86
submitted 5 months ago by bmebenji to c/selfhosted@lemmy.world

Hi there, I’m looking to get into self-hosting for privacy reasons and I wanted to ask y’all: how inadvisable is it to utilize an ISP-owned router/modem? I feel like they’re able to track everything I do online with their more than likely integrated spyware.

you are viewing a single comment's thread
view the rest of the comments
[-] hendrik@palaver.p3x.de 8 points 5 months ago* (last edited 5 months ago)

Even if you control your router/modem, they still control the other end, it connects to. And some more infrastructure along the path. So i think it depends a bit where you're going with this. If you're worried about them doing packet inspection, or logging IP numbers you connect to, I don't think there's a big difference. They could do it anywhere. And they'll likely do it in some datacenter.

A router interfaces with your local network, though. So in theory a router can be used to connect to your internal devices and computers and maybe you have an open network share without password protection or something like that. But we're talking violating your constitutional rights here. It's highly illegal in most jurisdictions to enter your home and go through your stuff.

I'll buy my own router because I can then configure it to my liking. And my ISP charges way too much for renting one. And what I also do is not use my ISP's DNS service. That'd just send every domain name I open to their logfiles. Instead I use one from OpenNIC

[-] irmadlad@lemmy.world 2 points 5 months ago

Instead I use one from OpenNIC

Fast? How would it compare to the evil Cloudflare?

[-] hendrik@palaver.p3x.de 2 points 5 months ago* (last edited 5 months ago)

I did one DNS query and it took 22 msec with the nearest OpenNIC server and 24 msec with Cloudflare's 1.1.1.1
So dunno... roughly same responsiveness? Maybe OpenNIC is a tad faster? For a proper answer we'd need to do more measurements, though. And with OpenNIC you definitely need to pick a good server, not just any random one. They'll have different locations, different policies and they're in widely different datacenters.

[-] non_burglar@lemmy.world 2 points 5 months ago

That makes sense, since you're in EU and opennic is in DE.

[-] hendrik@palaver.p3x.de 1 points 5 months ago* (last edited 5 months ago)

Isn't it a global effort? According to what I see, they list a bunch of servers in all Europe, USA, Canada, Australia, ...Japan?!

[-] non_burglar@lemmy.world 2 points 5 months ago

Of the tier 1 servers, 2 are in DE and 2 are in USA.

You won't really hit tier2 unless you're trying to hit very specific records.

[-] hendrik@palaver.p3x.de 1 points 5 months ago* (last edited 5 months ago)

I think the Tiers work the other way around. But I keep forgetting how DNS and recursive lookup works and I might be wrong.
I don't think you're supposed to query Tier 1 servers as a client. The Tier 2 servers would be what people connect to and who do the heavy lifting. The Tier 1 just do the root, authoritative stuff and their custom TLDs for the following network. So we're not worried about where those are located.

[-] non_burglar@lemmy.world 2 points 5 months ago

You might be thinking of PKI and certificate trusts.

Tier 1 in DNS terms are high-level peered (peered with other tier 1 servers in major network segments) and just refer requests either downstream or to other tier 1 servers. This is no longer as necessary with CDNs everywhere, and DNS infrastructure no longer has to mirror routing landscapes, but it seems that opennic.org is still organised in this way.

Anecdotally, I switched a small network to use opennic in 2019 and it was a disaster, never again. I see that the DE servers are still being recommended to me in Canada, so I guess nothing has changed. Opennic is an example of a good idea with terrible execution.

[-] hendrik@palaver.p3x.de 1 points 5 months ago* (last edited 5 months ago)

Interesting. Thanks for the info. I'll re-think whether I recommend it to random people around the world, then.

In Germany it's great. I've been using it for many years now. But we have some good/strong hacker organizations, digital sovereignty and privacy groups, nonprofits and some generous IT companies. Maybe it's random private individuals in other countries and they're not as reliable.

Seems right now there's something going wrong anyway. I don't think the amount of "offline" servers is normal. And a good amount of them isn't even offline, but still answer my DNS queries.

[-] irmadlad@lemmy.world 2 points 5 months ago

I'll have to check it out. Thanks.

this post was submitted on 16 Mar 2026
86 points (100.0% liked)

Selfhosted

61475 readers
394 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS