There are many DNS names options. Which one do you use?

  • @[email protected]
    link
    fedilink
    English
    62 years ago

    I bought a .com for like $10 CAD from Cloudflare that uses a URL not linked to me.

    Maybe overly paranoid, but it also makes it easy to get SSL certificates for my lab.

  • nicman24
    link
    fedilink
    12 years ago

    nothing as home does work (meaning plain hostname) works by default on openwrt dns

    • KairuByte
      link
      fedilink
      12 years ago

      While this works for most things, you will run into issues with certain software which automatically assume that no TLD means the provided address is incorrect.

      • nicman24
        link
        fedilink
        12 years ago

        Usually adding a slash at the end works if the protocol is http based

  • redcalcium
    link
    fedilink
    English
    19
    edit-2
    2 years ago

    According to IETF, you should only use .intranet, .internal, .private, .corp, .home or .lan for your private network ( RFC 6762 Appendix G ). Using other TLDs might cause issues in the future, especially since new gTLDs seems to show up every few months or so, which can collide with the TLD you use for your local network.

      • redcalcium
        link
        fedilink
        English
        2
        edit-2
        2 years ago

        Interesting, so this is the latest recommendation? Which is probably why I haven’t seen it in the wild yet, at least in my circles.

        Which means they probably going to cash out release gTLDs for .intranet, .internal, .private, .corp, .home and .lan soon…

    • @[email protected]
      link
      fedilink
      English
      5
      edit-2
      2 years ago

      A problem with the .lan TLD (maybe others from this list) is that web browsers do not consider it a TLD when you type it in the address bar, and only show you the option to search for that term in your default search engine. You have to explicitly type https:// before it, to have the option to visit the URL.

      E.g type example.com in the address bar -> pressing Enter triggers going to https://example.com. Type example.lan -> pressing Enter triggers a search for example.lan using your default search engine.

      • distantorigin
        cake
        link
        fedilink
        172 years ago

        Little known trick–or perhaps everyone knows it and is quietly laughing behind my back–with Chromium browsers and Firefox (and maybe Safari, I’m not sure), you can add a slash to the end of an address and it will bypass the search.

        So, for example, my router on the LAN goes by the hostname “pfsense”. I can then type pfsense.lan/ into my address bar and it will bring me to the web UI, no HTTP/s needed.

    • Kata1yst
      link
      fedilink
      22 years ago

      I can vouch for the fact that .local stopped working suddenly in most browsers a year or two ago, I was forced to migrate to .internal

  • Walter_Ego
    link
    fedilink
    English
    122 years ago

    i use my external zone name but have an internal view of the zone inside my lan so records point to local ips.

    • @[email protected]
      link
      fedilink
      English
      22 years ago

      Exactly the same. I’d like to add that my devices still get a .lan TLD from the router.

    • @[email protected]
      link
      fedilink
      English
      32 years ago

      Do you use NAT reflection to avoid issues with mobile devices caching the external IP address?

      • Meow.tar.gz
        link
        fedilink
        English
        22 years ago

        Ah that’s a really good point. I will have to Google this so I can learn how it is done in iptables because I’ve only ever done it with pf on OpenBSD.

      • @[email protected]
        link
        fedilink
        English
        12 years ago

        I’ve never experienced any issues so far, the devices should be flushing the cache on network change in theory.

    • @[email protected]
      link
      fedilink
      English
      2
      edit-2
      2 years ago

      Same here. I have several domains, one is used for servers and email, 2nd for websites, 3rd for messing around (test setups) and a 4th is almost unused now, but with the demise of twitter and reddit I’m thinking of using that one for the fediverse (it’s my username in national tld).

      BTW internal and external dns run on different systems and all private zones are dnssec signed. (Loved the challenge on setting that up correctly)

    • @[email protected]
      link
      fedilink
      English
      32 years ago

      I use subdomains, i.<external domain>, w.<ext> for wifi, few others for vms and containers.

      With wireguard everything just works, and wireguard overhead over wireless is negligible even on wifi6.

      • Meow.tar.gz
        link
        fedilink
        English
        22 years ago

        I agree on WireGuard. It’s clearly the winner in terms of speed for point to point VPN.

    • Kaan
      link
      fedilink
      English
      22 years ago

      Same, I achieve this with Adguard DNS rewrite.

  • @[email protected]
    link
    fedilink
    English
    32 years ago

    I use .lan for everything the router can resolve names for, and .local for Avahi mDNS 😈

    • Meow.tar.gz
      link
      fedilink
      42 years ago

      That will work fine so long as you don’t need services like Avahi and mDNS.

  • @[email protected]
    link
    fedilink
    English
    192 years ago

    You shouldn’t use .local for your manually defined local domain names if you plan to ever use mdns/avahi/bonjour/zeroconf.

    • Meow.tar.gz
      link
      fedilink
      English
      22 years ago

      I actually use .lan for an internal domain but I guess I could use a real domain with the DNS-01 challenge and have real internal certificates. I had not thought about that until just now.

    • Mr_Figtree
      link
      fedilink
      102 years ago

      And .box has been registered as a generic TLD now, so you could run into external .box domains.

      • Perhyte
        link
        fedilink
        English
        82 years ago

        Hopefully AVM gets to register fritz.box then, because they’ve been setting up their customers with that as their internal domain for ages…

  • VerifiablyMrWonka
    link
    fedilink
    34
    edit-2
    2 years ago

    I just bought an actual domain and use that 😅

    As an added bonus, letsencrypt works with no effort.

    • masterX244
      link
      fedilink
      32 years ago

      same. saved my ass already a few times when doing some reverseengineering voodoo. being able to set a valid https cert makes it easier to redirect apps than to bypass forced HTTPS. had to pretend to be a update server for something once and patching the URL was enough via getting a cert quickly (using DNS-01 challenge, no exposed ports ever)