Live data from Hacker News

AdGuard Home: Network-wide ad- and tracker-blocking DNS server

github.com

231–240 of 258 posts

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#231
post #213

AdGuard is a Russian company, with Russian engineers, the majority of AdGuard developers and other employees working from Moscow, registered in Cyprus. Not a great recipe. Hard pass on security grounds.

and your macbook was built in china. uh oh

Apple is an American company and we’re not actively paying for a hot war against China.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#232

Earlier quoted context omitted.

Odd - I have a pi-hole on my home network and never hit the issue with YouTube. The only breakage I've found is the top "results" (actually sponsored ads) on Google search don't work, but I always scroll past those anyway to discourage bad behaviour. In fact pi-hole works so well that I'm always struck by how awful the internet has become when I venture away from my home network. Doctorow's enshitification in action.

The YouTube thing was what turned me on to Pi-Hole's list of commonly-whitelisted domains[1], but even after adding it, the experience of things breaking was just ultimately too frustrating to keep using it. It's really an issue with feedback, though. When my ad blocker breaks a page, it says that it blocked something. When pi-hole breaks a page, it just appears to be broken. 1: https://discourse.pi-hole.net/t/common…

I have had to do the same to fix Youtube progress reporting, but not much more. That is one of few things the PiHole has ever broken for me (that I know of...). I agree that a problem with PiHole is that if something is not working and I disable uBlock as a debugging step, then I have to also browse and login to 2 different PiHole GUIs and temporarily disable it. Without knowing if PiHole actually blocked anything. It is especially inconvenient when on the phone. I have not looked if it already exist, but I would want a nice little app I can open and just click "disable for X time" which would disable the blocking on all my PiHoles at once. Also syncing all settings from a "master" instance would be great. Maybe the default lists should contain some of the whitelis domains or something aswell.

Still, these problems are so small compared to the value I get out of my PiHoles. Blocking ads for years on end while having troubles maybe 3-4 times in total. All the other time it just works.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#233
post #3

I ran a competing project[0] on my home network for a few years before I discovered NextDNS[1]. What I lost in performance (requests don't leave my house) I gained in portability: ALL my devices can take advantage – at home and away – and time-saved. PiHole works 90% of the time, but when it did stop working, I'd have to spend a bit of time fixing it. At $20/year, I simply couldn't compete with NextDNS. Note: This is…

Interesting -- for me pi-hole has worked for so long that I've forgotten my login even, but when I redo my home network in the near future I definitely intend to re-evaluate the options. Sounds like I've got 3 now...

This is also my issue with pi-hole, I still use it but I lost the password. Every now and then I take a crack at getting back in so I can update it. I have been thinking of switching to NextDNS so I could have blocking everywhere.

Other than this problem, Pi-Hole has always been great

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#234
post #212

Earlier quoted context omitted.

> PiHole works 90% of the time, but when it did stop working, I'd have to spend a bit of time fixing it. I don't know what problems you had with your Pi that resulted in 10% downtime, but that sort of hyperbole sounds a lot like shilling. Cases of SD card corruption are 99.9% due to the use of underpowered power supplies - just buy the official Raspberry Pi power supply if you can be bothered to search for a proper 2…

Don’t want to jinx it but I’ve been running a pihole on a RPi 3 for a really long time - at least 6-7 years and the only thing I’ve had to do is an occasional upgrade. I like the convenience and the fact that I’m blocking about 4M domains. My TV is also forced to use it so ads don’t update on Android TV. Not sure if NextDNS supports custom domain lists or not.

Same here, except mine runs as a docker and I haven't touched it in five years.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#235

Earlier quoted context omitted.

I'm curious what issues you ran into with Pi-hole? I was running my instance for years without a single hiccup. I ended up moving to AdGuard Home about a year ago though because I wanted to run it on my OPNSense box. I have an automatic WireGuard VPN set up on my devices to VPN into my home network when I'm not connected to my SSID, so my local DNS still works remotely.

I did have several issues with adguard home, after some time (or packets?) the dns wouldn’t resolve and basically you can’t open any website, you can ping with no issues but not opening the site, only resolved by either restarting the server or waiting few minutes, didn’t bother to troubleshoot it but I tried it on several hardware and got the same issues with different interruptions time.

I experience similar issues with Cloudflare Zero Trust (I have it setup to work as an ad blocker, using a Terraform config to update blocklists pulled from eg uBlock Origin sources). It'll work great most of the time, but when it stops working I need to disconnect and reconnect. Hard to complain since it's free, though.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#236

AdGuard is a Russian company, with Russian engineers, the majority of AdGuard developers and other employees working from Moscow, registered in Cyprus. Not a great recipe. Hard pass on security grounds.

It’s open source software.

MacPaw lists Russian-developed software as a risk because the government can access your data at any time — this is self-hosted open-source software though.

The FSB can’t just access your local server with an arbitrary court order.

Therefore this doesn’t feel like a legitimate concern but more like Russophobia, which I understand but also think is utterly unasked for as I know first hand how much Russian developers are suffering from the stupidity of their government.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#237
post #236

AdGuard is a Russian company, with Russian engineers, the majority of AdGuard developers and other employees working from Moscow, registered in Cyprus. Not a great recipe. Hard pass on security grounds.

It’s open source software. MacPaw lists Russian-developed software as a risk because the government can access your data at any time — this is self-hosted open-source software though. The FSB can’t just access your local server with an arbitrary court order. Therefore this doesn’t feel like a legitimate concern but more like Russophobia, which I understand but also think is utterly unasked for as I know first hand ho…

You're swapping out your DNS for a Russian controlled DNS service. Seems dumb IMO.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#238

Earlier quoted context omitted.

SD card corruption that just slowly started degrading the results, twice. For the price of a single Pi, I can get NextDNS ad protection for _all_ my devices for multiple years. No matter where they are.

Running pihole on a Pi is severely overrated. I run it on my NAS Linux server (in a Docker container) where I have a bunch of other things. Zero problems, now using it for more than two years.

I tried that too, but the Pi needs to be bridged to the network for it to show up properly and that caused issues with docker containers not being able to access it properly.

Most likely it can be made to work, but I have more money than time to spend on faffing about with stuff that should Just Work, so I threw $10 at NextDNS which solved all my issues instantly :)

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#239
post #147
post #34

Unsure if anyone here uses Technitium DNS(Opensource and free). It works on minimal hardware. I am running it on an Orange Pi 3 LTS. https://technitium.com/dns/

This looks great. Qs: this says “ Technitium DNS Server is an open source authoritative as well as recursive DNS server” Are pi-hole/Adgyard also recursive DNS server or just a blockers? Edit: I’ve been using pi-hole for ages, trying to figure out if this has any advantage.

Can't speak to Adguard:

PiHole isn't natively recursive, but you can easily set up a service alongside pihole on the pi (or in another docker, if your pihole is a container) called Unbound which provides recursive DNS.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#240

Earlier quoted context omitted.

Running pihole on a Pi is severely overrated. I run it on my NAS Linux server (in a Docker container) where I have a bunch of other things. Zero problems, now using it for more than two years.

I tried that too, but the Pi needs to be bridged to the network for it to show up properly and that caused issues with docker containers not being able to access it properly. Most likely it can be made to work, but I have more money than time to spend on faffing about with stuff that should Just Work, so I threw $10 at NextDNS which solved all my issues instantly :)

I don't even have a clue how I solved it for myself, but again, didn't have a problem.
Post reply on HN