Kubernetes storage is the reason I was looking at Minio in the past.

There’s a bit about those on the Wikipedia:

https://en.wikipedia.org/wiki/.xyz#1.111B_class

There used to be restrictions on a hostname.

These had to start with and end with a letter or number, and have only letters, numbers, or a dash. (I heard that originally hostnames had to start with a letter, but 3M got that changed. This might be an urban legend.)

That’s a common restriction for a name still.

Things get funky when you want non-ASCII names - like if you want a cyrillic or Greek name - as registries often limit the allowed characters to limit “isomorphic attacks”. That’s where you use symbols that look the same to trick people into thinking they’re going to another site, like using a 0 instead of an O, or a l instead of an I.

None of this will apply to the XYZ domains that give you a number.

One other issue that might impact you is if you try to connect using only a numeric name. Some tools will interpret such a name as an IPv4 address. Easily solved by using the full name, but weird and confusing if it happens to you unexpectedly. 😅

Seems like someone already did this:

https://github.com/netdata/netdata/issues/20565

Maybe upgrading will fix it?

Self reply as a follow up.

I use nom.es for DNS experimentation. These are like $3 a year or so, and work fine.

I miss DotTK, which was dodgy and didn’t support DNSSEC, but was actually free. 😅

I would not expect any issues.

From the point of view of DNS, a name is a name.

You can never tell what weird restrictions any given software is going to place on you (there were a lot of forms that did not like TLD with more than 4 characters, 20 years ago or so). But it’s only $1, so worth experimenting, IMHO.

Please let us know if there are problems!

All I do:

• Run updates daily
• Disable password logins
• Run sshguard
• Daily backups to a cloud and off-site host

I think that’s it. I have my host exposed to the Internet. As far as I know, it’s fine.

BTW, sshguard is for the IMAP and SMTP that run on the host, which do allow password logins. But it helps reduce load from brute force attacks on port 22 (which are pointless anyway).

I’m much more worried about my son installing dodgy Minecraft mods, or my wife installing another app that she saw on TikTok. I really should put them each on a separate VLAN…

I’m old school, and would set up Fetchmail. It can pull down either POP or IMAP (I haven’t used POP in 25+ years, but I guess it works fine still). Then I’d run Dovecot or some other IMAP server on my host to read mail from there.

DNS is never the Domain Name Service.

The very first sentence of RFC 1034, the document that is the basis of DNS, identifies it as the Domain Name System.

Also, buying or building something to cover the less is cheap, and possibly fun, mini-project. As long as you allow a bit of airflow…

What do you use for your Kubernetes build?

Also, do you have an S3 compatible storage? If not, what do you use for persistence?