UniFi FINALLY added DNS - How to add DNS records to Dream Machine Pro 8.2.93

UniFi has Finally added custom DNS records in their latest update for the dream machine pro. I have been waiting for this to come out for a long time! In this video I will be walking through the new features and discussing some common use cases, including how I will be implementing them.
Hire Me! yarboroughtechnologies.com/co...
Post on the Forums! forums.spacerex.co/
UniFi Store*: store.ui.com/us/en?a_aid=Spac...
#unifi #homelab
*These are affiliate links, which means that if you purchase a product through one of them, I will receive a small commission (at no additional cost to you). Thank you for supporting my channel!

[@kamarleyj]

Saw the title and instantly jumped to update my UDM-Pro to update. Thank you for the heads up!

[@SpaceRexWill]

I did the same thing! I didn't even wait for others to update, I just jumped right in. It works great!

[@dimlag]

Saw the title. I got jealous because I have a UDR. Then I just logged in to my router and there it was the 8.2.93 waiting for my UDR. I started the update, and it seems that DNS Server is a thing for UDR too!!! Great video as always.

[@Vandroiy78]

Thank you for all of your interesting and helpful videos. 😊

[@SpaceRexWill]

Thanks!

[@ahdeshpande]

fantastic video and I jumped onto my UDM and configured DNS. Now working on some use cases where I can use this in combination of pihole

[@steverhysjenks]

Love this, as I use Adguard Home, I would love to see more custom blocklist and custom DNS rules.

[@kdw75]

Bought one of these a while back and havnen't had the chance to set it up yet. THANKS!

[@billyjoe3309]

Great video as always! One thing that's missing on KZbin, is an instructions video on how to use Ubiquiti camera (NVR) and have it save images and/or videos on the NAS in case of motion detection. Might not be possible, but it should be!

[@perarneng]

Thanks for a great video ⭐️ Christmas is coming early this year.

[@pmerikan]

This is awesome news. Really great video. 🥳

[@davysprocket]

So glad they have forwarded domains so we can use active directory servers properly, yay!!

[@mattmocabee8267]

How do you config this within an active directory environment? ... Currently I'm running the AD as my DNS for network clients. Thx

[@mnejmantowicz]

@spacerex A video on “hijacking’”AD DNS would be awesome.

[@BlueCollarBachelor]

Thanks for the videos, Network Stiffler

[@replicant_2049]

Finally! Great update.

[@acc3366]

Thank you sir for the info

[@BerserkeR_031]

🤮

[@mattvisaggio]

Awesome video!

[@philippwaller1153]

Great feature! The last puzzle peace is an API for automated DNS record management. Then I can finally retire my dnsmasq.

[@EBackwards]

About time!

[@valin0r]

Great video, will look in to the new DNS option in DMP. Furthermore, the best way to run DNS (like adguard/pihole ) is on kubernetes. Then you can reboot a node and you will not be down.

[@fisherich]

Where do you enter the ip of the pihole as an upstream server?

[@valin0r]

@@fisherich I don't use pihole, but i guess you can configure it (it's a old link)

[@HardcoreNacho]

Nice they offer this now. Personally I have Adguard as my DNS running on my server then my UCGU has a second dns if my adguard goes down to a openDNS server.

[@droneforfun5384]

Go will just 8k subs to go! From sweden

[@KarlMeyer]

Is it worth switching from pi hole on a pi 4 to this in your opinion? I wouldn’t mind reclaiming 4.5 watts of power. Performance is probably a bit better as well since it’s all done on the same machine (latency wise).

[@msheep5869]

No, I would only forwanrd the pihole like he said

[@iMarqs]

Great video. I managed to create some A records for my local homelab servers. But when I access them by the domain name I created they are no longer under https like in your example with Synology. The next step would be to create certificates? thanks!

[@timothymason5545]

Can you do more videos on this all? Reverse proxy to be exact. Thanks

[@MAC1072]

Would love to know how that reverse proxy you mentioned would be set up!

[@rmangoba]

I have 2 Synology NAS's for my primary and backup DNS server. I really wish Unifi supported a secondary DNS server for the forwarding domain feature.

[@TheMichaelTech]

Hey Will, what are your thoughts on the Ugreen NAS systems?

[@SpaceRexWill]

For me, I always like to see more competition in the space. But for a NAS, I really have to wait to see how it performs in the medium term before giving any thoughts on it.

[@sfriis81]

Any chance the custom DNS records settings will be coming to USG-3P (or UXG-Lite or UXG-Max)? I don't see the DNS pane under "Routing" after upgrading to 8.2.93. (Running locally installed controller + USG-3P)

[@roderick8820]

Me neither

[@user-xs7uy8bp3d]

@@roderick8820 Same here. Selfhosted network application / controller and USG-3.

