本文摘要：这篇文章介绍了作者在家中共使用了22台Raspberry Pi，分别用于构建家庭仪表板、复古游戏、3D打印监控、个人云服务器（Kubernetes集群）、机器人控制、网络广播、儿童教育娱乐以及作为DNS拦截器的Pi-hole设备。Pi-hole能有效阻止跟踪Cookie、广告和其他恶意网络内容，安装简便且易于管理。通过设置Pi-hole，作者发现在其家庭网络中大约有18%至超过23%的DNS查询被成功拦截，从而提升了网络隐私与安全。尽管在使用过程中可能会导致依赖广告服务的应用出现问题，但通过适当配置和白名单管理，作者预计在数周内能实现更优的家庭网络安全环境。

转载文章

本篇文章为转载内容。原文链接：https://blog.csdn.net/cunfusq0176/article/details/109051003。

该文由互联网用户投稿提供，文中观点代表作者本人意见，并不代表本站的立场。

作为信息平台，本站仅提供文章转载服务，并不拥有其所有权，也不对文章内容的真实性、准确性和合法性承担责任。

如发现本文存在侵权、违法、违规或事实不符的情况，请及时联系我们，我们将第一时间进行核实并删除相应内容。

pi-hole

Lots of folks ask me about Raspberry Pis. How many I have, what I use them for. At last count there's at least 22 Raspberry Pis in use in our house.

很多人问我关于树莓派。我有多少，我用它们做什么。最后算一下，我们家至少有22台Raspberry Pi。

One runs our dakboard family dashboard that we built in a weekend but use every day.

一个运行在周末建立但每天使用的dakboard系列仪表板。
We have at 3 that are set up for retrogaming - one in a 3d printed Gameboy (A pi-grrl, in fact), one in a X-Arcade Tankstick, one in a tiny laser-cut arcade case for the desktop.

我们有3个可以进行复古游戏的游戏-一个是3D打印的Gameboy (实际上是pi-grrl )，一个是X-Arcade Tankstick ，一个是用于台式机的小型激光切割游戏机。
I have a Raspberry Pi that runs one of my 3D Printers running Octoprint. This one also has as camera and does time-lapse videos of my 3D prints.

我有一台Raspberry Pi，它运行我的一台运行Octoprint的3D打印机。这也有作为相机，并播放我的3D打印的延时视频。
We have another 3 that run little robots my sons and I have built

我们还有3个运行着我儿子和我建造的小机器人
6 are running in a local Kubernetes Cluster

6在本地Kubernetes集群中运行
- These 6 Pis are my personal cloud, so maybe there's 16 Pis in the house and one Pi Cloud/Cluster.
  这6个Pis是我的个人云，所以也许房子里有16个Pis和一个Pi Cloud / Cluster。
6 are running in a local Kubernetes Cluster

6在本地Kubernetes集群中运行
One is an internet radio in the 13 year old's room running PiMusicBox.

一个是13岁的房间里运行PiMusicBox的互联网广播。
One is a touchscreen tablet the 11 year old uses for Scratch. Imagine a Linux iPad.

一个是11岁的Scratch使用的触摸屏平板电脑。想象一下一个Linux iPad。
One runs Kodi as an entertainment center in the kids' play room.

其中一个将科迪作为儿童游乐室的娱乐中心。
One lives in a CrowPi that we use for experiments and .NET Core remote debugging.

一个住在我们用于实验和.NET Core远程调试的CrowPi中。
Another three are Raspbery Pi Zero Ws for various experiments with one Pi Zero W acting as as backup Open Source Artificial Pancreas.

另外三个是Raspbery Pi Zero Ws，用于各种实验，其中一个Pi Zero W作为备用开源人工胰腺。
and most recently one is a Pi-hole. A Black hole that eats tracking cookies, advertising, and other bad stuff. See also "shut your pie hole." AKA that place you put pie.

最近的一个是PiKong。一个黑洞，它吞噬了跟踪Cookie，广告和其他不良内容。另请参阅“关闭派Kong” 。又就是你放馅饼的那个地方。

A Pi-hole is a Raspbery Pi appliance that takes the form of an DNS blocker at the network level. You image a Pi, set up your network to use that Pi as a DNS server and maybe white-list a few sites when things don't work.

