There are many DNS names options. Which one do you use?

    • masterX244@kbin.social
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      same. saved my ass already a few times when doing some reverseengineering voodoo. being able to set a valid https cert makes it easier to redirect apps than to bypass forced HTTPS. had to pretend to be a update server for something once and patching the URL was enough via getting a cert quickly (using DNS-01 challenge, no exposed ports ever)

  • redcalcium@c.calciumlabs.com
    link
    fedilink
    English
    arrow-up
    19
    ·
    edit-2
    1 year ago

    According to IETF, you should only use .intranet, .internal, .private, .corp, .home or .lan for your private network ( RFC 6762 Appendix G ). Using other TLDs might cause issues in the future, especially since new gTLDs seems to show up every few months or so, which can collide with the TLD you use for your local network.

      • redcalcium@c.calciumlabs.com
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        1 year ago

        Interesting, so this is the latest recommendation? Which is probably why I haven’t seen it in the wild yet, at least in my circles.

        Which means they probably going to cash out release gTLDs for .intranet, .internal, .private, .corp, .home and .lan soon…

    • vegetaaaaaaa@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      1 year ago

      A problem with the .lan TLD (maybe others from this list) is that web browsers do not consider it a TLD when you type it in the address bar, and only show you the option to search for that term in your default search engine. You have to explicitly type https:// before it, to have the option to visit the URL.

      E.g type example.com in the address bar -> pressing Enter triggers going to https://example.com. Type example.lan -> pressing Enter triggers a search for example.lan using your default search engine.

      • distantorigin@kbin.cafe
        link
        fedilink
        arrow-up
        17
        ·
        1 year ago

        Little known trick–or perhaps everyone knows it and is quietly laughing behind my back–with Chromium browsers and Firefox (and maybe Safari, I’m not sure), you can add a slash to the end of an address and it will bypass the search.

        So, for example, my router on the LAN goes by the hostname “pfsense”. I can then type pfsense.lan/ into my address bar and it will bring me to the web UI, no HTTP/s needed.

    • Kata1yst@kbin.social
      link
      fedilink
      arrow-up
      2
      ·
      1 year ago

      I can vouch for the fact that .local stopped working suddenly in most browsers a year or two ago, I was forced to migrate to .internal

  • taladar@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    19
    ·
    1 year ago

    You shouldn’t use .local for your manually defined local domain names if you plan to ever use mdns/avahi/bonjour/zeroconf.

      • Perhyte@lemmy.world
        link
        fedilink
        English
        arrow-up
        8
        ·
        1 year ago

        Hopefully AVM gets to register fritz.box then, because they’ve been setting up their customers with that as their internal domain for ages…

    • Meow.tar.gz@lemmy.goblackcat.com
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 year ago

      I actually use .lan for an internal domain but I guess I could use a real domain with the DNS-01 challenge and have real internal certificates. I had not thought about that until just now.

  • KairuByte@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    1
    ·
    1 year ago

    *.internal.domain.name since ssl certs are easier to get when you’re using an owned domain name.

  • preciouspupp@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    8
    ·
    1 year ago

    There’s a draft rfc that defines “.home.arpa” as an internal. It looks stupid and totally misses the point, but works.

  • SymbolicLink@lemmy.ca
    link
    fedilink
    English
    arrow-up
    6
    ·
    1 year ago

    I bought a .com for like $10 CAD from Cloudflare that uses a URL not linked to me.

    Maybe overly paranoid, but it also makes it easy to get SSL certificates for my lab.

  • MangoPenguin@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    1 year ago

    For local DNS home.arpa is I think what we’re ‘supposed’ to use, but I use .lan

    Only use another domain name if you actually have it registered, like myname.net or something. As a bonus you can then get a wildcard letsencrypt SSL cert for easy HTTPS.

      • MangoPenguin@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 year ago

        Because of interference with existing domains. Say you set a computer on your network to mypc.google.com, that won’t work because the DNS server will lookup google.com as an external domain.

  • Still@programming.dev
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 year ago

    I use either .home or an actual domain that I own (makes it easy for https certs and not having to go out of the network and back in)

  • nsaobserverbot@kbin.social
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    1 year ago

    fritz.box for the machines themselves because Fritz!BOX (although handed out by Pi-Hole),but .lan for anything going over the local proxy towards the same machine for TLS.

    Some machines use my custom domain name instead of .lan, if they need to be accessible from outside. So these last ones go directly over the local proxy internally, but automatically over CloudFlare Tunnel and Authentik when not at home. The proxy being Caddy.