[@michaelsterling3180]

Any idea if this supports wildcard records?

[@vespinonl]

Running the latest version on a self hosted for myself and a cloud key for one of clients, but I don’t see the option.

[@fretbuzzly]

Interesting and a nice improvement, but is it possible to run this along with Pi-hole? I want the blocking and control Pi-hole offers, something Unifi doesn't yet have.

[@sitte24]

Why run both? Just go with Pi-Hole and throw in redundancy, that's what I've been doing for years without issues. You don't even need to give out all redundant IPs to clients when using keepalived

[@tmtb]

I have a Cloud Gateway Ultra with this version, but i can't find the dns tab in routing. Any idea if CGU was left out?

[@tmtb]

Apparently the update was automatic, but the restart had to be manual. Fml! Bottom line, i can see it now.

[@gjheydon]

I use pihole to provide dns, esp CNAME's so I can set up my services and run them off a traefik proxy. So I can't wait for a CNAME's to be supported. However I am wondering how this works with VLAN's and and if there will be DNS leakage across VLAN's. But forwards are just amazing.

[@it4offices]

Have unifi allows multiple ip address on a single wan port yet? if we are doing any dns forwarding, for failover we will need this. Many other mainstream router manufacturers do this.

[@tyren51]

Would love to replace my Adguard and Nginx reverse proxy setup as it adds a lot of complexity - which seems possible now. Except: is there any way to keep the ad-blocking features?

[@adamconnor5747]

Unifi already has ad blocking, but not a lot of control over it

[@jasonklems8584]

Hi everyone. I am running 8.2.93 on my UDM pro and I created to A records to point at my NAS and it does not resolve. my PCs are all looking at my UDM pro for DNS. any thoughts ?

[@basdfgwe]

So what does it mean that when you say "If you use UDM as your local DNS"

[@justinknash]

What's the difference between the primary and secondary DNS server under internet, and the the per network DNS servers you can configure for each DHCP network?

[@JohnColley]

Primary and Secondary DNS servers are available so that if one goes offline, you can still reach the records from the secondary DNS server. It's an auto-failover mechanism. The per-network DNS servers for DHCP networks are the same thing, but you can specify different DNS servers for each network, if you have the need or want to play around with that sort of thing.

[@fisherich]

Where or how would you configure a pihole as an upstream server so that the local domains are resolved by unifi, but the rest by pihole (blocked where necessary)?

[@SPECTRE_Island]

As a home Unifi user why do I need this? Performance? Stability?

[@JohnColley]

Nobody said you need this. If you have a UDM Pro/SE or UDR as a home user, and you don't know what you might use this for, it's likely not for you and that's okay. Not everybody needs to manage a DNS server. But for those that need these features, especially for the SMB sector or a home-lab, DNS is one of the essential network elements.

[@MrSunDevil23]

A caching DNS server would be really great especially for home/SMB users.

[@SpaceRexWill]

It already does that!

[@connectedsecure]

Just to clarify, you cannot do a reverse proxy with the UDM Pro Max without third party script right?

[@SpaceRexWill]

Correct. This is only DNS

[@kgury]

I've been running a pi-hole with recursive unbound, lets me set up local records also

[@SpaceRexWill]

How are you syncing your DNS records between the pi -holes?

[@kgury]

@@SpaceRexWill Gravity-Sync, works fine for what I needed.

[@Vera150607]

So, are we almost capable of letting go of AdGuard DNS servers and Nginx Reverse Proxy?

[@spokdayz]

Thats soo cool, can you please make a video to use the unifi reverse proxy from the web

[@samuelhulme8347]

UniFi do not have a reverse proxy, you need to use separate software on another machine.

[@jimholloway1785]

I like how you showed how to add a DNS record. I was trying so things and they worked. But when I was all done testing I wanted to delete the record and I don't see any option to delete a newly created record? HELP

[@fretbuzzly]

Bottom right on that screen click "Manage". That will make the list editable. Click the checkbox next to the one you want to delete and then click Remove at the bottom.

[@jimholloway1785]

@@fretbuzzly That worked great!!!!!! thank you

[@TheWestCoastBogeyMan]

In my config, I used my UDM-SE as my DHCP server & [obviously] router, but I have dual Raspberry PIs serving as my DNS servers (running Pi Hole with Unbound). Although your video is very informative, you don't even mention this [fairly] common setup.

[@ronald0122]

i use adguard home on my synology so why should i use this? i have the udm pro but i configured my adguard home ip as dns server for all my networks.

[@jacekdargiel790]

Every time you update or restart your Synology for other reasons, your DNS goes down.

[@AtlasBit]

I have the latest version but DNS is not showing any ideas guys?

