5 ms·

You might check out .internal instead which was recently approved [1] for local use. [1]: https://en.wikipedia.org/wiki/.internal https://en.wikipedia.org/wiki

You might check out .internal instead which was recently approved [1] for local use. [1]: https://en.wikipedia.org/wiki/.internal https://en.wikipedia.org/wiki/.internal

codetrotter 1y ago
In that case I would prefer naming as <virtual>.<physical-host>.internal So for example phpbb.mtndew.internal And I’d probably still add phpbb.localhost To /etc/hosts on that host like OP does
- nodesocket 1y ago
  I wrote a super basic DNS server in go (mostly fun and go practice) which allows you to specify hosts and ips in a json config file. This eliminates the need for editing your /etc/hosts file. If it matches a host in the json config file it returns that ip, else uses Cloudflare public DNS resolver as a fallback. Please; easy on my go code :-). I am a total beginner with go. https://github.com/nodesocket/godns https://github.com/nodesocket/godns
GrumpyYoungMan 1y ago
The *.home.arpa domain in RFC 8375 has been approved for local use since 2018, which is long enough ago that most hardware and software currently in use should be able to handle it.
- styfle 1y ago
  Why use that over *.localhost which has been available since 1999 (introduced in RFC 2606)
  - bravetraveler 1y ago
    From RFC 2606: The ".localhost" TLD has traditionally been statically defined in host DNS implementations as having an A record pointing to the loop back IP address and is reserved for such use The RFC 8375 suggestion (*.home.arpa) allows for more than a single host in the domain. If not in name/feeling, but the strictest readings [and adherence] too.
- Mountain_Skies 1y ago
  It's ugly and clunky, which is why after seven years it's had very little adoption. Home users aren't network engineers so these things actually do matter even if it seems silly in a technical sense.
- deleted 1y ago
  [deleted]
- radlad 1y ago
  RFC 8375 seems to have approved it specifically to use in Home Networking Control Protocol, though it also states "it is not intended that the use of 'home.arpa.' be restricted solely to networks where HNCP is deployed. Rather, 'home.arpa.' is intended to be the correct domain for uses like the one described for '.home' in [RFC7788]: local name service in residential homenets." The OpenWrt wiki on Homenet suggests the project might be dead: https://openwrt.org/docs/guide-user/network/zeroconfig/hncp_configuration https://openwrt.org/docs/guide-user/network/zeroconfig/hncp_... Anyone familiar with HNCP? Are there any concerns of conflicts if HNCP becomes "a thing"? I have to say, .home.arpa doesn't exactly roll of the tongue like .internal. Some macOS users seem to have issues with .home.arpa too: https://www.reddit.com/r/MacOS/comments/1bu62do/homearpa_is_anyone_else_successfully_using_this/ https://www.reddit.com/r/MacOS/comments/1bu62do/homearpa_is_...
  - onre 1y ago
    > I have to say, .home.arpa doesn't exactly roll of the tongue like .internal. In my native language (Finnish) it's even worse, or better, depending on personal preference - it translates directly to .mildew.lottery-ticket.
    - morjom 1y ago
      It would be more like .mold.ticket
      - onre 1y ago
        Thanks, I always mix up mold and mildew. However, "arpa" is specifically a lottery ticket, whereas there are tickets for concerts, tickets to ride, tickets in Jira etc...
