3 ms·

that’s why you WireGuard your DNS at the home router and forward your DNS queries to your VPS’s nameserver. Completely bypasses ISP sniffers.

• gigel82 5y ago
  It bypasses the DNS requests, yes (which is what I'm doing with PiHole over VPN already). But later when your browser actually connects to the IP address PiHole DNS gave it, it will send the domain name in plain-text (look up SNI and the proposed fix to that, ESNI).
  • egberts1 5y ago
    Feh
  • LinuxBender 5y ago
    In this particular case, use the VPN or ssh forwarding to route your web traffic out of a VM or rented server. Then 100% of your traffic is invisible to your ISP. If using an open source VPN like tinc [1] that does user-space dynamic mesh routing you can even route out of a different node than the one you are talking to making correlation attacks less easy. This can also be done with multiple ssh forwarding tunnels. SSH tunnels should work from your PiHole. [1] - https://www.tinc-vpn.org/ https://www.tinc-vpn.org/