#1
Pi-hole is a network-wide DNS sinkhole that blocks ads and trackers for all devices on your network, with a web dashboard, query logs, and optional DHCP server.
60.6k stars3.3k forkslast commit Actively maintained
8 self-hosted Quad9 alternatives
Quad9 is a public, privacy-focused recursive DNS resolver that blocks access to known malicious domains using aggregated threat intelligence. It performs DNS resolution with malware, phishing and botnet domain blocking while minimizing user data retention.
Alternatives to Quad9
Open-source DNS-based ad & tracker blocking server for networks. Offers per-device rules, parental controls, encrypted upstream DNS (DoH/DoT/DNSCrypt), web UI and API.
36.4k stars2.5k forksGPL-3.0last commit Actively maintained
Cross-platform DNS server with authoritative/recursive modes, encrypted DNS (DoH/DoT/DoQ), DNSSEC, ad/malware blocking, DHCP, and an HTTP API with web admin UI.
9.7k stars773 forksGPL-3.0last commit Actively maintained
#4
Open-source DNS proxy and network-wide ad-blocker for local networks. Supports DoH/DoT, per-client rules, caching, deep CNAME inspection, Prometheus metrics, Docker and Helm.
6.9k stars298 forksApache-2.0last commit Actively maintained
#5
Standards-based validating recursive DNS resolver with DNSSEC validation, DNS-over-TLS/HTTPS support and configurable caching for privacy and performance.
4.8k stars448 forksBSD-3-Clauselast commit Actively maintained
Simple local ad blocker that updates your system hosts or dnsmasq rules to block ad and tracking domains across any browser or application.
1.9k stars73 forksApache-2.0last commit Actively maintained
#7
Fully-replicated DNS, DHCP and TFTP server with ad‑blocking, web UI, API, Prometheus metrics and multi-site replication for small to medium networks.
927 stars30 forksGPL-3.0last commit Actively maintained
#8
Self-hosted DNS sinkhole written in Go that blocks ads, trackers and malicious domains; provides a modern web dashboard, Docker support, DoT/DoH options and realtime stats.
732 stars35 forksMITlast commit Actively maintained
What replacing Quad9 actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 8 of 8 shipped a commit in the last six months. Licences in this list: GPL-3.0, Apache-2.0, BSD-3-Clause, MIT. In exchange you take on hosting, backups and updates yourself.
Browse everything in Core Network Services (DNS, DHCP, IPAM).
