6 ms·
Duck DNS – free dynamic DNS hosted on AWS
- scim-knox-twox 5y agoThis has nothing in common with DuckDuckGo? DDG (unfortunately) is bigger and bigger with every year. They are developing desktop browser, email proxy etc. I wouldn't be surprised if they'd lunched DDGDNS.
- samtheprogram 5y agoWhy is it unfortunate that DDG is bigger and bigger every year?
- mPReDiToR 5y agoThe larger the crowd the more likely the company is to monetise the service? Or just sell the eyeballs? I'd like to think DDG were too principled to do this, but money can really direct moral compasses in large enough quantities.
- scim-knox-twox 5y agoThat's exactly what I meant :) There are many companies / sites / blogs / YT channels etc that put quantity over quality.
- giorgioz 5y agoIn the past I've tried using the free tier of other DynDNS services but with 2 commercial routers I had it always boiled down to the firmware being crap and having some bug that wasn't working with the free DynDNS. Many people recommend OpenWRT but you need to plan in advance which router you are going to buy to be compatibile with OpenWRT and I never planned so much in advance.
- bullen 5y agoThat's great and all but since dyndns providers are hardcoded in my router this does not help.
- goosedragons 5y agoIf you have a machine running all the time anyways you can have it update the IP instead of the router. They have instructions for a bunch of different ways to do it on various OSs.
- bullen 5y agoThen I rather use my own DNS solution.
- awill 5y agoYou can use DuckDNS through DNSOMatic. That's in many routers. That's what I do
- adrianomartins 5y agoI've been using noip.com for my projects, works quite well except that you have to confirm you still want your noip domain reserved every once in a while. I'll try Duck Dns in my next project. Thanks for the share.
- 1MachineElf 5y agoI'm currently on the search for a service to facilitate DDNS. Duck DNS seems popular, but I'm skeptical of things that are simply offered for free. What assurance do we have that Duck DNS is secure, or that it will not just disappear one day? The alternative that seems better to me is Namecheap with their API.
- ringworld 5y agohttps://freedns.afraid.org https://freedns.afraid.org has been running forever and a day, has thousands (?) of domain names donated for use, two APIs (v1 and v2), and the free tier is subsidized by paying premium members (premium gets extra features). Highly recommended.
- blowfish721 5y agoI went the API way but with Gandi, works like a charm!
- 1MachineElf 5y agoGandi is my registrar! Yes, I'm a fan. I may be mistaken, but something I worry about after trying Gandi's API for Let's Encrypt is the API keys provide permission for everything. I would love it if the permissions could be narrowed down to specific domains, records, and operations on them... AWS Route53 comes to mind, but my router (OPNsense) didn't have it available as an option. :(
- k8sToGo 5y agoWhy does it matter if it just disappears one day if you are not paying for it anyways?
- ectospheno 5y agoI know it is significantly less easy and not free, but wouldn’t a dedicated $6 vps running a level 4 haproxy to get access be a lot safer? A script to ssh to the vps to update your backend ip is pretty trivial.
- k8sToGo 5y agoThis is not a proxy though. Its just a DNS entry.
- passerby1 5y agoJust curious, how does this project pays bills?
- k8sToGo 5y agoDonation. Just like many projects like this.
- Dma54rhs 5y agoIt's not expensive to run a project like this to begin with but donations.
- fuzzfactor 5y agoI wonder about that too. When a pro duck needs another roll of duct tape from his industrial supplier, they just put it on his bill and he's good to go.
- fomine3 5y agoThis service is infamous to be abused by spammer.
- lewantmontreal 5y agoI can imagine. Last year I tried to sign up to create a domain for my home server. Despite having my own IP address and a Google account I pay for recaptcha v3 they use would not let me through.
- zsolt_terek 5y agoThank you. This was exactly what I've been looking for for a while now.
- jzzskijj 5y agoI was quite surprised to learn this has nothing to do with DDG. Interesting how DDG seem to have taken the meaning of "duck" in (my) mind.
