{"slug": "dnsmasq", "name": "dnsmasq", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 3, "commenters": 7, "warners": 1, "score": 2.349, "rising": -0.98, "first": "2025-12-03", "latest": "2026-10-08", "why": "I use dnsmasq mostly for its fantastic integration with DNS.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 3, "compare": 0, "warn": 1}, "spark": [0, 2, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "I use dnsmasq mostly for its fantastic integration with DNS.", "icon": true, "domain": null, "github_repo": null, "official_url": "https://thekelleys.org.uk/dnsmasq/doc.html", "pricing": "", "aliases": ["dnsmasq"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 779329585, "item_id": 48708099, "url": "https://news.ycombinator.com/item?id=48708099", "by": "opengears", "date": "2026-06-28", "stance": "recommend", "quote": "take a look at adguard home, dnsmask or unbound. the best is to run your own infra", "excerpt": "take a look at adguard home, dnsmask or unbound. the best is to run your own infra", "context": "", "use_case": "DNS resolver", "switched_from": "", "story": "Choosing a Public DNS Resolver"}, {"id": 741833441, "item_id": 46364590, "url": "https://news.ycombinator.com/item?id=46364590", "by": "TacticalCoder", "date": "2025-12-23", "stance": "recommend", "quote": "then on top of that running dnsmasq locally.", "excerpt": "It's a bit tricky in that browsers may be using TCP_NODELAY anyway or use QUIC (UDP) and whatnots BUT, in doubt, I've got a wrapper script around my browsers launcher script that does LD_PRELOAD with TCP_NODELAY correctly configured. Dunno if it helps but it helps me feel better. What speeds up browsing the most though IMO is running your own DNS resolver, null routing a big part of the Internet, firewalling off enti", "context": "", "use_case": "local DNS caching", "switched_from": "", "story": "It's Always TCP_NODELAY"}, {"id": 738309600, "item_id": 46144350, "url": "https://news.ycombinator.com/item?id=46144350", "by": "BrandoElFollito", "date": "2025-12-03", "stance": "recommend", "quote": "I use dnsmasq mostly for its fantastic integration with DNS.", "excerpt": "I use dnsmasq mostly for its fantastic integration with DNS. DHCP and DNS go hand in hand in a network, I really struggle to understand why they are not more integrated in otherwise great solutions (such as kea)", "context": "", "use_case": "DHCP and DNS server", "switched_from": "", "story": "Kea DHCP: Modern, open source DHCPv4 and DHCPv6 server"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 800117681, "item_id": 50007355, "url": "https://news.ycombinator.com/item?id=50007355", "by": "mzajc", "date": "2026-10-08", "stance": "warn", "quote": "I've had issues with dnsmasq in the past where it was remotely resolving domains even when they were configured to resolve locally.", "excerpt": "Posting because OpenWRT, possibly others as well, assign .lan names to devices on the LAN by default. People who make use of this might want to follow the application, and, if it goes through, either change the name or make sure queries can't get incorrectly get sent to upstream resolvers. Regarding that last point, I've had issues with dnsmasq in the past where it was remotely resolving domains even when they were c", "context": "", "use_case": "local DNS resolution", "switched_from": "", "story": "New gTLD Application for .lan"}]}], "who": [{"by": "samgranieri", "context": "web developer", "url": "https://news.ycombinator.com/item?id=47447591", "date": "2026-03-19"}], "tags": [], "use_cases": ["local dns resolution", "dns resolver", "local dev dns", "local dev dns routing", "dns blocking of lg domains", "local dns caching"], "compared": [{"slug": "unbound", "name": "Unbound", "co": 3, "switched_from": 0, "switched_to": 0}, {"slug": "caddy", "name": "Caddy", "co": 1, "switched_from": 0, "switched_to": 1}, {"slug": "openwrt", "name": "OpenWrt", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=47440759", "title": "macOS 26 breaks custom DNS settings including .internal", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=50007353", "title": "New gTLD Application for .lan", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48702273", "title": "Choosing a Public DNS Resolver", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47322966", "title": "Hisense TVs add unskippable startup ads before live TV", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46359120", "title": "It's Always TCP_NODELAY", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46142000", "title": "Kea DHCP: Modern, open source DHCPv4 and DHCPv6 server", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"recommend": 2}, "2026-01": {}, "2026-02": {}, "2026-03": {"neutral": 3}, "2026-04": {}, "2026-05": {}, "2026-06": {"recommend": 