Most active commenters

    ←back to thread

    .localhost Domains

    (inclouds.space)
    301 points todsacerdoti | 30 comments | | HN request time: 2.168s | source | bottom
    1. hardaker ◴[] No.43644486[source]
    You might check out .internal instead which was recently approved [1] for local use.

    [1]: https://en.wikipedia.org/wiki/.internal

    replies(7): >>43644727 #>>43644836 #>>43645467 #>>43645484 #>>43645535 #>>43648046 #>>43656960 #
    2. codetrotter ◴[] No.43644727[source]
    In that case I would prefer naming as

      <virtual>.<physical-host>.internal
    
    So for example

      phpbb.mtndew.internal
    
    And I’d probably still add

      phpbb.localhost 
    
    To /etc/hosts on that host like OP does
    replies(1): >>43645381 #
    3. GrumpyYoungMan ◴[] No.43644836[source]
    The *.home.arpa domain in RFC 8375 has been approved for local use since 2018, which is long enough ago that most hardware and software currently in use should be able to handle it.
    replies(4): >>43645450 #>>43645585 #>>43645624 #>>43646707 #
    4. nodesocket ◴[] No.43645381[source]
    I wrote a super basic DNS server in go (mostly fun and go practice) which allows you to specify hosts and ips in a json config file. This eliminates the need for editing your /etc/hosts file. If it matches a host in the json config file it returns that ip, else uses Cloudflare public DNS resolver as a fallback. Please; easy on my go code :-). I am a total beginner with go.

    https://github.com/nodesocket/godns

    5. Mountain_Skies ◴[] No.43645450[source]
    It's ugly and clunky, which is why after seven years it's had very little adoption. Home users aren't network engineers so these things actually do matter even if it seems silly in a technical sense.
    6. candiddevmike ◴[] No.43645467[source]
    It would be great if there was an easy way to get trusted certificates for reserved domains without rolling out a CA. There are a number of web technologies that don't work without a trusted HTTPS origin, and it's such a pain in the ass to add root CAs everywhere.
    replies(1): >>43651938 #
    7. MaKey ◴[] No.43645484[source]
    It seems like it has not been standardized yet:

    > As of March 7, 2025, the domain has not been standardized by the Internet Engineering Task Force (IETF), though an Internet-Draft describing the TLD has been submitted.

    replies(1): >>43646661 #
    8. alexvitkov ◴[] No.43645535[source]
    Too much typing, and Chromium-based browsers don't understand it yet and try to search for mything.internal instead, which is annoying - you have to type out the whole http://mything.internal.

    This can be addressed by hijacking an existing TLD for private use, e.g. mything.bb :^)

    replies(3): >>43645793 #>>43646358 #>>43653062 #
    9. ◴[] No.43645585[source]
    10. styfle ◴[] No.43645624[source]
    Why use that over *.localhost which has been available since 1999 (introduced in RFC 2606)
    replies(1): >>43645669 #
    11. bravetraveler ◴[] No.43645669{3}[source]
    From RFC 2606:

      The ".localhost" TLD has traditionally been statically defined in
      host DNS implementations as having an A record pointing to the
      loop back IP address and is reserved for such use
    
    The RFC 8375 suggestion (*.home.arpa) allows for more than a single host in the domain. If not in name/feeling, but the strictest readings [and adherence] too.
    12. tepmoc ◴[] No.43645793[source]
    eh, you can just add search domain via dhcp or static configuration and just type out http://mything/ no need to enter whole domain unless you need todo ssl
    replies(1): >>43649588 #
    13. nsteel ◴[] No.43646358[source]
    Isn't just typing the slash at the end enough to avoid it searching? e.g. mything/
    replies(1): >>43652354 #
    14. jwilk ◴[] No.43646661[source]
    It's been reserved by ICANN:

    https://www.icann.org/en/board-activities-and-meetings/mater...

    > Resolved (2024.07.29.06), the Board reserves .INTERNAL from delegation in the DNS root zone permanently to provide for its use in private-use applications.

    replies(1): >>43662827 #
    15. johnmaguire ◴[] No.43646707[source]
    RFC 8375 seems to have approved it specifically to use in Home Networking Control Protocol, though it also states "it is not intended that the use of 'home.arpa.' be restricted solely to networks where HNCP is deployed. Rather, 'home.arpa.' is intended to be the correct domain for uses like the one described for '.home' in [RFC7788]: local name service in residential homenets."

