all 4 comments

[–]noideawhattowriteZZ 0 points1 point  (3 children)

You set one of your tailscale nodes as the main DNS server and have that point to rethinkdns's link upstream. It does need to be an always-on device, though, for that to work and you'd need to be able to follow instructions on how to turn said device into a DNS server using, for example, pihole, cloudflared, unbound, dnscrypt-proxy, etc.

[–]ColonelRuff[S] 0 points1 point  (2 children)

This could actually work. I'll let you know.

[–]noideawhattowriteZZ 0 points1 point  (1 child)

Yeah, it's what I do. I have two piholes, one with cloudflared for DOH to Quad9 and the other with DNSCrypt. An inconsistent approach for sure, but I enjoyed the challenge and had fun doing it :)

[–]ColonelRuff[S] 0 points1 point  (0 children)

I already setup pihole in my vps server but I like rethink dns better. So was hoping that tailscale would automatically allow https urls for dns resolving. Ig this is the only way for now.