pi-hole_使用pi-hole和便宜的Raspberry Pi在DNS级别上阻止广告进入您的房子之前

pi-hole

Lots of folks ask me about Raspberry Pis. How many I have, what I use them for. At last count there's at least 22 Raspberry Pis in use in our house.

很多人问我关于树莓派。 我有多少，我用它们做什么。 最后算一下，我们家至少有22台Raspberry Pi。

• One runs our dakboard family dashboard that we built in a weekend but use every day.

  一个运行在周末建立但每天使用的dakboard系列仪表板。

• We have at 3 that are set up for retrogaming - one in a 3d printed Gameboy (A pi-grrl, in fact), one in a X-Arcade Tankstick, one in a tiny laser-cut arcade case for the desktop.

  我们有3个可以进行复古游戏的游戏-一个是3D打印的Gameboy (实际上是pi-grrl )，一个是X-Arcade Tankstick ，一个是用于台式机的小型激光切割游戏机。

• I have a Raspberry Pi that runs one of my 3D Printers running Octoprint. This one also has as camera and does time-lapse videos of my 3D prints.

  我有一台Raspberry Pi，它运行我的一台运行Octoprint的3D打印机。 这也有作为相机，并播放我的3D打印的延时视频。

• We have another 3 that run little robots my sons and I have built

  我们还有3个运行着我儿子和我建造的小机器人

• 6 are running in a local Kubernetes Cluster

  6在本地Kubernetes集群中运行

  • These 6 Pis are my personal cloud, so maybe there's 16 Pis in the house and one Pi Cloud/Cluster.
    这6个Pis是我的个人云，所以也许房子里有16个Pis和一个Pi Cloud / Cluster。

  6 are running in a local Kubernetes Cluster

  6在本地Kubernetes集群中运行

• One is an internet radio in the 13 year old's room running PiMusicBox.

  一个是13岁的房间里运行PiMusicBox的互联网广播。

• One is a touchscreen tablet the 11 year old uses for Scratch. Imagine a Linux iPad.

  一个是11岁的Scratch使用的触摸屏平板电脑。 想象一下一个Linux iPad。

• One runs Kodi as an entertainment center in the kids' play room.

  其中一个将科迪作为儿童游乐室的娱乐中心。

• One lives in a CrowPi that we use for experiments and .NET Core remote debugging.

  一个住在我们用于实验和.NET Core远程调试的CrowPi中。

• Another three are Raspbery Pi Zero Ws for various experiments with one Pi Zero W acting as as backup Open Source Artificial Pancreas.

  另外三个是Raspbery Pi Zero Ws，用于各种实验，其中一个Pi Zero W作为备用开源人工胰腺。

• and most recently one is a Pi-hole. A Black hole that eats tracking cookies, advertising, and other bad stuff. See also "shut your pie hole." AKA that place you put pie.

  最近的一个是PiKong。 一个黑洞，它吞噬了跟踪Cookie，广告和其他不良内容。 另请参阅“关闭派Kong” 。 又就是你放馅饼的那个地方。

A Pi-hole is a Raspbery Pi appliance that takes the form of an DNS blocker at the network level. You image a Pi, set up your network to use that Pi as a DNS server and maybe white-list a few sites when things don't work.

PiKong是Raspbery Pi设备，在网络级别采用DNS阻止程序的形式。 您对Pi进行映像，将网络设置为将该Pi用作DNS服务器，并在无法正常工作时将一些站点列入白名单。

I was initially skeptical, but I'm giving it a try. It doesn't process all network traffic, it's a DNS hop on the way out that intercepts DNS requests for known problematic sites and serves back nothing.

最初我对此表示怀疑，但现在尝试一下。 它不会处理所有网络流量，它是途中的DNS跃点，可拦截对已知问题站点的DNS请求，并且不提供任何服务。

Installation is trivial if you just run unread and untrusted code from the 'net ;)

如果您只是从'net;)运行未读和不受信任的代码，则安装很简单。

curl -sSL https://install.pi-hole.net | bash

Otherwise, follow their instructions and download the installer, study it, and run it.

否则，请遵循他们的指示并下载安装程序，对其进行研究并运行。

I put my pi-hole installation on the metal, but there's also a very nice Docker Pi-hole setup if you prefer that. You can even go further, if, like me, you have Synology NAS which can also run Docker, which can in turn run a Pi-hole.

我将pi-hole安装在金属上，但是如果您愿意的话，还有一个非常好的Docker Pi-hole设置。 如果像我一样，如果您拥有也可以运行Docker的Synology NAS ，那么它甚至可以运行Pi-hole，您甚至可以走得更远。

Within the admin interface you can tail the logs for the entire network, which is also amazing to see. You think you know what's talking to the internet from your house - you don't. Everything is logged and listed. After installing the Pi-hole roughly 18% of the DNS queries heading out of my house were blocked. At one point over 23% were blocked. Oy.

在管理界面中，您可以跟踪整个网络的日志，这也很令人惊讶。 您认为自己知道从家里到互联网的谈话内容，而您却不知道。 一切都记录并列出。 安装完Pi漏洞后，大约有18％的DNS查询从我家出来。 一度超过23％被阻止。 哦

NOTE: If you're using an Amplifi HD or any "clever" router, you'll want to change the setting "Bypass DNS cache" otherwise the Amplifi will still remain the DNS lookup of choice on your network. This setting will also confuse the Pi-hole and you'll end up with just one "client" of the Pi-hole - the router itself.

注意：如果您使用Amplifi HD或任何“智能”路由器，则需要更改设置“绕过DNS缓存”，否则Amplifi仍将是您网络上首选的DNS查找。 此设置还会混淆PiKong，您最终只会得到PiKong的一个“客户端”，即路由器本身。

For me it's less about advertising - especially on small blogs or news sites I want to support - it's about just obnoxious tracking cookies and JavaScript. I'm going to keep using Pi-hole for a few months and see how it goes. Do be aware that some things WILL break. Could be a kid's iPhone free-to-play game that won't work unless it can download an add, could be your company's VPN. You'll need to log into http://pi.hole/admin (make sure you save your password when you first install, and you can only change it at the SSH command line with "pihole -a -p") and sometimes disable it for a few minutes to test, then whitelist certain domains. I suspect after a few weeks I'll have it nicely dialed in.

对我来说，它与广告无关，尤其是在我要支持的小型博客或新闻网站上，它只是关于令人讨厌的跟踪cookie和JavaScript。 我将继续使用Pi-hole几个月，看看效果如何。 请注意，有些事情会中断。 可能是一个孩子的iPhone免费游戏，除非可以下载附件，否则它将无法正常工作，可能是您公司的VPN。 您需要登录http：//pi.hole/admin (确保在首次安装时保存密码，并且只能在SSH命令行中使用“ pihole -a -p”更改密码)，有时将其禁用几分钟以进行测试，然后将某些域列入白名单。 我怀疑几周后我会拨好电话。

翻译自: https://www.hanselman.com/blog/blocking-ads-before-they-enter-your-house-at-the-dns-level-with-pihole-and-a-cheap-raspberry-pi

pi-hole