#Unifi has improved their #UDM DNS implementation significantly. There is DoT/DoH upstreaming and ad blocking.
I decided to give it a try and see how it compares to Pi-Hole.
It has an extensive blocklist by default, but just for tinkering's sake I changed to a custom blocklist following https://frankgroenewoud.nl/oisd-ads-blocking-on-ucg-54b34233ed34 .
It needed some more tweaking with boot scripts:
- Add ipv6 ULA address to LAN interface, so that internal network has a fixed internal address to their ipv6 DNS.
- Add DNS conditional forwarding to internal Windows domain controllers.
- Add a delay to DHCP responses so it acts only as a backup for Winserver DHCPs.
- Inject blocklist updating to cron.
With https://github.com/unifi-utilities/unifios-utilities/tree/main/nspawn-container the customizations survive reboots. This is #UnifiOS v4, so the old boot scripts based on Podman do not work.
So, it's almost comparable to Pi-Hole. UDM can't do regex filtering. There is no support for internal DNS, although it can be added with boot scripts.
#homelab #DNS #DNSMasq #DHCP