this post was submitted on 02 Nov 2023
50 points (98.1% liked)

Selfhosted

40028 readers
1098 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
ruud
Loki
CannaVet
devve
HybridSarcasm
[email protected]
50
FYI: OPNsense now has pretty (good) Unbound DNS reporting (docs.opnsense.org)
submitted 1 year ago* (last edited 1 year ago) by iodine0320 to c/selfhosted
20 comments fedilink hide all child comments
 

Today I decided I would create some way of visualizing my unbound DNS requests/blocks on OPNsense. Adguard does a good job at this but I have issue with added third party repos and plugins, especially at the router level.

Anyway...since the last time I've dug into this OPNsense has built in Unbound DNS reporting (since 23.1) and it's amazing! Arguably just as good as Pihole or Adguard. Graphs, lists of top blocked and allowed domains, query logs, quick buttons to block or whitelist next to each domain. I'm impressed.

Not sure if this is the right community, but just wanted to share if some of you weren't aware of this option.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 1 year ago (1 children)

That’s cool, so why would someone run pihole/adguard/blocky with unbound?

[–] [email protected] 1 points 1 year ago (1 children)

Not a clue.

Maybe they like the pretty dashboard pihole has.

[–] [email protected] 1 points 1 year ago (1 children)

I pull all my data into Grafana anyway, so dashboarding on any platform holds little attraction for my use case.

That said, my pair of Pi-hole servers pre-dates my OPNsense setup, plus I use a lot of internal hostname resolution for service portability. My single instance of OPNsense doesn't tick all those boxes for DNS.

[–] ikidd 1 points 1 year ago (1 children)

Unbound will do complete domain redirection to another service on itself or individual host overrides if you wanted to do that in the OPNsense box alone. What I like about the host overrides being on the Opnsense box is that you can have DHCP make the clients register their hostnames with Unbound for automatic registration, and if you combine that with IP reservations, it's that much more predictable.

[–] [email protected] 1 points 1 year ago

Yeah, no doubt there's some benefits there. My problem is that I don't (yet) have the storage system to make my Proxmox cluster properly HA. Technically, a hardware fault could still take down my OPNsense instance, whereas I have a secondary Pi-hole running on a RasPi, for redundancy.