        morjom 1y ago
        Arpa is used for all kinds of random chance things, not specifically for lottery. I feel like ticket would still be the equivalent but I guess that would be more transliteration and opinion than direct translation? Also my view for lottery may be skewed due to the Finnish lottery culture, and how lottery has more meanings in English. Sorry turned ranty.
candiddevmike 1y ago
It would be great if there was an easy way to get trusted certificates for reserved domains without rolling out a CA. There are a number of web technologies that don't work without a trusted HTTPS origin, and it's such a pain in the ass to add root CAs everywhere.
- GoblinSlayer 1y ago
  You can configure them to send requests through http proxy.
MaKey 1y ago
It seems like it has not been standardized yet: > As of March 7, 2025, the domain has not been standardized by the Internet Engineering Task Force (IETF), though an Internet-Draft describing the TLD has been submitted.
- jwilk 1y ago
  It's been reserved by ICANN: https://www.icann.org/en/board-activities-and-meetings/materials/approved-resolutions-special-meeting-of-the-icann-board-29-07-2024-en#section2.a https://www.icann.org/en/board-activities-and-meetings/mater... > Resolved (2024.07.29.06), the Board reserves .INTERNAL from delegation in the DNS root zone permanently to provide for its use in private-use applications.
  - g0db1t 1y ago
    > Resolved (2024.07.29.06) ... I'm too tired, I read it as a IPv4 adress...
alexvitkov 1y ago
Too much typing, and Chromium-based browsers don't understand it yet and try to search for mything.internal instead, which is annoying - you have to type out the whole http://mything.internal http://mything.internal. This can be addressed by hijacking an existing TLD for private use, e.g. mything.bb :^)
- tepmoc 1y ago
  eh, you can just add search domain via dhcp or static configuration and just type out http://mything/ http://mything/ no need to enter whole domain unless you need todo ssl
  - deleted 1y ago
    [deleted]
- nsteel 1y ago
  Isn't just typing the slash at the end enough to avoid it searching? e.g. mything/
  - jeroenhd 1y ago
    mything/ will make the OS resolve various hosts: mything., mything.local (mDNS), mything.whateverdomainyourhomenetworkuses. (which may be what you wanted). If you want to be sure, use mything./ : the . at the end makes sure no further domains are appended during DNS lookup, and the / makes the browser try to access to resource without Googling it.
- thaumasiotes 1y ago
  > Chromium-based browsers don't understand it yet and try to search for mything.internal instead, which is annoying That's hardly the only example of annoying MONOBAR behavior. This problem could have been avoided if we had different widgets for doing different things. Someone should have thought of that.
eddyg 1y ago
.home, .corp and .mail are on ICANN’s “high risk” list so won’t ever be gTLDs, so they are also good (short) options. Ref: https://www.icann.org/en/board-activities-and-meetings/materials/approved-board-resolutions-regular-meeting-of-the-icann-board-04-02-2018-en#2.c https://www.icann.org/en/board-activities-and-meetings/mater...
kevincox 1y ago
*.localhost is reserved for accessing the loopback interface. It is literally the perfect use for it. In fact on many operating systems (apparently not macOS) anything.localhost already resolves to the loopback address.

