Overview
The BasementBuild DNS infrastructure is designed for sub-millisecond resolution and maximum redundancy. It utilizes a three-tier resolution triad managed by a high-performance load balancer.
Tier 1: Frontend Load Balancing
Traffic enters via dnsdist-lb (192.168.2.253). This layer is responsible for traffic engineering and security filtering before queries hit the backend resolvers.
- Packet Cache: A massive 30,000-entry RAM-based packet cache ensures that frequent queries are answered instantly without hitting the backend.
- Distribution: Weighted round-robin logic ensures queries are distributed evenly across the healthy nodes.
Tier 2: The Resolution Triad
Our backend consists of three independent Pi-hole instances running on different compute environments to prevent single points of failure:
- ns1: Primary resolver running as a dedicated VM on the
ghosthypervisor. - ns2: Secondary resolver running in a Docker container on the
ghosthypervisor. - ns3: Tertiary resolver running bare-metal on the
vaultphysical host.
Security & Telemetry
Every query is audited for malicious domain signatures. Daily logs are extracted at 23:55 PM and archived into the local vault for infrastructure compliance monitoring.