PiKong是Raspbery Pi设备，在网络级别采用DNS阻止程序的形式。您对Pi进行映像，将网络设置为将该Pi用作DNS服务器，并在无法正常工作时将一些站点列入白名单。

I was initially skeptical, but I'm giving it a try. It doesn't process all network traffic, it's a DNS hop on the way out that intercepts DNS requests for known problematic sites and serves back nothing.

最初我对此表示怀疑，但现在尝试一下。它不会处理所有网络流量，它是途中的DNS跃点，可拦截对已知问题站点的DNS请求，并且不提供任何服务。

Installation is trivial if you just run unread and untrusted code from the 'net ;)

如果您只是从'net;)运行未读和不受信任的代码，则安装很简单。

curl -sSL https://install.pi-hole.net | bash

Otherwise, follow their instructions and download the installer, study it, and run it.

否则，请遵循他们的指示并下载安装程序，对其进行研究并运行。

I put my pi-hole installation on the metal, but there's also a very nice Docker Pi-hole setup if you prefer that. You can even go further, if, like me, you have Synology NAS which can also run Docker, which can in turn run a Pi-hole.

我将pi-hole安装在金属上，但是如果您愿意的话，还有一个非常好的Docker Pi-hole设置。如果像我一样，如果您拥有也可以运行Docker的Synology NAS ，那么它甚至可以运行Pi-hole，您甚至可以走得更远。

Within the admin interface you can tail the logs for the entire network, which is also amazing to see. You think you know what's talking to the internet from your house - you don't. Everything is logged and listed. After installing the Pi-hole roughly 18% of the DNS queries heading out of my house were blocked. At one point over 23% were blocked. Oy.

在管理界面中，您可以跟踪整个网络的日志，这也很令人惊讶。您认为自己知道从家里到互联网的谈话内容，而您却不知道。一切都记录并列出。 安装完Pi漏洞后，大约有18％的DNS查询从我家出来。 一度超过23％被阻止。 哦

NOTE: If you're using an Amplifi HD or any "clever" router, you'll want to change the setting "Bypass DNS cache" otherwise the Amplifi will still remain the DNS lookup of choice on your network. This setting will also confuse the Pi-hole and you'll end up with just one "client" of the Pi-hole - the router itself.

注意：如果您使用Amplifi HD或任何“智能”路由器，则需要更改设置“绕过DNS缓存”，否则Amplifi仍将是您网络上首选的DNS查找。此设置还会混淆PiKong，您最终只会得到PiKong的一个“客户端”，即路由器本身。

For me it's less about advertising - especially on small blogs or news sites I want to support - it's about just obnoxious tracking cookies and JavaScript. I'm going to keep using Pi-hole for a few months and see how it goes. Do be aware that some things WILL break. Could be a kid's iPhone free-to-play game that won't work unless it can download an add, could be your company's VPN. You'll need to log into http://pi.hole/admin (make sure you save your password when you first install, and you can only change it at the SSH command line with "pihole -a -p") and sometimes disable it for a few minutes to test, then whitelist certain domains. I suspect after a few weeks I'll have it nicely dialed in.

对我来说，它与广告无关，尤其是在我要支持的小型博客或新闻网站上，它只是关于令人讨厌的跟踪cookie和JavaScript。我将继续使用Pi-hole几个月，看看效果如何。请注意，有些事情会中断。可能是一个孩子的iPhone免费游戏，除非可以下载附件，否则它将无法正常工作，可能是您公司的VPN。您需要登录http：//pi.hole/admin (确保在首次安装时保存密码，并且只能在SSH命令行中使用“ pihole -a -p”更改密码)，有时将其禁用几分钟以进行测试，然后将某些域列入白名单。我怀疑几周后我会拨好电话。

翻译自: https://www.hanselman.com/blog/blocking-ads-before-they-enter-your-house-at-the-dns-level-with-pihole-and-a-cheap-raspberry-pi

pi-hole

本篇文章为转载内容。原文链接：https://blog.csdn.net/cunfusq0176/article/details/109051003。

该文由互联网用户投稿提供，文中观点代表作者本人意见，并不代表本站的立场。

作为信息平台，本站仅提供文章转载服务，并不拥有其所有权，也不对文章内容的真实性、准确性和合法性承担责任。

如发现本文存在侵权、违法、违规或事实不符的情况，请及时联系我们，我们将第一时间进行核实并删除相应内容。