Personal DNS Docker Solution - Revision history

Michael.mast: /* Map Storage and ports */

2019-02-02T21:46:30Z

Map Storage and ports

Michael.mast: /* PiHole */

2018-11-08T12:40:26Z

PiHole

Michael.mast: /* Map Storage and ports */

2018-11-04T15:02:10Z

Map Storage and ports

Michael.mast: /* PiHole */

2018-11-04T14:27:52Z

PiHole

Michael.mast: /* PiHole */

2018-11-03T20:40:51Z

PiHole

Michael.mast: /* Map Storage and ports */

2018-11-03T20:13:11Z

Map Storage and ports

Michael.mast: /* PiHole */

2018-11-03T20:02:44Z

PiHole

Michael.mast: /* Mount Storage */

2018-11-03T19:03:39Z

Mount Storage

Michael.mast: /* Process */

2018-11-03T18:58:46Z

Process

Michael.mast: Created page with "==Purpose== In order to further learn Docker (for the first time essentially) wanted to create a multi-tier solution to "optimizing" my home DNS solution.

Initially..."

2018-11-03T18:39:55Z

Created page with "==Purpose== In order to further learn Docker (for the first time essentially) wanted to create a multi-tier solution to "optimizing" my home DNS solution. Initially..."

New page

==Purpose==
In order to further learn Docker (for the first time essentially) wanted to create a multi-tier solution to "optimizing" my home DNS solution.
 
 
Initially I am thinking
 
 
Router -> NXFilter -> PiHole -> OpenDNS
 
 
Since I am not interested in tracking what device queries which domain, I prefer to use my Ubiquiti Edgrouter as the prefered DNS server for my home network. This makes it easy to swap upstream servers without having to monkey with DHCP.
==Process==
Going to play with the packetworks version of nxfilter docker image first. If it doesn't work for me I will build my own. I would like to mount the existing database and logs into the container to keep setup as minimal as possible. After all, docker images are made to be disposable.