- godelski 5y agoWhat's more interesting is that DDG had disputes with Google over the ownership of the duck.com domain. Google was squatting on the domain and redirected it to Google (dirty tactic). But I guess it could just as easily have gone to the Oregon Ducks or some duck based website. (interestingly "ducks.com" doesn't go anywhere for me)
- bil7 5y agogoogle already does enough atrocious things, you don't have to make them up.
- deleted 5y ago[deleted]
- GordonS 5y agoHmm, I remember it differently, with Google redirecting duck.com to DDG, and then later just handing the domain over to them.
- voxadam 5y agoYou're remembering things correctly. The WHOIS record for duck.com shows that it's owned by Duck Duck Go, Inc.
- ca98am79 5y agoGoogle became the owner of Duck.com back in 2010 when it acquired On2 Technologies, a company formerly known as The Duck Corporation. It gifted the domain to DuckDuckGo in 2018
- compsciphd 5y agoone could just pay a small yearly fee to register their domain with google and get easy/unlimited ddns.
- shoelessone 5y agoI don't believe this solves the issue if your IP changes all the time.
- dewey 5y agoWhy not? As OP said you'll get an easy way to update the dns entry with the new IP.
- vetinari 5y agoYou can also host your zone with Hurricane Electric and skip the part about paying a small yearly fee to Google.
- compsciphd 5y agothere's no cost to google besides the registration fee, if it's your zone, you're paying that fee anyways. The only way to not pay a fee is to go through a free dyndns provider that you have to use a hostname off of their zone.
- vetinari 5y agoIs the DNS free, even if you use other registrar than Google? I have some domains with country-specific tlds, and I'm using small registrars there. he.net is free even in this case.
- mlatu 5y agoanyone knows why reddit doesnt like them using the reddit api?
- slig 5y ago>We unfortunately do not allow use of Reddit’s API for account authentication with third-party sites or applications that have no partnership, affiliation, or connection with Reddit. Reddit does not offer or support “log in with Reddit” or “use Reddit” to login services. Use of any sort of button, including a “use Reddit” login button like the one currently featured on your site, is unauthorized.
- Darmody 5y agoI remember using it years ago to be able to point from the outside to a dynamic IP. I used an old Android phone with their app to keep the IP updated. Like the old no-ip but without a PC.
- spants 5y agoIt is a great service - I have been using it for over 6 years now.
- mittermayr 5y agoFor anyone hosting their domain on Google Domains, there's a neat API endpoint they're offering for updating the DNS with a simple CURL. I've been using this for years now for a public Raspberry PI behind a home router that changes IPs every other day. curl -s -k --user "username:password" "https://domains.google.com/nic/update?hostname=yourdomain.com" There's more parameters (and you can specify an IP, the above request only takes the caller's IP). Here are the docs: https://support.google.com/domains/answer/6147083?hl=en#zippy=%2Cuse-the-api-to-update-your-dynamic-dns-record https://support.google.com/domains/answer/6147083?hl=en#zipp...
- petercooper 5y agoI don't know if it's relevant but there was an article the other day about how Google is phasing out username:password logins for most Google related services and APIs, so if you have a script running quietly for years doing this task, it might be worth double checking if it will continue to be fine. (It might be, if this u/p is unique to the domain as the docs suggest - but I thought I'd mention it just in case!)
- sa3dany 5y agoWould enabling 2-factor auth and using an app-specific passowrd in this case still work? worth a try I guess: https://support.google.com/accounts/answer/185833 https://support.google.com/accounts/answer/185833
- imaginator 5y agoThis is with an application specific username/password pair that GoogleDNS gives you. And will only update that specific record.
- nickweb 5y agoIt seems unsafe to me to be passing your username and password over the open every second day. Especially one that links to Google - which for the majority of people is their life. As a side note - will the recent announcement by Google about unsafe logins being denied affect you?
- quyleanh 5y agoI use Cloudflare, and there are also tons of APIs for update IP of DNS configuration.
- vorejdajo 5y agoNew to this. "Practically", it seems the same as ngrok or tor onion services. Is that right?
- remram 5y agoNo. https://en.wikipedia.org/wiki/Domain_Name_System https://en.wikipedia.org/wiki/Domain_Name_System
- vorejdajo 5y agoI'm familiar with DNS and read the FAQ. But, "Practically", it's used for external services(ssh, http) to get to your device. Right? Are there practical use differences?
