Blog
Guides and deep dives on DNS blocking, encrypted DNS, DNSSEC, high availability and running a DNS sinkhole in your homelab.
Pi-hole's cloudflared DoH Setup Is Deprecated — Here Are Your Options
Pi-hole's cloudflared DoH guide is deprecated as of Feb 2026. Compare every replacement: dnscrypt-proxy, stubby, unbound over TLS, AdGuard Home, and EliHole.
Gravity-Sync Is Archived: High-Availability DNS Options in 2026
Gravity-Sync is archived and Pi-hole v6 broke most sync tools. Compare nebula-sync + keepalived, router secondary DNS, and EliHole's native clustering.
Port 53 Already in Use: Freeing It from systemd-resolved
Fix "port 53 already in use" on Ubuntu and Debian: diagnose systemd-resolved's stub listener, free the port safely, or redirect DNS traffic with iptables.
DNSSEC BOGUS and SERVFAIL: the Complete Troubleshooting Guide
Fix DNSSEC BOGUS and SERVFAIL errors fast: clock drift, stripped RRSIGs, expired signatures, EDNS fragmentation — diagnosed with dig, delv, and DNSViz.