* added Reverse DNS, per Request from @Not_Oles

gDNSd is a geocasting DNS server that directs your visitor to the closest location to them. Say that you have the same web site on web servers in multiple locations, IE: Amsterdam, New York, Los Angel

Though note that the vast majority of certificates are obtained with the HTTP-01 or DNS-01 challenges for authentication. Most tools/services like certbot/cert-manager/similar do not support TLS-ALPN-

I understood some of these words. I guess I need to do more research on gDNS.

Sorry for the delay, I've been working on making automated gDNSd (geocast DNS) install scripts for debian and Ubuntu 20.04. The Centos 7, 8, Alma, and Rocky scripts are already done.

I would like to share our experience regarding Secondary DNS for Plesk server. For the moment It has been pretty straight forward to setup Slave nameservers for Plesk.

Good luck and have fun with geo-DNS

My client wants a server in each of the three regions. The only possibility is to use a DNS with geo-routing.

CDN and DNS are two different things. I was just stating that a CDN cannot replicate an entire web server full of PHP scripts and SQL databases.

My advice: stay away from CDNs unless you really really need it.

Then you manage your DNS at CF. There you create an A record pointing to your web server IP (most likely CF will import this from the previous DNS). If you click the Proxy option icon your traffic wil

(Quote)

What does a CDN have to do with geo-routing users to newly created web servers that are close to them? Did you mean DNS? In any case I would need several servers.

(Quote)

- (CloudFlare?) as a DNS with geo-routing

(Quote)

* one webserver (nginx+php+redis) for each geo area (first only the US, but then -- in a matter of weeks -- we will add EU and Asia, and use a DNS with geo-routing on top of all this)

(Quote)

Even if you block DNS and NTP, there are over 30 other commonly known ways of DDoS amplification attacks. If you want to show sincerity to the provider, limiting the port to 1 Mbps or 20-50GB @ 1Gbps

don't even need full DNS capabilities? Amplification attacks can be somewhat mitigated if DNS ports are blocked. ( 53 )