How to organize a personal dns server?

Question

Domain Name System

In the light of recent events with Roskomnadzor, the question of a personal DNS server arises. Are there any options so that you can put something on your server, naturally European, to simply redirect requests? Something like implemented in pi-hole. Takes the main information from Google 8.8.8.8 and transfers it to the device in the same way?

Answer 1

Set dnsmasq, write in the config

listen-address=127.0.0.1,192.168.100.1 (или какой у вас будет)
server=1.1.1.1
server=8.8.8.8

On clients, you prescribe its address as a dns server. It is
very desirable not to put it on the Internet with your bare ass, but to connect via VPN, and access only from the VPN network.

Answer 2

Ordinary DNS will not work - if it presses, all unencrypted responses will begin to be replaced. Install dnscrypt-proxy .

Answer 3

Of course I have. It would be nice to use search
https://adguard.com/en/adguard-home/overview.html
deployed in Docker, via Snap, etc.

Answer 4

I don’t know about others, but I myself personally encountered these blocks last week. The Internet stopped working and I could not figure out what was wrong. It turned out that DNS was blocked. Tried dnscrypt and also change to everything. Changed to all DNS that I found on the Internet and none worked.
Here it is important to clarify that they are not blocking as you think. Not selectively Google, Cloudflare, etc. They give access to the Internet only through the provider's DNS and nothing else. All those private and personal DNS become completely useless.
Here's another fresh news Roskomnadzor will cut off the possibility of Internet services ...

Answer 5

It is unlikely that your DNS server will help you. First of all, you need a domain for your DNS server, a VPS with an installed OS and, according to the classics, 2 ns`a. If the whole thing is placed over the hill, then it is not a fact that the IP issued to you will not already be in the address block of the ILV. I myself encountered this, again, it’s not a fact that your DNS, if it is clean, will not be included in the block! Spend some time setting everything up, a little cash and then some frustration (maybe). Here another solution is needed, they write correctly as a variant of dns-proxy ...

Answer 6

Did not quite understand.
What's stopping you from setting up your DNS?
You lift BIND on Linux. Or the DNS service on a Windows server and use it.
It is not even necessary to put it on the Internet, lift it locally. The main thing is that he can send requests to root DNS servers.
This does not require anything other than the operating system and the DNS service itself.
Even on a virtual machine, you can deploy it.
And the domain is not needed, as they write above. And you don’t need to contact Google’s DNS servers either. What's the point if there are root DNS?