#1
Pi-hole is a network-wide DNS sinkhole that blocks ads and trackers for all devices on your network, with a web dashboard, query logs, and optional DHCP server.
60.1k stars3.3k forkslast commit Actively maintained
5 self-hosted Cisco Umbrella alternatives
Cloud-delivered DNS-layer security and Security Service Edge (SSE) platform that blocks malware, phishing, and command-and-control traffic. Provides secure web gateway, firewall-as-a-service, CASB, DLP and zero-trust access controls for users and devices.
Alternatives to Cisco Umbrella
Cross-platform DNS server with authoritative/recursive modes, encrypted DNS (DoH/DoT/DoQ), DNSSEC, ad/malware blocking, DHCP, and an HTTP API with web admin UI.
9.4k stars743 forksGPL-3.0last commit Actively maintained
#3
Open-source DNS proxy and network-wide ad-blocker for local networks. Supports DoH/DoT, per-client rules, caching, deep CNAME inspection, Prometheus metrics, Docker and Helm.
6.8k stars292 forksApache-2.0last commit Actively maintained
#4
Standards-based validating recursive DNS resolver with DNSSEC validation, DNS-over-TLS/HTTPS support and configurable caching for privacy and performance.
4.7k stars445 forksBSD-3-Clauselast commit Actively maintained
#5
Fully-replicated DNS, DHCP and TFTP server with ad‑blocking, web UI, API, Prometheus metrics and multi-site replication for small to medium networks.
927 stars30 forksGPL-3.0last commit Actively maintained
What replacing Cisco Umbrella actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 5 of 5 shipped a commit in the last six months. Licences in this list: GPL-3.0, Apache-2.0, BSD-3-Clause. In exchange you take on hosting, backups and updates yourself.
Browse everything in Core Network Services (DNS, DHCP, IPAM).
