larryjeong
Member
OP
- Joined:
- Jun 2024
- Posts:
- 179
- From:
- Texas, US
Tired of cloudflare knowing every domain I visit. Got a $3 box from bytemole, 1gb ram 20gb ssd, running debian. Installed cloudflared proxy-dns, pointed my laptop at it, works.
But I want split-horizon. Home lan stuff resolves local, everything else goes doh to quad9. Problem: my router is isp garbage, no custom firmware, no doh support. So lan devices cant use it easily without manual dns entry on each.
Is there a way to make this work for the whole house without buying new hardware? Or am I stuck with per-device config. Budget is tight, $3 is already splurging
$3/year. 128MB RAM. Pure happiness.
steveipw
Member
- Joined:
- Jun 2024
- Posts:
- 163
- From:
- Denver, US
Specs:
- I3-4160
- 500GB WD Blue
- 65W TDP
Run pi-hole + cloudflared local. No dependency on VPS uptime. Your $3 box goes down, whole house loses DNS. For that money you get reliability problems.
zfs send | zfs receive. repeat.
kenji3
Member
- Joined:
- Jul 2024
- Posts:
- 138
- From:
- Osaka, JP
I believe you could configure your existing router's DHCP to hand out your VPS IP as DNS, even without DoH support on the router itself. The devices would query your VPS, which then uses DoH upstream. I run a similar setup in Los Angeles with a RackNerd instance.
The limitation is your ISP router must allow custom DNS in DHCP options. Many do, some lock it.
conbini > datacenter snacks
YuriDavid
Member
- Joined:
- May 2024
- Posts:
- 174
- From:
- Kyiv, Ukraine
---
- option: dhcp override
- check router admin panel
- lan settings
- dns server: [your vps ip]
- NOTE: some isp routers ignore this field
- option: vps as dhcp server
- WARNING: requires vpn tunnel to home
- complexity: high
- failure modes: many
---
- my actual setup:
- router: locked down
- workaround: static dns on each device
- phones: manual wifi config
- laptops: networkmanager
- smart tv: gave up
---
- result: lan-only resolution for static devices
- roaming devices: fallback to cloudflare
- acceptance: partial
indentation is not optional
qasimgsm
Member
BGP dreamer
- Joined:
- Nov 2024
- Posts:
- 20
- From:
- Karachi, Pakistan
The dream of privacy it is noble ji— but the router your enemy it is, not the provider. Split-horizon the soul wants, the firmware locked the door keeps— is it. I tried this dance once, the home network and the distant resolver, the tunnel and the hope— dashes only remained. Now I run local only, the $3 box abandoned, the sleep improved it is
ospf, bgp, babel — speaking all
