoning my life.

One thing I still use for self hosting is AWS Route 53 for Domain Name Services (DNS).

I don't feel ready to self-host DNS.

Do you all have recommendations for reliable and ethical DNS hosting providers?

Or is self hosting some DNS records less of a big deal than I'm imagining?

Advice on either would be welcome. Thank you!

61 points · 27 comments · view on lemmy.world

27 Comments

burning_beard@lemmy.world · 20 pts · 249d (2 replies)

There are plenty of good options out there! Many use Cloudflare, though they are another giant. I've been happy with dsec and freedns, and would recommend both.

Ive used freedns for over a decade; it's simple and straightforward. Their free tier is plentiful, and their subscription costs are reasonable.

I recently moved my self-hosted services to dsec so I could better automate SSL certs. It's been nice and easy too!

immobile7801@piefed.social · 4 pts · 249d

I've been using desec for a couple years as well. Great service and features considering its free.

pinball_wizard@lemmy.zip · 3 pts · 249d

Thank you!

Wxfisch@lemmy.world · 10 pts · 249d (2 replies)

I use cloudflare mostly because I buy my domains through them as they offer at cost domain names for many TLDs. Internally I use PiHole and then just point what I need externally to cloudflare trough a reverse proxy and a DMZ box.

fizzle@quokk.au · 8 pts · 249d (1 reply)

I use cloudflare also but I suspect that OP will find them unfavourable because they're just another giant. I'd like to de-cloudflare myself.

pinball_wizard@lemmy.zip · 5 pts · 249d

Yes. I'm inclined to avoid Cloudflare, if I'm able, for now.

Cloudflare feels like they're doing the same kind of "were too big and cool to pay our staff or think about uptime" that I've been suffering from under AWS, recently.

stratself@lemdro.id · 8 pts · 249d

Desec.io is a solid option - it allows for various types of records like TLSA and SRV. It can also generate scoped API tokens e.g. for "only TXT records of the _acme-challenge subdomain of example.com" to use in automated cert renewals, so pretty good for granularity. It's also a nonprofit.

I think selfhosting DNS is beneficial when you wanna control your own DNSSEC keys, but you'd need to account for high availability and safety. With that, you could do what's called a "hidden primary + public secondary" setup to protect your master DNS data from the public prying. You can even use 3rd-party services like ns-global.zone as your secondaries for redundancy and to reduce load on your infra, too. I recommend Technitium and their guidance if you wanna get started

bmcgonag@lemmy.world · 7 pts · 249d (4 replies)

Just my opinion and experience. Setup a couple of cheap VPS instances, and setup recognition, one primary, one secondary.

non_burglar@lemmy.world · 4 pts · 249d (3 replies)

What do you mean by "recognition"?

frongt@lemmy.zip · 3 pts · 249d

It's probably a typo for replication

bmcgonag@lemmy.world · 1 pts · 249d (1 reply)

Yes, mistyped “replication” and got autocorrected to “recognition”. Sorry, didn’t notice at the time.

non_burglar@lemmy.world · 1 pts · 249d

No worries. But you're talking about zone transfers?

mhzawadi@lemmy.horwood.cloud · 6 pts · 249d

If your looking for a great DNS provider, OVH is rock solid. They also register domains, I have all my domains and zones with them.

Also a dedi and a VPS, also they have an API for DNS updates that can be used to get certificates for internal domains

Cyber@feddit.uk · 5 pts · 249d (1 reply)

Just chiming in with my suggestion - if the company's location also benefits you:

Mythic Beasts

A private UK company which also hosts VPS in US and NL

I've moved my domain here and used their DNS API to remove the need to pay for a couple of DynDNS companys.

0 downtime over... dunno... 5 years?

irmadlad@lemmy.world · 4 pts · 249d

It's refreshing to actually see truth in advertising:

This is a service aimed at hobbyists, and shouldn't be used for nuclear power station command and control systems.

30p87@feddit.org · 3 pts · 249d

servfail.network

zarlin@lemmy.dbzer0.com · 2 pts · 249d

Take a look at Bunny ( https://bunny.net/dns/ ), they're based in Europe with worldwide coverage, and have a lot of other useful services as well.

phil@gotosocial.quokka.today · 2 pts · 249d (1 reply)

@pinball_wizard It'll cause much intake of breath through teeth, but #Cloudflare #DNS might be worth a look.
Possibly easier if you plan to use their tunnels or email forwarding later (more intake of breath heard).

pinball_wizard@lemmy.zip · 3 pts · 249d

It'll cause much intake of breath through teeth,

Made me laugh, thanks.

I forgot CloudFlare does DNS, thank you.

I do think I'll start with something smaller and more independent, for now. If only because I feel like I have been intermittentlt cursing their outages for the last couple of months.

Mulch8304@lemmy.dbzer0.com · 2 pts · 249d

I have used CloudDNS with success in the past.

potatoguy@lemmy.eco.br · 0 pts · 249d (3 replies)

[ removed ]

fizzle@quokk.au · 5 pts · 249d (2 replies)

I think OP wants somewhere to configure a DNS zone, not just a DNS server to query.

potatoguy@lemmy.eco.br · 3 pts · 249d (1 reply)

Got it wrong! Sorry

pinball_wizard@lemmy.zip · 2 pts · 249d

Haha. Yes, I'm looking for a DNS service, at the moment. Thanks anyway!

starshipwinepineapple@programming.dev · -1 pts · 249d

[ removed ]