4 ms·
Been using this since the beta on testflight and it has beeen awesome. The only thing it needs IMO is the ability to whitelist WiFi networks not to run it on.
by tomschlick 8y ago
Been using this since the beta on testflight and it has beeen awesome.
The only thing it needs IMO is the ability to whitelist WiFi networks not to run it on. I run a PiHole instance at home that does DoH through CF already so I have to remember to turn it off/on all the time to get the ad blocking.
- krispbyte 8y agoOn Android I use DNS66 [0], it creates a VPN server in my phone, redirects DNS traffics through it and filters it. This way I get adblock all the time even if I don't have a PiHole. Edit: I see now this app by CloudFlare does the same. However DNS66 let's you choose your own hosts filters and your own DNS servers. [0] https://f-droid.org/en/packages/org.jak_linux.dns66/ https://f-droid.org/en/packages/org.jak_linux.dns66/
- tomschlick 8y agoYeah iPhone user here so thats probably a no go. I've considered just creating a VPN back to my gigabit connection at home (running R715 in a homelab rack) but not super keen about the data making a round trip back home first, especially when travelling.
- voltagex_ 8y agoHeh, if you're using global roaming on your SIM, the data is making a round trip anyway.
- oarsinsync 8y agoDefinitely not. Simple services like ipchicken.com will show you're using an IP address local to the roaming provider that you're using. If you're travelling far enough, you can try accessing local services vs home-country-services and compare loading times. Or better still, just ping various services that are local or in your home and compare the actual latencies.
- voltagex_ 8y agoThat doesn't match my experience - while I was using Vodafone Germany in France, my IP was German. Someone else on EE had a UK IP.
- oarsinsync 8y agoI guess then that it depends on the local carrier, roaming carrier, and the carrier agreements in place. Probably not safe to say one or the other always happens definitively.
- nawtacawp 8y agoR715 might be a bit overkill. I use a RPI with docker. One container with vpn server and one container with pi hole. The pi hole container is not accessible outside the local LAN. The VPN server is configured to use it as a DNS server. I use iOS devices and just use the on demand function for cellular/WiFi VPN (always on). I have an iPhone X and I don’t notice a degraded user experience in regards to the battery. 13:20:52 up 10:57, 1 user, load average: 0.00, 0.03, 0.00 I just restarted it 11 hours ago, but the load is never high for the two containers. Currently free -m is reporting 114/927 used
- tomschlick 8y agoIt's not bare metal, I have Xen Server running with quite a few VMs so PiHole is just a small chunk.
- ydushyant 8y agoPiHole is super slow
- ChrisAtWork 8y agoSame. My home Unifi network is all integrated with PiHole and does DNS over HTTPS to CF. Having the 1.1.1.1 on my phone is great except when I'm at home and want it disabled.
- NamTaf 8y agoIt would be a good use of the VPN-on-demand features of iOS. Assuming you only connect to wifi at home, I guess.
- seanp2k2 8y agoThanks for the DoH (DNS over HTTP) tip re: pihole. Here's the setup guide: https://docs.pi-hole.net/guides/dns-over-https/ https://docs.pi-hole.net/guides/dns-over-https/
- sbarre 8y agoThe whitelist feature would be great because our work wi-fi network seems to be incompatible with this app somehow.