For DNS zone management I run the following four Authoritative nameservers with DNSSEC support.
| Node | IPv4 | IPv6 | Location |
|---|---|---|---|
| ns.lars-lehmann.net | 213.95.149.188 |
2001:780:250::cafe |
Nürnberg, Germany |
| ns.larsl.de | 185.230.160.63 |
2a0c:2500:572:1354::beaf |
Frankfurt, Germany |
| ns.larsl.eu | 134.255.247.22 |
2a0a:51c0::7ff |
Frankfurt, Germany |
| ns.larsl.net | 37.228.132.211 |
2a06:1c40:3::f1 |
Düsseldorf, Germany |
A Recursive DNS Resolver setup with DNSSEC support consisting of four nodes can be reached via the hostname dns.lars-lehmann.net. The nodes support not only the classic unencrypted DNS queries on port 53, but also DoT (DNS-over-TLS) via port 853 and DoH (DNS-over-HTTPS) via port 443.
For use over port 53 (unencrypted) the following IP must be used:
| Node | IPv4 | IPv6 | Location |
|---|---|---|---|
| DNS01 | 213.95.149.187 |
2001:780:250::beaf |
Nürnberg, Germany |
| DNS02 | 185.230.160.78 |
2a0c:2500:572:1354::cafe |
Frankfurt, Germany |
| DNS03 | 134.255.247.23 |
2a0a:51c0::7fe |
Frankfurt, Germany |
| DNS04 | 37.228.132.139 |
2a06:1c40:3::13 |
Düsseldorf, Germany |
For use with DoT there are two hostnames, the port is 853 in each case.
The hostname dns.lars-lehmann.net returns multiple hosts, possibly including hosts that are currently offline.
The hostname dns-lb.lars-lehmann.net returns only one host that is online, the availability is checked every 60 seconds.
There are two query addresses for use with DoH.
The address https://dns.lars-lehmann.net/dns-query returns multiple hosts, possibly including hosts that are currently offline.
The hostname https://dns-lb.lars-lehmann.net/dns-query returns only one host that is online, the availability is checked every 60 seconds.