Linux for your taste (sorry Naw :D) (13 Viewers)
- Thread starter /usr/bin
- Start date
You guys run graphical linux but if you want to explore into a real linux pick up linux server and you see how that would be different. I recently got a job to work on Web server, Dns remotely. Although it's not permanently, Linux Servers(Centos and Ubuntu) They have given me. I work on them through SSH. No graphical environment and i have to run commands on terminal. iptables, CFS, Bind and some other linux services are running on them.
I think you're a regular user and run Linux for daily activity with GI which makes Linux easier to work with. I work with Linux Servers like Ubuntu and Redhat and only have command line cuz I run Web Services like Apache and Nginx and other Platforms & Servers based on Linux.
Currently I spend a lot of time on Iptable and UFW and configuring rules and also managing them when it's required for troubleshooting.
Currently I spend a lot of time on Iptable and UFW and configuring rules and also managing them when it's required for troubleshooting.
Last edited:
Has anyone experienced working with DNS based on Linux distro or Docker base?
We're currently running Microsoft DNS. The company has about 250 users and I'm starting to think about switching to another DNS server for Internet users. Since there are many open source DNS servers it would be difficault task to choose one, Some like Knot DNS, PowerDNS, dnsmasq, MaraDNS and etc. besides, I am quite familiar with linux command line and have worked with linux services before.
@mjromeo81 @Ali
We're currently running Microsoft DNS. The company has about 250 users and I'm starting to think about switching to another DNS server for Internet users. Since there are many open source DNS servers it would be difficault task to choose one, Some like Knot DNS, PowerDNS, dnsmasq, MaraDNS and etc. besides, I am quite familiar with linux command line and have worked with linux services before.
@mjromeo81 @Ali
BIND is a well-proven DNS server and has long been the standard in Linux environments. That being said, BIND can be complex to configure, maintain, and secure. I think the other DNS servers you mentioned are probably more "user-friendly", but for something critical like DNS, personally I will choose the more battle-tested solution. I must admit I'm a DBA not a full-blown Linux sysadmin though.
Regarding your current Microsoft DNS setup, is it public-facing? If so, have you considered a hosted DNS solution for public resolution, such as Cloudflare? It’s hard not to recommend Cloudflare for hosting public DNS records, especially since they can offer so much in terms of security and performance. But with all technical decisions, there are trade-offs to be considered. For internal DNS, on-premises is definitely the way to go.
One word of advice - be careful whenever you touch DNS. There's a reason the meme goes, 'It's always DNS!'"
Regarding your current Microsoft DNS setup, is it public-facing? If so, have you considered a hosted DNS solution for public resolution, such as Cloudflare? It’s hard not to recommend Cloudflare for hosting public DNS records, especially since they can offer so much in terms of security and performance. But with all technical decisions, there are trade-offs to be considered. For internal DNS, on-premises is definitely the way to go.
One word of advice - be careful whenever you touch DNS. There's a reason the meme goes, 'It's always DNS!'"
Thx for the great response,
Actually, the current DNS server is installed along with Domain controller and established for both local and Internet, But using local dns for internet is not recommended and is exposed to cyber attacks so I want to set up a separate server for internet users. Since access to cloudfare services is not possible directly in Iran due to sanctions we are working with a company to provide the service. The network topology is such that we have several web services and have published on the internet through Fortigate firewall and IP valids.
I really need a server/service to provide me log and monitoring features, I worked with Pi-hole but it wasn't it wasn't a satisfying experience and I had some problems with it. As you said BIND may be a good option for the current situation.
Actually, the current DNS server is installed along with Domain controller and established for both local and Internet, But using local dns for internet is not recommended and is exposed to cyber attacks so I want to set up a separate server for internet users. Since access to cloudfare services is not possible directly in Iran due to sanctions we are working with a company to provide the service. The network topology is such that we have several web services and have published on the internet through Fortigate firewall and IP valids.
I really need a server/service to provide me log and monitoring features, I worked with Pi-hole but it wasn't it wasn't a satisfying experience and I had some problems with it. As you said BIND may be a good option for the current situation.