AdGuard DNS: A Privacy-Oriented DNS Server

Re:AdGuard DNS: A Privacy-Oriented DNS Server by plg on Sunday December 30, 2018 @02:46PM (#18790939)

I’ve been using Pi-Hole on my home network and it’s amazing. Routinely 18-20%% of DNS requests are blocked. When my wife goes out onto another network she says she is shocked at how ugly her web browsing becomes (ads on nytimes, huffpo, etc). I highly recommend it. Am using it with cloudfare’s encrypted DNS just as one more middle finger to my ISP.

[ Parent | on HN ]

Re:AdGuard DNS: A Privacy-Oriented DNS Server by mdeeks on Sunday December 30, 2018 @06:46PM (#18792043)

You might already know this, but in case you don't: they can still see the domain names you visit in plain text because of TLS SNI: https://en.wikipedia.org/wiki/Server_Name_Indication

Encrypted SNI is a thing on the horizon that'll let us give the dual middle finger to our ISPs. As far as I know, it is not here now though.

[ Parent | on HN ]

Re:AdGuard DNS: A Privacy-Oriented DNS Server by gmac on Monday December 31, 2018 @05:51AM (#18794010)

A way round this, of course, is a VPN. Which is also a handy way of using an ad-blocking DNS service everywhere. My setup is documented here: https://github.com/jawj/ikev2-setup

[ Parent | on HN ]

Re:AdGuard DNS: A Privacy-Oriented DNS Server by newman314 on Sunday December 30, 2018 @11:40PM (#18793047)

There’s an open request to add ESNI support to cloudflared

[ Parent | on HN ]

Re:AdGuard DNS: A Privacy-Oriented DNS Server by Fnoord on Monday December 31, 2018 @08:23AM (#18794376)

> When my wife goes out onto another network

This is why I implemented WireGuard on top of it. All the traffic is encrypted through our home network (200/20 mbit) with DNS over TLS and adblocking due to Pi-Hole. LTE, open WLAN networks, all of these work. And roaming works very well with WireGuard. The downside is the 20 mbit upload.

[ Parent | on HN ]

Re:AdGuard DNS: A Privacy-Oriented DNS Server by madspindel on Monday December 31, 2018 @08:39AM (#18794426)

Any recommended tutorial for setting this up? I have a Raspberry Pi with Pi-hole and would be great to add Wireguard on top of that.

[ Parent | on HN ]

Re:AdGuard DNS: A Privacy-Oriented DNS Server by Fnoord on Monday December 31, 2018 @08:48AM (#18794449)

I use WireGuard on my router (ER-L) and Pi-Hole on the router as well, with a primary DNS on my Synology which uses Pi-Hole's Docker image [1]. Docker runs on Raspberry Pi, so I recommend you look into that route. Jessfraz wrote a howto on running WireGuard in Docker [2]

[1] https://github.com/pi-hole/docker-pi-hole

[2] https://blog.jessfraz.com/post/installing-and-using-wireguar...

[ Parent | on HN ]

Re:AdGuard DNS: A Privacy-Oriented DNS Server by jcastro on Sunday December 30, 2018 @02:51PM (#18790961)

> Am using it with cloudfare’s encrypted DNS just as one more middle finger to my ISP.

Curious how you set this up? I see cloudflare as an option in the pihole settings but doesn't appear to be encrypted? (at least as a default)

[ Parent | on HN ]

Re:AdGuard DNS: A Privacy-Oriented DNS Server by judge2020 on Sunday December 30, 2018 @02:54PM (#18790974)

Probably via 'cloudflared':

https://docs.pi-hole.net/guides/dns-over-https/

[ Parent | on HN ]

Re:AdGuard DNS: A Privacy-Oriented DNS Server by plg on Sunday December 30, 2018 @02:59PM (#18790997)

Yup cloudfared

[ Parent | on HN ]

Re:AdGuard DNS: A Privacy-Oriented DNS Server by klrkdekira on Monday December 31, 2018 @12:21AM (#18793166)

If you want more options, dnscrypt-proxy https://github.com/jedisct1/dnscrypt-proxy

https://github.com/pi-hole/pi-hole/wiki/DNSCrypt-2.0

[ Parent | on HN ]

Re:AdGuard DNS: A Privacy-Oriented DNS Server by dominotw on Monday December 31, 2018 @10:06AM (#18794751)

Do their paid versions have ads too?

[ Parent | on HN ]