    The OpenWrt wiki on Homenet suggests the project might be dead: https://openwrt.org/docs/guide-user/network/zeroconfig/hncp_...

    Anyone familiar with HNCP? Are there any concerns of conflicts if HNCP becomes "a thing"? I have to say, .home.arpa doesn't exactly roll of the tongue like .internal. Some macOS users seem to have issues with .home.arpa too: https://www.reddit.com/r/MacOS/comments/1bu62do/homearpa_is_...

    replies(2): >>43650847 #>>43651418 #
    16. eddyg ◴[] No.43648046[source]
    .home, .corp and .mail are on ICANN’s “high risk” list so won’t ever be gTLDs, so they are also good (short) options.

    Ref: https://www.icann.org/en/board-activities-and-meetings/mater...

    17. ◴[] No.43649588{3}[source]
    18. onre ◴[] No.43650847{3}[source]
    > I have to say, .home.arpa doesn't exactly roll of the tongue like .internal.

    In my native language (Finnish) it's even worse, or better, depending on personal preference - it translates directly to .mildew.lottery-ticket.

    replies(1): >>43651506 #
    19. AndyMcConachie ◴[] No.43651418{3}[source]
    Check the errata for RFC 7788. .home being listed in it is a mistake. .home has never been designated for this purpose.

    home.arpa is for HNCP.

    Use .internal.

    replies(2): >>43652482 #>>43655384 #
    20. morjom ◴[] No.43651506{4}[source]
    It would be more like .mold.ticket
    replies(1): >>43651688 #
    21. onre ◴[] No.43651688{5}[source]
    Thanks, I always mix up mold and mildew. However, "arpa" is specifically a lottery ticket, whereas there are tickets for concerts, tickets to ride, tickets in Jira etc...
    replies(2): >>43652570 #>>43652735 #
    22. GoblinSlayer ◴[] No.43651938[source]
    You can configure them to send requests through http proxy.
    23. jeroenhd ◴[] No.43652354{3}[source]
    mything/ will make the OS resolve various hosts: mything., mything.local (mDNS), mything.whateverdomainyourhomenetworkuses. (which may be what you wanted).

    If you want to be sure, use mything./ : the . at the end makes sure no further domains are appended during DNS lookup, and the / makes the browser try to access to resource without Googling it.

    24. fc417fc802 ◴[] No.43652482{4}[source]
    I have been commandeering .home for the boxes on my LAN since forever. Why change it?

    If I were going to do a bunch of extra work messing with configs I'd be far more inclined to switch all my personal stuff over to GNS for security and privacy reasons.

    25. morjom ◴[] No.43652570{6}[source]
    Arpa is used for all kinds of random chance things, not specifically for lottery. I feel like ticket would still be the equivalent but I guess that would be more transliteration and opinion than direct translation? Also my view for lottery may be skewed due to the Finnish lottery culture, and how lottery has more meanings in English. Sorry turned ranty.
    26. DrBazza ◴[] No.43652735{6}[source]
    Arguably, Jira ‘has issues’.
    27. thaumasiotes ◴[] No.43653062[source]
    > Chromium-based browsers don't understand it yet and try to search for mything.internal instead, which is annoying

    That's hardly the only example of annoying MONOBAR behavior.

    This problem could have been avoided if we had different widgets for doing different things. Someone should have thought of that.

    28. johnmaguire ◴[] No.43655384{4}[source]
    I simply quoted RFC 8375. It specifically called out that while RFC 7788 mentions ".home" (quoted below), it wasn't reserved, which ".home.arpa" aims to fix. But while you say "home.arpa is for HNCP", I also quoted RFC 8375 stating it's available for other uses as well.

    > A network-wide zone is appended to all single labels or unqualified zones in order to qualify them. ".home" is the default; [...]

    29. kevincox ◴[] No.43656960[source]
    *.localhost is reserved for accessing the loopback interface. It is literally the perfect use for it. In fact on many operating systems (apparently not macOS) anything.localhost already resolves to the loopback address.
    30. g0db1t ◴[] No.43662827{3}[source]
    > Resolved (2024.07.29.06) ... I'm too tired, I read it as a IPv4 adress...