4 ms·
I've been using AdGuard Home, which does pretty much the same thing, but is slightly better polished, with things like support for DoH and OSs other than Linux.
by LeoPanthera 2y ago
I've been using AdGuard Home, which does pretty much the same thing, but is slightly better polished, with things like support for DoH and OSs other than Linux.
https://github.com/AdguardTeam/AdGuardHome https://github.com/AdguardTeam/AdGuardHome
- lawn 2y agoI even run Adguard Home on my router that runs opnsense.
- samplatt 2y agoWhat routers are compatible with opnsense? Or does it need a full-blown server/container? Been happy with my pihole for a few years, and this thread is full of new information for me.
- gh02t 2y agoOpnsense is not like OpenWRT, it targets running on relatively powerful generic x86 hardware. Intel CPUs and networking hardware usually works best because of driver support on BSD, but it will work on others. I say "relatively" because even low power old embedded CPUs are more than enough to route at a gigabit or more with lots of firewall rules and services running. Opnsense's cousin Pfsense also has some support for ARM, but that version is only really available on their commercially supported hardware. Most people either buy a generic box that can be had for ~$250, or recycle an old PC and stick in a network card. You can also buy commercially supported hardware for Opnsense or Pfsense's parent companies, though the value proposition isn't worth it for home users IMO as you will pay a steep premium versus loading up something yourself.
- samplatt 2y agoThanks very much for that. Been thinking about converting an old server to a router + container host for a while.
- gh02t 2y agoLook on eBay for old 4 port Intel NICs, you can get em for very cheap and they work forever. Beware Opnsense and Pfsense are based on BSD and you're really not supposed to touch the underlying OS by design anyway, so you will need to virtualize if you also want to host containers alongside.
- lawn 2y agoI bought my router from this site: https://teklager.se/en/products/routers/ https://teklager.se/en/products/routers/ They have some guides and stuff that explains the hardware requirements that might be helpful for you.
- roger_ 2y agoI moved to AGH a while ago too. Is there anything in Pi-Hole v6 that would make someone switch back?
- laweijfmvo 2y agoI went from PiHole -> AdGuard -> NextDNS. My patience for tinkering and maintaining wasn't high enough to not just pay someone else to do it :)
- vosper 2y agoYeah +1 for NextDNS. It's so easy to setup and manage, and works really well.
- LeoPanthera 2y agoThe big benefit of running a DNS server locally is caching. Using any external provider means you have to go out to the internet for every single request. With a local server, most requests are fulfilled from the local cache.
- mrmuagi 2y agoSame except skipping AdGuard. Having the DNS live on a pi sounded like fun for me but it gave me stress due to power outages. There is safety in knowing you aren't adding a point of failure that only you know how to solve. I also had issues with adding backup DNS, since a backup DNS would be queried if the pihole blocked the DNS query -- so I would have to maintain two seperate blocklists, one local and one offsite.
- LeoPanthera 2y ago
- 2OEH8eoCRo0 2y agoI love AdGuard Home but the single binary container from a Russian company makes me nervous. I may move to building it myself. Is this criticism unfair?
- skotobaza 2y ago> Is this criticism unfair? Only if you don't trust only Russians and no one else.
- deleted 2y ago[deleted]
- 2OEH8eoCRo0 2y agoI don't trust Iran, North Korea, or China either. It's not hard, I'm an American and it's 2025. These are our adversaries (I didn't choose them) who currently commit cybercrimes against us. Hopefully in 2035 that won't be the case and we can all sing kumbaya.
- skotobaza 2y agoBut if the binary came from US even with some malicious code, it would be OK simply because the origin is different?
- ziddoap 2y ago>with some malicious code Obviously not.
- h4ck_th3_pl4n3t 2y agoI hope that you at some point will understand that these are minorities among a huge population that you are talking about. It sounds like you think that every butcher, barber, dancer, teacher, software dev etc in China is just thinking of how they can hack the US. Guess what: that's the image propagated by propaganda and very far from the actual truth. If you don't trust people, study their code and make a formed opinion about it.
- brynx97 2y agoDoH is possible on pihole using cloudflared-- https://docs.pi-hole.net/guides/dns/cloudflared/ https://docs.pi-hole.net/guides/dns/cloudflared/. > The cloudflared binary will also work with other DoH providers.
- nocchedure 2y agoPet peeve: I wish there was an (easy) way of installing Adguard directly on my Dream Machine.
- zzyzxd 2y agoAnd it's much easier to customize. - I run it in Kubernetes with multiple replicas behind a load balancer for high availability. - A companion iOS shortcut for family members to temporarily pause protection on all replicas for online shopping. - Configuration as code, which gets mounted as a secret. - Query logs from all replicas forwarded to loki for visualization and performance review.
- mattrighetti 2y agoSwitched to AGH too a few years ago because from time to time pi-hole would get stuck upon unplanned reboots of the Raspberry Pis on which I had it installed
- febrianrendak 2y agoI don't know why but adguard often just freeze and need to be restarted. Maybe due my device is old enough (Pi 1). But Pihole + cloudflared run flawlessly.