[nobodyshere]

Protect it how exactly? You can create firewall rules on DigitalOcean and limit the IP addresses from which the DNS server is accessible.

[disiplus]

that works only if you have a static ip home (which you usually don't have) or on your smartphone (which you don't have)

> https://www.calyptix.com/top-threats/3-common-dns-attacks-an...

[patentatt]

I have a ‘dynamic’ IP address at home that hasn’t changed for a few years. I have a slew of firewall rules based on it that are reliable in practice.

[JshWright]

If you're that concerned about it, Wireguard is easy enough to set up on all those endpoints.