An exploration of Technitium DNS Server, a powerful free and open-source tool that serves as an all-in-one solution for home network management. Unlike traditional setups that require multiple separate tools like Pi-hole for ad-blocking, Unbound for recursive resolution, and a dedicated DHCP server, Technitium integrates these functions into a single, easy-to-manage platform. It offers advanced features such as encrypted DNS, internal DNS zone creation for local devices, split horizon support, and native clustering for redundancy.
This article details how to set up Pi-hole on a Raspberry Pi to block ads network-wide, improving browsing and streaming experiences on all devices.
A Raspberry Pi 5 can transform a home network into a faster, safer, and easier-to-manage system by consolidating DNS, VPN, and monitoring tools into a single, low-power machine.The author implemented Pi-hole (ad blocking & DNS), Unbound (recursive DNS resolver for privacy & speed), and WireGuard (secure VPN for remote access). For monitoring, tools Uptime Kuma, Netdata, or Prometheus with Grafana provide real-time insights into network performance and security.
A detailed exploration of how clients and servers negotiate and bootstrap connections using HTTP/1.1, HTTP/2, and HTTP/3, covering redirects, TLS, ALPN, Alt-Svc, HSTS, and DNS records. It also discusses the complexities of upgrading to HTTP/3 and the behavior of different browsers.
IPShield is a DNS server that checks IP addresses against a blocklist and datacenter ranges. It provides a DNS query service to determine if an IP address is safe, flagged, or belongs to a datacenter.
"network manager can be configured using nmtui in cli."
GUI doesn't have the "ignore automatically obtained DNS parameters", only 'Ignore automatically obtained routes", so you have to use nmtui
GUI doesn't have the "ignore automatically obtained DNS parameters", only 'Ignore automatically obtained routes", so you have to use nmtui
The SVCB and HTTPS resource records allow you to speed up your time-to-first-packet (by basically stuffing the Alt-Svc HTTP header / ALPN TLS extension into the DNS); let you do redirection on the zone apex without using CNAMEs; allow for simple DNS load distribution and failover; obviate HSTS and the cumbersome preloading process; and enable stronger privacy protections via Encrypted Client Hello aka ECH