[@AtlasBit]

Reboot is required after the update guys if you have auto update on

[@reiserthomas]

Can I define a default, e.g. to forward all DNS queries that do not match the maintained DNS names to a secondary DNS server?

[@SpaceRexWill]

You cannot

[@reiserthomas]

@@SpaceRexWill Thanks unfortunate. But thank you for that info.. My idea was to maintain my hosts in UniFi and resolve everything else with my Pi-hole then.

[@timothymason5545]

How do I enable my UDM pro to be the primary DNS server in my setup or do I just add my dns records and we are good?

[@samuelhulme8347]

You should configure the primary dns server to be the IP on the UDM using DHCP.

[@SpaceRexWill]

Unless you changed it, your UDM will be your DNS sever. Check the LAN DHCP settings

[@RodrigoLozada81]

Hope it integrates with Windows Server (2016+) DNS

[@The_Tech_Ninja]

What we need is to bring our own certificates into this system!!!

[@bjtaudio]

My experience with these included or feature additions is they are buggy and keep crashing...

[@ats1995]

How has this been missing for so long? I guess that was another reason for running pfSense that's no longer really relevant for me.

[@basdfgwe]

I was thinking why did Synology add DNS, what's going on...

[@WAGISDev]

Cloudflare integration is the only thing left on my list.

[@philippwaller1153]

I assume you mean Cloudflare Dyndns. In fact, the tool "inadyn" used under the hood does support Cloudflare as a provider. However, this feature has not yet made it into the GUI.

[@andrewenglish3810]

This is great for people who use their UDM's for everything, DHCP, DNS, etc. But people like me who has their own home lab of Windows server with my own DHCP, DNS, etc this really isn't important.

[@JayTownsend1]

Setting up a HA DNS setup is not hard, it’s really easy when you use keepalived to manage a vip address for you etc

[@JeffreyBodenstein]

This is super bare bones DNS, not easy to update via other DNS servers, and for those of us with an established network so not needed. Better to have proper DNS removed from the appliance so when something goes wrong like a reboot local network does not suffer.

[@superj8575]

Unifi please give us a NAS next

[@samuelhulme8347]

I’ve seen rumours that they are making a NAS, however, we haven’t heard anything official yet.

[@hpsfresh]

Batch import

[@Oslohiker]

I understood about 5%. This should have been about an 5 hour video divided into 50 videos...

[@BerserkeR_031]

Or maybe finish high school.

[@Oslohiker]

@@BerserkeR_031 Nah, this is for overweight incels that live in their mom's basement waisting their life on gaming. I have a MSc and do very well in life. Network is not in the curriculum at most high schools. My home rack is close to $100k... and I am very happy about the set up. That does not mean that I'm an expert on local DNS. This dude makes excellent videos, but he miss the mark at this one.... I am sure your mom has your dinner ready by now. Go and get it....

[@BoraHorzaGobuchul]

​@@BerserkeR_031harsh but true

[@kern776]

Mikrotik has this support for over a decade.

[@legendaryzfps]

No ipv6 no good.

[@SpaceRexWill]

When you are just starting out writing firewall rules, IP6 is a nightmare to get started on. I would skip IP6 until you get to know what’s going on. as you don’t miss much

[@legendaryzfps]

@@SpaceRexWill that's plain not true. IPv6 is much easier to learn in fact since I switched to teach ipv6 first the upcoming network experts are way faster in picking up how ip works

[@xxxxxxsauron]

more plex privacy videos please. you can keep on dunking on them about privacy i dont care. at least im know my plex watch history is more private. and also more unifi reverse proxy in custom dns

[@rsdotscot]

You think your Plex watch history is private? Plex can see your entire watch history and your library and all of the access to your library. It's not private.

[@xxxxxxsauron]

@@rsdotscot ok jellyfin fan. prove it

[@rsdotscot]

@@xxxxxxsauron prove that Plex isn't private? Try using it without an internet connection. EVERYTHING does through their servers.

[@rsdotscot]

@@xxxxxxsauron prove that Plex, a service that requires internet access in order to access your own media through it by signing into it, isn't private? Golly gee. I wonder how I'm going to do that...

[@xxxxxxsauron]

@@rsdotscot dude. i meant more private like my mom cant see my watch history. seriously you watched the video :edit: i meant the plex video spacerex did a while back. also wt..f my edits dont work

[@Crazy--Clown]

Gee Will starting to get a bit money hungry like the rest of them.... Lol members only, really.....

[@SpaceRexWill]

Members get access to the same videos, just a little early!

[@Crazy--Clown]

@@SpaceRexWill I'll wait then

[@NhatLinhNguyen-ru5lf]

Why are you whispering?

[@lucipher4082]

Why is this so funny to me 😂