All the device in my home network use my home assiant as the dns service pointing to 172.29.32.10, but have inconsistent replyes from dnsmask in Home Assiantant
Sometimes get from my Windows machine using nslookup the external address, sometimes get the internal address.
something is strange becuase if I replace the c:\windows\system32\drivers\etc\hosts and add the XXXXX.duckdns.org there … then it works …
But that can’t be a solution sinc emost of the IOT devices that need to run run the webhook in home assiant can’t add hosts file …
it is really bad that when we enable HTTPS, we can’t have an webhook authenticate interface or having a local non HTTPS webhook …
This is really a show stopper for comunite between diferent vendor with home assistant
When working with DNS entries they will have TTL value (Time To Live).
TTL values state how long an entry is valid.
The authoritive server will not count this down, so they are always valid.
Any slave server or DNS cache might make a copy of the entry an then set a count down from the TTL value.
The big issue here is that a slave servers and DNS caches can copy from each other, so you can have copies of copies of copies of copies and so on.
If you are unlucky then you can make a change to your DNS, but before save it a copy is made to a slave and just before that slave’s copy time outs a DNS cache makes a copy.
In general it is said that DNS changes require at least 3 times the TTL to propregate fully.
how would that apply to dnsmasq, since it should always be authoritive for the host record taht you create … and again dnsmasq is just an interceptiong for port 53 where it redirect the request based on basic configuration … thta is why the local host should always be the answer
I need duckdns to give me DDNS and at the same time connect to letsencrypt and allow me remote access to my homeassistant, the problem now is that I need to use webhooks and with HTTPS I need local DNS resolution, to implement split Horizon DNS
Ok, I see.
Maybe try a real DNS service and overload the entire duckdns.org domain.
This will of course prevent lookups of other duckdns.orh entries, but my guess is that you are probably not needing them anyway. Duckdns.org is not used much by anyone with a real need hosting stuff with public access needed.
Alternatively you might be able to find a cheap domain instead and then just host it on a service like Cloudflare, which will make Let’s Encrypt’s DNS challenge possible.
I do not know where in the world you are, but here a local domain cost around $8 a year and my country is often considered extremely expensive to live in.