DNS Configuration

This section covers how name resolution is handled in the ProxLink homelab using Technitium DNS Server.

Why Technitium DNS?

Technitium DNS Server is an open-source, self-hosted authoritative and recursive DNS server with a web-based management console. It fits a homelab well because it offers:

• Local zones for resolving internal lab hostnames
• Network-wide blocking of ads, trackers, and malicious domains using block lists
• Encrypted upstream resolution with DNS-over-HTTPS and DNS-over-TLS
• Query logging for visibility into what every device is resolving

ProxLink DNS Setup

• Technitium DNS serves as the resolver for devices on the LAN and DMZ; OPNsense hands out its address to clients via DHCP.
• Internal services are registered in a local zone so they can be reached by name instead of IP address.
• External queries are forwarded to upstream resolvers over encrypted protocols.
• DNS query logs are forwarded to Splunk for analysis alongside firewall and VPN logs.