<pre>
docker pull docker.io/packetworks/nxfilter-base
docker run -itd docker.io/packetworks/nxfilter-base
docker exec -it c675111bd776 bash
## .
## ## ## ==
## ## ## ## ===
/""""""""""""""""\___/ ===
~~~ {~~ ~~~~ ~~~ ~~~~ ~~ ~ / ===- ~~~
\______ o __/
\ \ __/
\____\______/
___ _ ____ __
< /_________(_)__ ____ ________ / __ \____ _____/ /_____ _____
/ / ___/ ___/ / _ \/ __ \/ ___/ _ \ / / / / __ \/ ___/ //_/ _ \/ ___/
/ (__ ) /__/ / __/ / / / /__/ __/ / /_/ / /_/ / /__/ ,< / __/ /
/_/____/\___/_/\___/_/ /_/\___/\___/ /_____/\____/\___/_/|_|\___/_/
Alpine Linux 3.1 image. (Linux 4.4.0-77-generic #98-Ubuntu SMP Wed Apr 26 08:34:02 UTC 2017)
- with Java(TM) SE Runtime Environment (build 1.7.0_80-b15)

oot@~ > cat /etc/os-release
NAME="Alpine Linux"
ID=alpine
VERSION_ID=3.1.4
PRETTY_NAME="Alpine Linux v3.1"
HOME_URL="http://alpinelinux.org"
BUG_REPORT_URL="http://bugs.alpinelinux.org"

root@~ > head /nxfilter/readme.txt
*****************************************************************
NxFilter v4.3.2.7
Author : Jinhee Lee
Homepage : http://www.nxfilter.org
Contact : support@nxfilter.org
*****************************************************************

NxFilter is a property of Jahastech.

</pre>
So far so good. It was nice to see the latest version listed as my current instance was 4.2.3. Now I needed to shutdown everything, and re-run the container mounting the following
*/nxfilter/backup
*/nxfilter/db
*/nxfilter/log
to my primary storage backend.

@@ Line 59: / Line 59: @@
 to my primary storage backend.
 <pre>
-docker run -itd --name nxfilter1 -v /raid5/services/nxfilter/backup:/nxfilter/backup -v /raid5/services/nxfilter/db:/nxfilter/db -v /raid5/services/nxfilter/log:/nxfilter/log -p 192.168.11.120:53:53/udp -p 192.168.11.120:80:80 -p 192.168.11.120:443:443 --restart unless-stopped a23f0f927739
+docker run -itd --name nxfilter1 \
 </pre>
 At the same time I mapped relevant ports. For now I am passing through the ports from the host IP since that was what I did previously. Eventually I want to set this up to bridge to my LAN so I free up the ports for other things.

← Older revision		Revision as of 12:40, 8 November 2018
Line 107:		Line 107:
	</pre>		</pre>
	Which allowed me to update my nxfilter dns config with the new upstream IP address of 172.17.0.3. This worked.		Which allowed me to update my nxfilter dns config with the new upstream IP address of 172.17.0.3. This worked.
		+	<br>
		+	==Just for fun, AdGuard==
		+	Next I wanted to play around with AdGuard<ref> https://adguard.com/en/adguard-dns/overview.html</ref> DNS blocking. I am skeptical about these people, but no harm done using them at home. Updated pihole to use them as upstream DNS.
		+	<pre>
		+	docker exec pihole sed -i 's/PIHOLE_DNS_1=8\.8\.8\.8/PIHOLE_DNS_1=176\.103\.130\.130/; s/PIHOLE_DNS_2=8\.8\.4\.4/PIHOLE_DNS_2=176\.103\.130\.131/' /etc/pihole/setupVars.conf
		+	docker restart pihole
		+	</pre>
		+	So now I have
		+	*NXFilter Ad blocking -> PiHole -> Adguard

@@ Line 59: / Line 59: @@
 to my primary storage backend.
 <pre>
-docker run -itd --name nxfilter1 -v /raid5/services/nxfilter/backup:/nxfilter/backup -v /raid5/services/nxfilter/db:/nxfilter/db -v /raid5/services/nxfilter/log:/nxfilter/log -p 192.168.11.120:53:53/udp -p 192.168.11.120:80:80 -p 192.168.11.120:443:443 a23f0f927739
+docker run -itd --name nxfilter1 -v /raid5/services/nxfilter/backup:/nxfilter/backup -v /raid5/services/nxfilter/db:/nxfilter/db -v /raid5/services/nxfilter/log:/nxfilter/log -p 192.168.11.120:53:53/udp -p 192.168.11.120:80:80 -p 192.168.11.120:443:443 --restart unless-stopped a23f0f927739
 </pre>
 At the same time I mapped relevant ports. For now I am passing through the ports from the host IP since that was what I did previously. Eventually I want to set this up to bridge to my LAN so I free up the ports for other things.

@@ Line 67: / Line 67: @@
 <pre>
 docker pull docker.io/pihole/pihole
-docker run -d --name pihole --link nxfilter1:nxfilter1 -e ServerIP=192.168.11.200 docker.io/pihole/pihole
+docker run -d --name pihole --link nxfilter1:nxfilter1 -e ServerIP=192.168.11.200 --restart unless-stopped docker.io/pihole/pihole
 </pre>

@@ Line 67: / Line 67: @@
 <pre>
 docker pull docker.io/pihole/pihole
+docker run -d --name pihole --link nxfilter1:nxfilter1 -e ServerIP=192.168.11.200 docker.io/pihole/pihole
 </pre>

← Older revision		Revision as of 20:02, 3 November 2018
Line 64:		Line 64:
	==PiHole==		==PiHole==
	Now the fun part. I want pihole to be the upstream to NXFilter, it seems to have better adblocking capabilities.		Now the fun part. I want pihole to be the upstream to NXFilter, it seems to have better adblocking capabilities.
		+	<pre>
		+	docker pull docker.io/pihole/pihole
		+
		+	</pre>

@@ Line 52: / Line 52: @@
 </pre>
-==Mount Storage==
+==Map Storage and ports==
 <ref>https://docs.docker.com/storage/bind-mounts/#start-a-container-with-a-bind-mount</ref>So far so good. It was nice to see the latest version listed as my current instance was 4.2.3. Now I needed to shutdown everything, and re-run the container mounting the following
 */nxfilter/backup
@@ Line 61: / Line 61: @@
 docker run -itd --name nxfilter1 -v /raid5/services/nxfilter/backup:/nxfilter/backup -v /raid5/services/nxfilter/db:/nxfilter/db -v /raid5/services/nxfilter/log:/nxfilter/log -p 53:53/udp -p 80:80 -p 443:443 a23f0f927739
 </pre>

Personal DNS Docker Solution - Revision history

Michael.mast: /* Map Storage and ports */

Michael.mast: /* PiHole */

Michael.mast: /* Map Storage and ports */

Michael.mast: /* PiHole */

Michael.mast: /* PiHole */

Michael.mast: /* Map Storage and ports */

Michael.mast: /* PiHole */

Michael.mast: /* Mount Storage */

Michael.mast: /* Process */

Michael.mast: Created page with "==Purpose== In order to further learn Docker (for the first time essentially) wanted to create a multi-tier solution to "optimizing" my home DNS solution. Initially..."

Michael.mast: Created page with "==Purpose== In order to further learn Docker (for the first time essentially) wanted to create a multi-tier solution to "optimizing" my home DNS solution.

Initially..."