You might check out .internal instead which was recently approved [1] for local use. [1]: https://en.wikipedia.org/wiki/.internal https://en.wikipedia.org/wiki/.internal

codetrotter 1y ago

In that case I would prefer naming as <virtual>.<physical-host>.internal So for example phpbb.mtndew.internal And I’d probably still add phpbb.localhost To /etc/hosts on that host like OP does

nodesocket 1y ago
I wrote a super basic DNS server in go (mostly fun and go practice) which allows you to specify hosts and ips in a json config file. This eliminates the need for editing your /etc/hosts file. If it matches a host in the json config file it returns that ip, else uses Cloudflare public DNS resolver as a fallback. Please; easy on my go code :-). I am a total beginner with go. https://github.com/nodesocket/godns https://github.com/nodesocket/godns

GrumpyYoungMan 1y ago

The *.home.arpa domain in RFC 8375 has been approved for local use since 2018, which is long enough ago that most hardware and software currently in use should be able to handle it.

styfle 1y ago
Why use that over *.localhost which has been available since 1999 (introduced in RFC 2606)
- bravetraveler 1y ago
  From RFC 2606: The ".localhost" TLD has traditionally been statically defined in host DNS implementations as having an A record pointing to the loop back IP address and is reserved for such use The RFC 8375 suggestion (*.home.arpa) allows for more than a single host in the domain. If not in name/feeling, but the strictest readings [and adherence] too.
Mountain_Skies 1y ago
It's ugly and clunky, which is why after seven years it's had very little adoption. Home users aren't network engineers so these things actually do matter even if it seems silly in a technical sense.
deleted 1y ago
[deleted]
radlad 1y ago
RFC 8375 seems to have approved it specifically to use in Home Networking Control Protocol, though it also states "it is not intended that the use of 'home.arpa.' be restricted solely to networks where HNCP is deployed. Rather, 'home.arpa.' is intended to be the correct domain for uses like the one described for '.home' in [RFC7788]: local name service in residential homenets." The OpenWrt wiki on Homenet suggests the project might be dead: https://openwrt.org/docs/guide-user/network/zeroconfig/hncp_configuration https://openwrt.org/docs/guide-user/network/zeroconfig/hncp_... Anyone familiar with HNCP? Are there any concerns of conflicts if HNCP becomes "a thing"? I have to say, .home.arpa doesn't exactly roll of the tongue like .internal. Some macOS users seem to have issues with .home.arpa too: https://www.reddit.com/r/MacOS/comments/1bu62do/homearpa_is_anyone_else_successfully_using_this/ https://www.reddit.com/r/MacOS/comments/1bu62do/homearpa_is_...
- onre 1y ago
  > I have to say, .home.arpa doesn't exactly roll of the tongue like .internal. In my native language (Finnish) it's even worse, or better, depending on personal preference - it translates directly to .mildew.lottery-ticket.
  - morjom 1y ago
    It would be more like .mold.ticket
    - onre 1y ago
      Thanks, I always mix up mold and mildew. However, "arpa" is specifically a lottery ticket, whereas there are tickets for concerts, tickets to ride, tickets in Jira etc...
      - morjom 1y ago
        Arpa is used for all kinds of random chance things, not specifically for lottery. I feel like ticket would still be the equivalent but I guess that would be more transliteration and opinion than direct translation? Also my view for lottery may be skewed due to the Finnish lottery culture, and how lottery has more meanings in English. Sorry turned ranty.

candiddevmike 1y ago

It would be great if there was an easy way to get trusted certificates for reserved domains without rolling out a CA. There are a number of web technologies that don't work without a trusted HTTPS origin, and it's such a pain in the ass to add root CAs everywhere.

GoblinSlayer 1y ago
You can configure them to send requests through http proxy.

MaKey 1y ago

It seems like it has not been standardized yet: > As of March 7, 2025, the domain has not been standardized by the Internet Engineering Task Force (IETF), though an Internet-Draft describing the TLD has been submitted.

jwilk 1y ago
It's been reserved by ICANN: https://www.icann.org/en/board-activities-and-meetings/materials/approved-resolutions-special-meeting-of-the-icann-board-29-07-2024-en#section2.a https://www.icann.org/en/board-activities-and-meetings/mater... > Resolved (2024.07.29.06), the Board reserves .INTERNAL from delegation in the DNS root zone permanently to provide for its use in private-use applications.
- g0db1t 1y ago
  > Resolved (2024.07.29.06) ... I'm too tired, I read it as a IPv4 adress...

alexvitkov 1y ago

Too much typing, and Chromium-based browsers don't understand it yet and try to search for mything.internal instead, which is annoying - you have to type out the whole http://mything.internal http://mything.internal. This can be addressed by hijacking an existing TLD for private use, e.g. mything.bb :^)

tepmoc 1y ago
eh, you can just add search domain via dhcp or static configuration and just type out http://mything/ http://mything/ no need to enter whole domain unless you need todo ssl
- deleted 1y ago
  [deleted]
nsteel 1y ago
Isn't just typing the slash at the end enough to avoid it searching? e.g. mything/
- jeroenhd 1y ago
  mything/ will make the OS resolve various hosts: mything., mything.local (mDNS), mything.whateverdomainyourhomenetworkuses. (which may be what you wanted). If you want to be sure, use mything./ : the . at the end makes sure no further domains are appended during DNS lookup, and the / makes the browser try to access to resource without Googling it.
thaumasiotes 1y ago
> Chromium-based browsers don't understand it yet and try to search for mything.internal instead, which is annoying That's hardly the only example of annoying MONOBAR behavior. This problem could have been avoided if we had different widgets for doing different things. Someone should have thought of that.

eddyg 1y ago

.home, .corp and .mail are on ICANN’s “high risk” list so won’t ever be gTLDs, so they are also good (short) options. Ref: https://www.icann.org/en/board-activities-and-meetings/materials/approved-board-resolutions-regular-meeting-of-the-icann-board-04-02-2018-en#2.c https://www.icann.org/en/board-activities-and-meetings/mater...

kevincox 1y ago

*.localhost is reserved for accessing the loopback interface. It is literally the perfect use for it. In fact on many operating systems (apparently not macOS) anything.localhost already resolves to the loopback address.