Howdy Everyone!

As I am setting up my infrastructure at home using docker I wanted to ask, is it better to have DNS, something like pi-hole, on my main docker swarm or would it be better to have it on a dedicated machine/docker host separate from the rest of my infrastructure?

Thanks for the input!

  • @wireless_purposely832
    link
    English
    22 months ago

    people often seem to have a misinformed idea that the first item on your dns server list would be preferred and that is very much not the case

    I did not know that. TIL that I am people!

    Do you know if it’s always this way? For example, you mentioned this is how it works for DNS on a laptop, but would it behave differently if DNS is configured at the network firewall/router? I tried searching for more info confirming this, but did not find information indicating how accurate this is.

    • @[email protected]
      link
      fedilink
      English
      12 months ago

      As far as I know it is the default way of handling multiple DNS servers. I’d guess that at least some of the firmware running around treats them as primary/secondary, but based on my (limited) understanding at least majority of linux/bsd based software uses one or the other more or less randomly without any preference. So, it’s not always like that, but I’d say it’s less comon to treat dns entries with any kind of preference instead of picking one out randomly.

      But as there’s a ton of various hardware/firmware around this of course isn’t conclusive, for your spesific case you need to dig out pretty deep to get the actual answer in your situation.

      • @[email protected]
        link
        fedilink
        English
        12 months ago

        For Windows it absolutely is in order of listing however. Typical behaviour is no reply after a second against the primary DNS results in it moving down the list.

        Redundancy aside, this is more important when you span multiple datacenters and always want lookups going to the completely local or most local DC available.

        TIL about the Linux/BSD not having preference though. Good to know.