Live data from Hacker News

AdGuard Home: Network-wide ad- and tracker-blocking DNS server

github.com

131–140 of 258 posts

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#131

Earlier quoted context omitted.

It's very much comparable...for personal use: https://controld.com/plans?step=plans

With your link, I'm only seeing "Free Trial". While I'm not seeing any pricing for personal use (without signing up at least), I'll take you at your word. Maybe I'll give it a try sometime.

That's odd. Even in incognito mode i see 2 plans and 2 prices for personal use.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#132

Earlier quoted context omitted.

I'm curious what issues you ran into with Pi-hole? I was running my instance for years without a single hiccup. I ended up moving to AdGuard Home about a year ago though because I wanted to run it on my OPNSense box. I have an automatic WireGuard VPN set up on my devices to VPN into my home network when I'm not connected to my SSID, so my local DNS still works remotely.

Too many false positives with Pi-Hole. I never felt comfortable putting my partner on the same vlan that it was serving DNS requests for fear that something would break for them when I was out of town, unable to get into the pi-hole and sort out the issue. I also had my banking app stop working one day. Never could get it working. Eventually I just got fed up with having to switch vlans or to mobile data to check my…

> I never felt comfortable putting my partner on the same vlan that it was serving DNS requests for fear that something would break for them when I was out of town

One potential workaround, if your hardware supports it, is to broadcast two separate SSIDs for general users: one with a blocklist, and one without as a fallback. Users just need to know when to use each.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#133
post #96

With a self-hosted DNS internally, how do you handle fallback? For example if the box with Adguard Home or pihole crashes, can you configure your router or your devices in a way that would instead go to say cloudflare or google DNS?

most routers let you set a primary dns server and a secondary. just set the secondary to something like google or cloud flare dns.

There is no primary and secondary dns on windows. Both dns servers are queried, if one goes down you are fine but you won’t hit your local dns all the time.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#134

Earlier quoted context omitted.

Too many false positives with Pi-Hole. I never felt comfortable putting my partner on the same vlan that it was serving DNS requests for fear that something would break for them when I was out of town, unable to get into the pi-hole and sort out the issue. I also had my banking app stop working one day. Never could get it working. Eventually I just got fed up with having to switch vlans or to mobile data to check my…

I can empathize with the sometimes aggressive blocking, and as you pointed out can be pretty block list dependent. I generally will go in and whitelist things if a site breaks due to a DNS block, but of course putting your partner on the same VLAN can be problematic. I "got around" that by having a button in Home Assistant that will completely turn off Pi-hole (and now AdGuard). So my partner will go in and toggle th…

I had similar issues and the problem with a white list is it can be very difficult to figure exactly which cryptic subdomain of some major company is necessary for the service to work, without just allowing everything and defeating the purpose .

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#135
post #96

With a self-hosted DNS internally, how do you handle fallback? For example if the box with Adguard Home or pihole crashes, can you configure your router or your devices in a way that would instead go to say cloudflare or google DNS?

Honestly? Have two instances and point to both via your router dhcp dns. Very Client will use them and you are good to go. There are also solutions like adguardhome-sync to keep both installations in sync.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#136

Earlier quoted context omitted.

most routers let you set a primary dns server and a secondary. just set the secondary to something like google or cloud flare dns.

I believe this only works if your ad blocking DNS is configured to return 0.0.0.0 for all blocked domains rather than NXDOMAIN, since then services might try using the secondary DNS instead and that would result in nothing getting blocked. Ideally your secondary DNS should be a copy of the primary.

do you know if pihole or Adguard can configured to support confirming to the router or the client that resolution took place, rather than try the secondary DNS.

If i understand you correctly, if you have a blocking internal DNS running pihole or Adguard and an external general DNS such as google or cloudflare, unless what you described can be configured, the requests that come back "blocked" from pihole would then simply be resolved by google/cloudflare, thus negating the point of pihole.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#138

Earlier quoted context omitted.

Except all of these third party VPN and DNS type services are literally NSA honeypots and privacy nightmares. I get that you have to do DNS lookups somewhere, but I'm not going to make it ridiculously trivial for a bad actor to scoop up all that data conveniently in a central location.

>> consider upgrading to Mullvad > all of these third party VPN and DNS type services are literally NSA honeypots https://mullvad.net/en/help/privacy-policy It is up to you to decide what you believe, but Mullvad is a swiss company that does not ask for your personal information for signup and even allows payment in cash. You hurt your own credibility each time you make an unqualified claim without looking into it.

Swiss : https://en.m.wikipedia.org/wiki/Crypto_AG

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#140
post #96

With a self-hosted DNS internally, how do you handle fallback? For example if the box with Adguard Home or pihole crashes, can you configure your router or your devices in a way that would instead go to say cloudflare or google DNS?

I dealt with a less-than-ideally reliable pihole by configuring the pihole as the primary DNS, and an external DNS server as the secondary (most devices accept 2 or more IPs for DNS).

On Windows that means your requests are queried against all DNS servers listed.
Post reply on HN