Member OP
Curious about the split here. I run my own authoritative on two small VPSes with hidden primary + secondary at provider, but recursion I outsource to Quad9. YMMV, but the management overhead for full self-host isn't worth it for me, IMO.
What do you all do? Take it with a grain of salt if my setup sounds overcomplicated.
Ngl I just use Vultr's DNS (https://www.vultr.com). For LLM inference workloads DNS is like... the least interesting problem. My nodes need VRAM, not zone transfers. 8x A100s @ 80GB each, now thats worth optimizing
Provider DNS is fine until it isn't, then you learn BGP and anycast real fast I guess.
If I run my own DNS and mess up, does my whole site go down? I have a small shop on Time4VPS and I worry about breaking things.
Right now I just use whatever they give me in the panel. Is that bad?
So the self-hosted DNS I run, na yes, the Complexity is very gemütlich once understood—
The hidden Primary at home, the Secondary at HostHatch, the NOTIFY and AXFR working silent like clockwork. All Nouns deserve Respect, the Zonefile the Master, the Record the Servant.
For what it is worth: 60% self-hosted in my Experience, the Control the Reason, the Provider-DNS the Vendor-Lockin feared.
Yes. Yes it does. I've seen it happen to a friend who fat-fingered an NS record and spent six hours learning how TTLs work the hard way.
For a small shop? Panel DNS is fine. Worry about your backups first.
This. I'm running a Minecraft server on a $3 VPS in Osaka. I use whatever the provider gives me. My players care about TPS, not DNSSEC.
Though I did switch to Cloudflare's 1.1.1.1 for recursion because my ISP's resolver was caching stale records for like a day. (https://www.cloudflare.com)
I run BIND at home for the lab network, but authoritative for production domains stays at deSEC. Swiss company, open source, API works with my Terraform.
Self-hosting DNS is a hobby that becomes a job. I already have a job.
Same here. Malware blocking + no logging + anycast from Melbourne under 15ms. Hard to beat that running your own resolver unless you really want to.
I did try running unbound for a month. The cache hit rate was worse and I had to maintain the root hints. Why?
Real talk. I see people in my GPU cluster Discord spending days on DNS infrastructure for a side project that has no users. Opportunity cost is a thing.
That said, I do run a local unbound on my inference nodes. Docker pulls a lot of domains, caching saves seconds on cold starts.
The Job it is, but the Control the Reward. The Zonefile the Poem, the AXFR the Rhythm.
Yet I confess: the hidden Primary at Home, the Poweroutage the Enemy. UPS the Shield, but the Router the weak Link. Once the IPv4 changed, the Dynamic-DNS the Saviour. I used https://ipinfo.io for that.
For the Recursion: Quad9 also, the 9.9.9.9 the old Friend.
