Member OP
Is very important question for my setup. I am running authoritative and recursiwe both on same boxes but I am not sure if this is good idea ¿what do you think?
I see many people using Vultr DNS or HostHatch managed DNS but I dont know if I should trust. In my experience self-hosted is more control but more headache jajaja
Please vote: full self-hosted, full outsource, or hybrid? ¡Gracias!
I run hybrid—authoritative self-hosted with anycast, recursive forwarded to trusted resolvers.
Did you test your restore for your zone files? I keep offline copies with the 3-2-1 rule: 3 copies, 2 media types, 1 offsite. DNS is critical infrastructure.
My checklist:
Whatever you choose, test it before you need it.
Member
I run authoritative on-prem with conditional forwarders to Quad9 for recursive, which keeps internal resolution fast without the cache poisoning risk of full recursion. The Linux crowd here will say BIND or Knot is the only valid choice, but AD-integrated zones with secure dynamic updates are genuinely useful for mixed environments. I don't outsource authoritative—too much control loss—but I absolutely don't run open resolvers anymore.
I dont trust anyone with my dns. Self-hosted all the way with powerdns.
Vultr wants $15/month for 5M queries thats robbery. I pay $3 for my VPS and handle 20M queries no problem.
Only thing I outsource is DDoS protection because my provider cant handle big amp attacks. Istanbul traffic is brutal!
I just use whatever my host gives me never thought about it much I used to run bind on my vps but then I forgot to update it and got pwned now I just use the dns that came with my fiberowl reseller account its fine I guess Run-on paragraph incoming: I have like 40 client sites and they all just use the nameservers my host provides and ive never had a problem except that one time when the ttl was like 86400 and I moved servers and everyone was mad at me for a day but thats cpanels fault not mine
Member
I run full self-hosted with hidden primary and secondaries at two APAC locations. Latency to my users is better than any managed DNS I tested.
For recursive I use local unbound with minimal forwarding. I prefer keeping query data in my jurisdiction. Mostly no issue with maintenance if you automate zone signing and monitoring.
