Scriptable GeoDNS: leaving AWS for Bunny
The author migrated their blog's infrastructure from Amazon CloudFront and Route 53 to Bunny DNS to optimize performance and reduce costs. Bunny offers almost free DNS services for up to 500 domains, includes scriptable answers, and is based in Europe. The author previously paid US$0.50 per zone per month, US$0.70 per million queries, and US$0.75 per healthcheck with Route 53, plus US$1 per month for a KMS key needed for DNSSEC signing.
Bunny's scriptable DNS allows returning the IP addresses of the two nearest servers, which is achieved by running seven small NixOS virtual machines in Paris, Nuremberg, Ashburn, Singapore, San Jose, São Paulo, and Sydney. The author uses Bunny's scriptable DNS to return the nearest two servers, falling back to a single server if the first becomes unavailable, to ensure minimal downtime.
However, Bunny's HTTP/3 support and IPv6 are still pending, and the script relies on IPv4-only RoutingEngine.getClosestServer(). The author also replaced Route 53 with Hickory, a memory-safe DNS server written in Rust, which supports DNSSEC signatures and dynamic updates, but cannot publish DS records needed for their ACME certificate.
They host the luffy.cx zone on deSEC, a non-profit DNS hosting service based in Berlin. Overall, the author is pleased with the migration, despite a few remaining issues.
Written by urgent.news from Lobsters's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
