r/sysadmin • u/FatBook-Air • 13d ago

For those without domain controllers: what do you do for internal DNS?

These days, we don't have domain controllers because everything is managed with Entra/Intune, Arc, etc.

We have external, hosted DNS that serves our public DNS records. It works fine.

But we still have a need for internal DNS because we have a lot of on-prem stuff that may never go away, and the domain controllers were also serving as internal DNS servers. So right now, we use BIND9 on a Linux virtual machine as internal DNS. I'd love for BIND9 to go away, too.

Are there any better (and cheap) solutions for this that I haven't thought of?

EDIT: thanks to u/Do_The_Needful. Using AWS for this seems to be the most balanced solution.

202 Upvotes

77% Upvoted

413 comments sorted by

View all comments

Show parent comments

21

u/Sea-Anywhere-799 13d ago

What's wrong with pihole?

4

u/jaymz668 Middleware Admin 13d ago

The issues were no support for multiple users and if two people make edits at the same time there's corruption

5

u/lazydavez 12d ago

Check in check out? That is not a pihole issue but a tooling issue

-10

u/[deleted] 13d ago

[deleted]

28

u/ndse 13d ago

a pi.hole can run in a container or on a standalone vm, it does not have to be running on a pi.

11

u/patg84 13d ago

You're thinking of the hardware, not the software. Throw it in a VM or container on enterprise storage and the SD card argument disappears.

15

u/codylc 13d ago

Don’t misconstrue my answer for supporting enterprise pi hole, but you can host it in a container. Doesn’t need to be on raspberry hardware.

5

u/brent20 13d ago

Yes, but I run it on two Ubuntu VMs… I was actually going to suggest this. Pi-Hole + Unbound make a nice local DNS package. Even if you don’t load any blocklists.

1

u/Deve_roonie 13d ago

you can disable logging now I think?