#1
Pi-hole is a network-wide DNS sinkhole that blocks ads and trackers for all devices on your network, with a web dashboard, query logs, and optional DHCP server.
60.1k stars3.3k forkslast commit Actively maintained
9 self-hosted Cisco OpenDNS (Umbrella) alternatives
Cloud-delivered DNS security and secure web gateway that blocks malicious domains, phishing, malware and unwanted content via DNS-layer enforcement, DNS proxying and cloud threat intelligence; provides policy controls, visibility and reporting for organizations.
Alternatives to Cisco OpenDNS (Umbrella)
Open-source DNS-based ad & tracker blocking server for networks. Offers per-device rules, parental controls, encrypted upstream DNS (DoH/DoT/DNSCrypt), web UI and API.
35.7k stars2.4k forksGPL-3.0last commit Actively maintained
Cross-platform DNS server with authoritative/recursive modes, encrypted DNS (DoH/DoT/DoQ), DNSSEC, ad/malware blocking, DHCP, and an HTTP API with web admin UI.
9.4k stars743 forksGPL-3.0last commit Actively maintained
#4
Open-source DNS proxy and network-wide ad-blocker for local networks. Supports DoH/DoT, per-client rules, caching, deep CNAME inspection, Prometheus metrics, Docker and Helm.
6.8k stars292 forksApache-2.0last commit Actively maintained
#5
Standards-based validating recursive DNS resolver with DNSSEC validation, DNS-over-TLS/HTTPS support and configurable caching for privacy and performance.
4.7k stars445 forksBSD-3-Clauselast commit Actively maintained
Simple local ad blocker that updates your system hosts or dnsmasq rules to block ad and tracking domains across any browser or application.
1.9k stars73 forksApache-2.0last commit Slowing down
#7
Fully-replicated DNS, DHCP and TFTP server with ad‑blocking, web UI, API, Prometheus metrics and multi-site replication for small to medium networks.
927 stars30 forksGPL-3.0last commit Actively maintained
#8
Self-hosted DNS sinkhole written in Go that blocks ads, trackers and malicious domains; provides a modern web dashboard, Docker support, DoT/DoH options and realtime stats.
716 stars35 forksMITlast commit Actively maintained
#9
Privoxy is a self-hosted, non-caching web proxy that filters ads and trackers, rewrites content, and modifies HTTP headers for privacy and access control.
Activity unknown
What replacing Cisco OpenDNS (Umbrella) actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 7 of 9 shipped a commit in the last six months. Licences in this list: GPL-3.0, Apache-2.0, BSD-3-Clause, MIT. In exchange you take on hosting, backups and updates yourself.
Browse everything in Core Network Services (DNS, DHCP, IPAM).