- remram 5y agoIt's a name system. It allows you to get the name, it does not provide access. You're basically saying "the yellow pages are the same as cell phone towers, they allow you to phone people".
- mattrighetti 5y agoI’ve been using DuckDNS for a couple of years now but one day I discovered that Reddit login is no more so I’m locked out of my account, still works though!
- aidog 5y agoFor some time I kept getting SMS phishing mails with duckdns.org urls here in Japan.
- FastEatSlow 5y agoDuckDNS is sadly often abused for malware and phishing.
- m-s 5y agoI have my own domain and run a Cloudflare Workers endpoint that updates a DNS record. It’s quite simple to run one’s own dDNS service.
- RicoElectrico 5y agoBe aware that Facebook Messenger blocks URLs with duckdns.org as unsafe links. The workaround is probably to find a cheap domain (not free, these are blocked as well) and attach it using CNAME.
- treesknees 5y agoI have been using Cloudflare Tunnel for several months now to get around dynamic DNS requirements and port forwarding. It creates a secure tunnel between your server and their edge, and supports name-based service config (domain X points to localhost Y.) Downside is they only supports HTTP(s). There is a free tier, although you need to provide them a full domain (not a subdomain) for it to work, and then each site/tunnel will create a subdomain. It does work with free domains like .tk if you really want to go that route. https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/create-tunnel/ https://developers.cloudflare.com/cloudflare-one/connections... There are also open-source alternatives using VPNs like Wireguard + nginx, but typically these solutions require you to run a publicly-accessible server already to host the proxy.
- anaganisk 5y agoTunnel is one feature that make me like cloudlfare a lot
- alimbada 5y agoWhy AWS? How about we start building services that work anywhere instead of targeting a platform owned by a company that avoids paying billions in taxes? Edit - I'll leave my original comment up but I originally thought this was a service that users could deploy themselves into their own AWS accounts which it is not. It is, as it says, a DDNS service which is free. The fact that it's hosted in AWS should be neither here nor there.
- deleted 5y ago[deleted]
- eternityforest 5y agoIt kinda gives a sense of how it works. AWS means it's not just a handwritten script on a VPS somewhere, it's probably maintained with lots of automation, etc. It kind of gives it a sense of professionalism for marketing purposes.
- softwarebeware 5y agoHappy user here. DuckDNS is one of those great things that does one thing simply and just works
- ctxc 5y agoTo me, this domain is synonymous with phishing.
- mrguyorama 5y agoI have used DuckDNS for nearly a decade. I highly, highly recommend them. It's never not worked, super simple to set up on any server or always on system, and just is exactly what you want if you're a hobbyist. The only possible downside is that you end up with a url with "duckdns.org" in it, but I don't mind
- eternityforest 5y agoI love DuckDNS but we seriously need a more automated and integrated solution to this kind of thing. It's the missing piece that holds self hosted back. Something that: * Lets you set up a domain with a single command * Handles security for you. There shouldn't be any manual admin needed to make a secure context site * Works offline on the LAN if possible, and on Yggdrasil meshes. I should be able to buy a device, plug it in, then scan the QR code on it's display and be instantly taken to its website, no setup or account creation. Unfortunately the web blocks all insecure requests from within secure contexts, and has no MDNS type functionality, so building a P2P solution with service workers or something is very hard/impossible. DuckDNS is really almost there. It's the security that makes it hard, Let's Encrypt is not exactly consumer grade.
- anaganisk 5y agoWhy is let’sencrypt not consumer grade? I dont think it uses any inferior algorithm. Am I missing something?
- eternityforest 5y agoAn average user probably wouldn't want to set it up though. The security is fine, but it's definitely not plug and play like I'd expect a commercial NAS or something to be.
- anaganisk 5y agoThat is true but then again, it is designed to be used automated afaik may be thats why it became instant hit among developers. There are services like ZeroSSL which would be a better fit for average user.
- dynamohk 5y agoto avoid reverse proxy, dynamic dns to access servers at home, maybe try tailscale to achieve same thing