How to run a secure DNS server inside a Docker container to pair with AdGuardHome, Pi-Hole, and more.

Running a secure DNS server within a secure Docker container image allows you to run, host, replicate, and change DNS configurations. For example, if you want the default DNS, pull the image first.

Install Docker on Ubuntu/Debian using an automated install script, see: https://github.com/IhebRjeb/automated-docker-install

1. Default DNS: The magrddo/dns-proxy-server github project (recommended) is a secure DNS resolver to start with. It supports authorization, DNS recursion, wildcard, and RFC-1035 compliance

Link: https://github.com/mageddo/dns-proxy-server

Installation steps:

Ad-Blocking: docker run -d --name dns-proxy-server -p 8053:53/udp -p 8053:53/tcp defreitas/dns-proxy-server

Without Ad-Blocking: docker run -d --name dns-proxy-server -p 53:53/udp -p 53:53/tcp defreitas/dns-proxy-server

2. Cloudflare DNS: The qdm12/dns github project is a secure Cloudflare DNS resolver that starts with support for split-horizon DNS, blocking, auto-updates, rebinding protection, and DNSSEC validation

Link: https://github.com/qdm12/dns

Installation steps:

Ad-Blocking: docker run -d --name cloudflaredns -p 8053:53/udp qmcgaw/dns

Without Ad-Blocking: docker run -d --name cloudflaredns -p 53:53/udp qmcgaw/dns

For use with HomeLab Ad-Blocker for customized DNS resolver

1. For AdGuardHome: Login > Menu

> DNS Settings > Enter the DNS port for the Docker container.

2. For Pi-Hole: Login > Settings

> DNS Settings > Enter the DNS port for the Docker container.

Using the /etc/resolv.conf configuration file, consider backing up the file to another location before deleting /etc/resolv.conf, and safely restoring the file requires a script beforehand.

Note: If the systemd-resolved DNS resolver gets stuck, to avoid being locked out entirely if there's no internet connection, run 'systemctl stop systemd-resolved' and disable it on boot using 'systemctl disable systemd-resolved'. Using 'apt remove systemd-resolved' to uninstall it is strongly discouraged.

Comments

Post a Comment

Popular posts from this blog

Updated May 20, 2026: Install DDoS Deflate on Ubuntu/Debian to protect devices and reduce internet resource consumption.

DDoS Deflate is a GitHub repository developed by @jgmdev (Jefferson González) - founded 5 years ago, repository age 7 years or longer. DDoS Deflate is now available on Ubuntu/Debian from GitHub @jgmdev, completely free of charge and without any subscription. Provides long-term DDoS protection anywhere! What is DDoS Deflate used for? It protects devices from high internet resource usage by attackers who often randomly guess IP addresses and manipulate website browsing speeds. To use DDoS Deflate as a firewall and avoid conflicts with iptables, using ufw might cause problems. Choosing FirewallD will not cause any issues. DDoS deflate protection is definitely possible with software installed on Ubuntu/Debian. Using a firewall in conjunction can provide even better protection on public, office, and home Wi-Fi networks. Alternatively, use a 4G LTE router, making sure the firewall is enabled. As mentioned regarding DDoS Deflate; for more information on its features, visit: https://github.com...
Read more

[Full Step-by-Step Guide] How to share OpenVPN from a TP-Link router to an Ubuntu Server and enable IPTable Forwarding to share a VPN connection with multiple devices without configuring or redirecting an HTTP Proxy (for implementation). - Things you should understand beforehand.

Image
After trying a VPN, my IP address changed. If you're using a foreign VPN, you can choose one from the VPNGate website or search for IPSpeed OpenVPN on Google Search. How to configure an OpenVPN client on a TP-Link router and the steps to enable IP forwarding on an Ubuntu server after completion. Note: VPN Client configuration is only functional on devices during setup on a TP-Link router. For sharing on multiple devices, you will need an Ubuntu Server to enable IP forwarding, which requires configuring IPTables. If you are using Squid Proxy with a VPN accessed from a TP-Link router, you can configure and enable an HTTP Proxy if necessary. Edit the interface and change one of the HTTP Proxy transmission modes. An HTTP proxy handles the exchange of information regarding the device or server address, and then forwards it from the device to access the internet. This is useful if multiple devices are sharing a proxy, but it's not complicated. For IPTables, if an HTTP proxy is not ne...
Read more