3 ms·
Running your own resolver that points directly to root servers is also an option. https://nlnetlabs.nl/projects/unbound/about/ https://nlnetlabs.nl/projects/unb
by dano 3y ago
Running your own resolver that points directly to root servers is also an option. https://nlnetlabs.nl/projects/unbound/about/ https://nlnetlabs.nl/projects/unbound/about/
It isn't too complicated to set up and provides faster responses than external DNS servers, especially after the cache gets built up a bit.
- mtsr 3y agoIndeed, this is my preferred solution too. Unfortunately this doesn’t protect one from snooping by network intermediaries, although that’s much less of an issue in the EU due to privacy regulations. At least in principle, but it’s hard to be sure.
- midasuni 3y agoRun your own resolver on a vpc (perhaps in a different country, pay with bitcoin, adjust on your level of concern) and WireGuard to it (perhaps WireGuard over a service like mullvad)
- ComputerGuru 3y agoDNS latency sucks.
- xorcist 3y agoNot too complicated is an understatement. It's literally zero configuration unless you want to do something special.
- re5i5tor 3y agoThanks for this, really interesting.