09:00
-
09:25
-
09:25
Day 2
Running a highly available, ad-blocking, private DNS setup in Kubernetes
<p>DNS is the most critical service that runs on small, client-focused networks. Hosting your own DNS unlocks interesting possibilities: Lower latencies, caching, DHCP hostname integration, and ad and malware blocking just to name a few. However, it also comes with great responsibility: For clients, if DNS is down, the internet is down.</p>
<p>In this session we will explore how we can have all those delightful features while maintaining resiliency and zero-downtime upgrades, using Kubernetes as a platform. We will cover well-established, open source projects such as <a href="https://thekelleys.org.uk/dnsmasq/doc.html">dnsmasq</a> and <a href="https://github.com/DNSCrypt/dnscrypt-proxy">dnscrypt-proxy</a>, explaining what they are, how they work, and how to compose them.</p>
<p>In the platform side of things, we will use Kubernetes and <a href="https://github.com/metallb/metallb/">metallb</a> to provide self-healing, as-code infrastructure and layer 3 failover respectively. Prior experience with Kubernetes is not required to get the most out of this session.</p>