I'm currently in the research phase of getting Pihole set up, and I have a couple questions that I couldn't find definitive answers to, so I want to ask the experts here!
My current setup: I have a media server set up on a Windows 11 machine (It started as a small side project, and has grown to the point of needing to be on a separate dedicated device, but prices are high right now so I've been putting it off). I have Jellyfin and a few other services set up that I route through a Cloudlfare Tunnel for remote access, using my Cloudlfare domain. I took this route because Tailscale wasn't a great UX for my less-tech-savvy friends and family, I was already using Cloudflare to manage my site, and at the time I didn't have the capacity to learn any other more in-depth strategies.
As I was poking around this subreddit I saw a lot of folks mentioning Unbound, and I really like the idea of setting that up. As someone who is good with tech but not well versed in networking or DNSs, I tried searching around here to make sure this set up wouldn't break anything, but I'm not super confident I found the right answer – especially since most threads are from 1 or more years ago and Cloudflare made changes to how things work in February.
– Will setting up Pihole+Unbound mess with Cloudflare Tunnel connectivity or remote streaming speeds?
– Does using a Cloudlfare Tunnel for remote access open the door for DNS leaks or Pihole/Unbound circumvention for other network traffic? Any extra concerns since I'm hosting things on a Windows computer I use for gaming, 3D modeling, art, etc? This feels like a silly question and I'm pretty sure the answer is "no", but I'm really unfamiliar with the inner workings of this stuff. There is so much to learn, and the material is quite dense
– If I'm already going to go down the route of setting up Unbound, should I consider other choices for remote access? If so, can I set it all up on the same rPi as Pihole and Unbound, or would I want it to be on a different/stronger device?
I value privacy and security more and more nowadays, and I know using a Cloudflare Tunnel puts trust into a third party. However, with my limited knowledge on this topic, my original thought process was that Cloudflare is a lot less likely to introduce attack surface/vectors than I am. But, if I'm going down a new rabbit hole, I figured now might be a good time to re-evaluate my options and learn more about how this stuff really works.
Source: r/pihole · by /u/Steady_Ri0t