4 ms·
I run a local white list cache, so when Comcast fails, I've got a big local cache, but I upstream to 1.1.1.1 and 8.8.8.8 and root-DNS if needed.
by djbusby 3y ago
I run a local white list cache, so when Comcast fails, I've got a big local cache, but I upstream to 1.1.1.1 and 8.8.8.8 and root-DNS if needed.
- yjftsjthsd-h 3y agoI know what a caching dns server is, but what's a whitelist cache?
- djbusby 3y agoOnly resolves names that are allowed. Basically, a reject-list is too hard to maintain - a growing list everyday! But a permit-list is small(er) and finite; easy to expand for a fews hours/days when needed. It keeps my home network much quieter; blocks nearly all bullshit (ads, malware, etc) and is easier to maintain.
- yjftsjthsd-h 3y agoSo you only allow devices on your network to resolve domains on your predefined list? I'm surprised that that's easier to maintain than a reject-list, although I'll grant that it's safer.
- djbusby 3y agoCorrect. And it's trivial to add a new name, if I need to; just lookup a special name to add the other name.