1}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {"warn": 1}}, "quotes": [{"id": 800117681, "item_id": 50007355, "url": "https://news.ycombinator.com/item?id=50007355", "by": "mzajc", "date": "2026-10-08", "stance": "warn", "quote": "I've had issues with dnsmasq in the past where it was remotely resolving domains even when they were configured to resolve locally.", "excerpt": "Posting because OpenWRT, possibly others as well, assign .lan names to devices on the LAN by default. People who make use of this might want to follow the application, and, if it goes through, either change the name or make sure queries can't get incorrectly get sent to upstream resolvers. Regarding that last point, I've had issues with dnsmasq in the past where it was remotely resolving domains even when they were c", "context": "", "use_case": "local DNS resolution", "switched_from": "", "story": "New gTLD Application for .lan"}, {"id": 779329585, "item_id": 48708099, "url": "https://news.ycombinator.com/item?id=48708099", "by": "opengears", "date": "2026-06-28", "stance": "recommend", "quote": "take a look at adguard home, dnsmask or unbound. the best is to run your own infra", "excerpt": "take a look at adguard home, dnsmask or unbound. the best is to run your own infra", "context": "", "use_case": "DNS resolver", "switched_from": "", "story": "Choosing a Public DNS Resolver"}, {"id": 759161457, "item_id": 47447591, "url": "https://news.ycombinator.com/item?id=47447591", "by": "samgranieri", "date": "2026-03-19", "stance": "neutral", "quote": "I used to use dnsmasq and etc/resolvers for stuff like dot dev or dit whatever back in the day.", "excerpt": "I used to use dnsmasq and etc/resolvers for stuff like dot dev or dit whatever back in the day. These days I\u2019m just using Caddy to do ..localhost for my web dev and it works like a charm. This is exceptionally sloppy on Apple\u2019s part.", "context": "web developer", "use_case": "local dev DNS", "switched_from": "", "story": "macOS 26 breaks custom DNS settings including .internal"}, {"id": 759068208, "item_id": 47441763, "url": "https://news.ycombinator.com/item?id=47441763", "by": "neilsharma425", "date": "2026-03-19", "stance": "neutral", "quote": "I use dnsmasq for .local dev routing", "excerpt": "Has anyone found a working workaround yet? I use dnsmasq for .local dev routing and held off updating after seeing this but curious if there is a viable path forward short of waiting for Apple to patch it.", "context": "", "use_case": "local dev DNS routing", "switched_from": "", "story": "macOS 26 breaks custom DNS settings including .internal"}, {"id": 757187170, "item_id": 47324198, "url": "https://news.ycombinator.com/item?id=47324198", "by": "lpcvoid", "date": "2026-03-10", "stance": "neutral", "quote": "Then you create a dnsmasq blacklist for all the LG domains", "excerpt": "Sure, first you check if your TV is rootable: https://cani.rootmy.tv/ If not, you can try and find one on Ebay or local classifieds that is. That's the hardest part. Then you setup a VLAN (I use OpenWRT, which has great support for this) and some firewall rules that forbid all traffic that isn't port 80 or 443. Then you create a dnsmasq blacklist for all the LG domains (good list is [1]). Then you install this: https", "context": "", "use_case": "DNS blocking of LG domains", "switched_from": "", "story": "Hisense TVs add unskippable startup ads before live TV"}, {"id": 741833441, "item_id": 46364590, "url": "https://news.ycombinator.com/item?id=46364590", "by": "TacticalCoder", "date": "2025-12-23", "stance": "recommend", "quote": "then on top of that running dnsmasq locally.", "excerpt": "It's a bit tricky in that browsers may be using TCP_NODELAY anyway or use QUIC (UDP) and whatnots BUT, in doubt, I've got a wrapper script around my browsers launcher script that does LD_PRELOAD with TCP_NODELAY correctly configured. Dunno if it helps but it helps me feel better. What speeds up browsing the most though IMO is running your own DNS resolver, null routing a big part of the Internet, firewalling off enti", "context": "", "use_case": "local DNS caching", "switched_from": "", "story": "It's Always TCP_NODELAY"}, {"id": 738309600, "item_id": 46144350, "url": "https://news.ycombinator.com/item?id=46144350", "by": "BrandoElFollito", "date": "2025-12-03", "stance": "recommend", "quote": "I use dnsmasq mostly for its fantastic integration with DNS.", "excerpt": "I use dnsmasq mostly for its fantastic integration with DNS. DHCP and DNS go hand in hand in a network, I really struggle to understand why they are not more integrated in otherwise great solutions (such as kea)", "context": "", "use_case": "DHCP and DNS server", "switched_from": "", "story": "Kea DHCP: Modern, open source DHCPv4 and DHCPv6 server"}]}