
GoAway
Lightweight DNS sinkhole with a web admin dashboard
732 stars 35 forks last commit first released MIT
Actively maintained
Last commit 18 Jun 2026.

GoAway is a lightweight DNS sinkhole designed to block unwanted domains at the network level. It combines a Go-based DNS server with a modern web administration dashboard for managing blocklists, viewing statistics and configuring DNS features.
Key Features
- DNS-level domain blocking with customizable blacklists and whitelist precedence
- Built-in web admin dashboard for configuration, monitoring and live statistics
- Cross-platform binaries and first-class Docker/Docker Compose images for easy deployment
- Support for encrypted DNS (DNS-over-TLS and DNS-over-HTTPS) if TLS is configured
- Real-time query statistics, timelines and client/top-talkers visualisations
- Configurable upstream DNS fallback and caching behaviour (cache TTL, UDP/TCP settings)
- CLI and config-file options plus make targets for development (hot-reload development mode)
Use Cases
- Network-wide ad, tracker and malicious domain blocking for home or small office networks
- Privacy-focused DNS gateway with centralized controls and per-network statistics
- Lightweight replacement or companion to Pi-hole/AdGuard for users who prefer a Go-based stack
Limitations and Considerations
- Encrypted DNS (DoT/DoH) requires valid TLS certificates; TLS is disabled by default
- The project has historically used 0.x versioning and may introduce breaking changes between releases
- macOS and Windows builds are marked as beta; primary testing and support target Linux
- First-run admin password is generated and shown in logs only once; operators should securely store it
GoAway provides a compact, observable DNS sinkhole with an approachable web UI and multiple deployment options. It is well suited to self-hosted environments where low resource footprint and simple management of network-level blocking are priorities.
Categories:
Tags:
Tech Stack:
Similar to GoAway

AdGuard Home
Network-wide DNS server that blocks ads, trackers, phishing and malware
Open-source DNS-based ad & tracker blocking server for networks. Offers per-device rules, parental controls, encrypted upstream DNS (DoH/DoT/DNSCrypt), web UI and API.


Blocky
Fast, lightweight DNS proxy and ad-blocker in Go
Open-source DNS proxy and network-wide ad-blocker for local networks. Supports DoH/DoT, per-client rules, caching, deep CNAME inspection, Prometheus metrics, Docker and Helm.

Technitium DNS Server
Authoritative and recursive DNS server with web console
Cross-platform DNS server with authoritative/recursive modes, encrypted DNS (DoH/DoT/DoQ), DNSSEC, ad/malware blocking, DHCP, and an HTTP API with web admin UI.

Pi-hole
Network-wide DNS sinkhole for ad and tracker blocking
Pi-hole is a network-wide DNS sinkhole that blocks ads and trackers for all devices on your network, with a web dashboard, query logs, and optional DHCP server.


Gravity
Replicated DNS, DHCP & TFTP server with ad-blocking
Fully-replicated DNS, DHCP and TFTP server with ad‑blocking, web UI, API, Prometheus metrics and multi-site replication for small to medium networks.

portracker
Self-hosted real-time port monitoring and service discovery
Self-hosted tool that auto-discovers system and container ports, maps services in real time, and helps prevent port conflicts across servers via a web dashboard.






