10 min read
Self-Hosted DNS Resolver on a VPS: Unbound, DoT/DoH and Honest Privacy Limits
Run your own recursive DNS resolver on a VPS with Unbound: DNSSEC, DoT/DoH, ACLs that prevent open-resolver abuse, cache tuning — and what it can't hide.
4 published articles
Run your own recursive DNS resolver on a VPS with Unbound: DNSSEC, DoT/DoH, ACLs that prevent open-resolver abuse, cache tuning — and what it can't hide.
How to register a domain with minimal identity exposure, pick DNS hosting that doesn't leak, and avoid Certificate Transparency and PTR correlation.
A practical VPS migration plan: inventory, DNS TTL, rsync and database cutover, TLS certs, dual-run testing, rollback, and safely decommissioning the old server.
What it really takes to self-host email on a VPS: port 25, PTR records, SPF/DKIM/DMARC alignment, MTA-STS, IP reputation and honest trade-offs.