Re:1.1.1.1: Fast, privacy-first consumer DNS service
by nodesocket on Sunday April 01, 2018 @03:42PM
(#16730034)
Note, from Google Compute Engine use 8.8.8.8 as it should always be faster. I'm guessing the 8.8.8.8 service exists in every Google Cloud region. Even better use the default GCE autogenered DNS IP that they configure in /etc/resolv.conf to get instance name resolving magic.
[ Parent
| on HN ]
Re:1.1.1.1: Fast, privacy-first consumer DNS service
by kentonv on Sunday April 01, 2018 @05:27PM
(#16730533)
Usually best to use 169.254.169.254, which is the magic "cloud metadata address" that talks directly to the local hypervisor (I think?). That will recurse to public DNS as necessary. https://cloud.google.com/compute/docs/internal-dns
Re:1.1.1.1: Fast, privacy-first consumer DNS service
by jkaplowitz on Sunday April 01, 2018 @08:16PM
(#16731333)
I agree that's usually best, but one exception is worth noting: if you want only publicly resolvable results, don't use 169.254.169.254. That address adds convenient predictable hostnames for your project's instances under the .internal TLD.
Also, no need to hardcode that address - DHCP will happily serve it up. It also has the hostname metadata.google.internal and the (disfavored for security reasons) bare short hostname metadata.