Gcp

Yesterday, I had an experience that crystallized the kind of work culture I believe in. It wasn’t a complex technical problem or a groundbreaking new technology. It was a first-round interview for a DevOps Engineer position, but it was the human dynamic that made it truly memorable.

The atypical interview setup

On one side of the virtual table was me. I started my journey in the tech world 15 years ago as a Network Engineer right after graduation. Today, I work as a Cloud and Security Architect, carrying a decade and a half of experience.

I recently implemented a solution to automate my Bind9 zone file updates in my private infrastructure using GitHub Actions with free runners, all secured through a Tailscale overlay network. This setup has significantly improved my workflow and provided me with both flexibility and security. In this post, I’ll share my approach and compare it with cloud DNS solutions like AWS Route53 and Google Cloud DNS.

The Setup: GitHub Actions + Tailscale + Bind9

What I’ve built

My solution uses GitHub Actions to automatically deploy DNS zone changes to my private Bind9 server whenever I push updates to my repository. Here’s how it works: