#1
Pi-hole is a network-wide DNS sinkhole that blocks ads and trackers for all devices on your network, with a web dashboard, query logs, and optional DHCP server.
60.6k stars3.3k forkslast commit Actively maintained
9 self-hosted Control-D alternatives
Control D is a cloud DNS filtering service that blocks ads and malware, enforces web access policies, filters content, and routes DNS through customizable profiles. It provides per-profile rules, redirection and management tools for network security and policy enforcement.
Alternatives to Control-D
Open-source DNS-based ad & tracker blocking server for networks. Offers per-device rules, parental controls, encrypted upstream DNS (DoH/DoT/DNSCrypt), web UI and API.
36.4k stars2.5k forksGPL-3.0last commit Actively maintained
Cross-platform DNS server with authoritative/recursive modes, encrypted DNS (DoH/DoT/DoQ), DNSSEC, ad/malware blocking, DHCP, and an HTTP API with web admin UI.
9.7k stars773 forksGPL-3.0last commit Actively maintained
#4
Open-source DNS proxy and network-wide ad-blocker for local networks. Supports DoH/DoT, per-client rules, caching, deep CNAME inspection, Prometheus metrics, Docker and Helm.
6.9k stars298 forksApache-2.0last commit Actively maintained
#5
Standards-based validating recursive DNS resolver with DNSSEC validation, DNS-over-TLS/HTTPS support and configurable caching for privacy and performance.
4.8k stars448 forksBSD-3-Clauselast commit Actively maintained
Simple local ad blocker that updates your system hosts or dnsmasq rules to block ad and tracking domains across any browser or application.
1.9k stars73 forksApache-2.0last commit Actively maintained
#7
Fully-replicated DNS, DHCP and TFTP server with ad‑blocking, web UI, API, Prometheus metrics and multi-site replication for small to medium networks.
927 stars30 forksGPL-3.0last commit Actively maintained
#8
Self-hosted DNS sinkhole written in Go that blocks ads, trackers and malicious domains; provides a modern web dashboard, Docker support, DoT/DoH options and realtime stats.
732 stars35 forksMITlast commit Actively maintained
#9
Privoxy is a self-hosted, non-caching web proxy that filters ads and trackers, rewrites content, and modifies HTTP headers for privacy and access control.
Activity unknown
What replacing Control-D actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 8 of 9 shipped a commit in the last six months. Licences in this list: GPL-3.0, Apache-2.0, BSD-3-Clause, MIT. In exchange you take on hosting, backups and updates yourself.
Browse everything in Core Network Services (DNS, DHCP, IPAM).
