If you don't want all the traffic flowing over the VPN, you can use the added guide https://github.com/pi-hole/pi-hole/wiki/OpenVPN-server:-Only-route-DNS-via-VPN to just route the DNS over VPN.

I use dynamic DNS too, I only allow dns request from the 2 /24 IP from my ISP.

(Quote)

But does pi-hole expose me to DNS reflection attacks, etc.?

Don't they auto-assign a static dns name for your server, regardless of what ipv6 you get provisioned?

- SSD network- upto 200 Free SSL for cPanel servers- Awesome real-time monitoring- Instant setup with a control panel- 99.99%+ Uptime guarantee- And lots more - SolusVM Control Panel.- Multiple OS s

* Free DNS manager

Now, if you have shared hosting (I guess you are the type of guy that is using services like GoDaddy or Hostgator), you just have to point your MX records from your domain to the CPanel account and i

Wondering whether people would prefer a crappy shared hosting (using vestacp and overage resources from reseller accounts I have) or prefer a tiny IPv6 only VPS to use for webhosting along with CF DNS

Thanks for the suggestions. This is not a VPS. I would prefer to avoid redirecting DNS.

(Quote)

I know you're planning to use this as an fill-in for a production server but periodically repointing DNS might be easier than maintaining a VPS.

If you are creating a public DNS server, make sure it is not vulnerable to DNS amplification attacks. I don't know if Power DNS already has measures against it in the default configuration in the guid

(Quote)

From your experience, do you think 3 servers on different VPS would be sufficient to setup a reliable DNS system. What are the basic specs for the server to install PowerDNS? The docs don't seem to gi

Host your own DNS with PowerDNS on CentOS 7

work. Apart from verify your domain, either by dns record or uploading file or fill the ftp details, the certificate is generated easily.

* 4 usable IPv4 addresses on Private VLAN with Reverse DNS

* DNS: customers can host their domains on our advanced DNS platform, which supports geo-targeting and automatic failover.

Depending on what you use for DNS, validating the domain for Let's Encrypt via DNS might also be an option. https://serverfault.com/questions/750902/how-to-use-lets-encrypt-dns-challenge-validation ha