5 ms·
I ditched my Pi-hole but still block ads with NextDNS
- bhaney 2y agoI've just been dumping ad blocking hosts files into /etc/hosts.d/ on my router since long before pi-hole was a thing.
- MattSayar 2y agoHow do you keep them updated?
- bhaney 2y agocurl in a cronjob
- vwadhwani 2y agoWorks great for PCs, but my pi-hole doubles as a VPN and lets me block ads on my iPhone too.
- doubled112 2y agoMy router supports DNS blocklists and VPN too.
- bhaney 2y ago> my pi-hole doubles as a VPN So does any non-trash router.
- ahepp 2y agoI find pi-hole fascinating since it shows there is a sizeable market for open Linux routers in the home, but for some reason people seem fixated with running it on a raspberry pi. That’s fine, but it seems like the worst of all worlds? I wouldn’t say the Pi is particularly reliable, and it doesn’t have a switch chip inside it, or enough beef for heavier processing. It’s all just standard *nix software that will work on anything from my SFP module running openwrt, to a reflashed MIPS Ubiquiti router, to my x86 FreeBSD box.
- ahepp 2y agoIn classic HN fashion I forgot to mention that the nice web UI must play a key role here, and make up for all the other UX issues that come with using a pi rather than just “apt-get dnsmasq”
- gh02t 2y agoThe Pi is familiar and comfortable for a lot of people who wouldn't otherwise use Linux or run any kind of server. It's genuinely not the best option in a lot of respects, but it's also the only thing a lot of people know and going to a dedicated server or generic Linux/BSD router seems intimidating, even if they appreciate the possible advantages. Pi Hole was started specifically as a project targeting the Pi. It wasn't the first to do ad blocking DNS by a long shot, but it did marry a nice web UI to DNS and made it a lot more accessible. Nowadays I think there are much better options like AdGuard that do the same thing, but "running PiHole on a Pi" is a tangible thing to do with the RasPi you got as a gift and is an approachable project for a lot of Linux beginners with real benefits. You can find a million people on YouTube recommending exactly that, and walking you through how to do it step-by-step on a RasPi. Lot of people who are interested in tech but not so skilled probably don't have dedicated servers or know how to set one up, and I expect PiHole on a RasPi gets a lot of momentum from that as something cool and actually useful to do that isn't actually difficult/there are a million tutorials for. Tl;dr is I agree with you, there are clearly technically superior options. But for a lot of the people you're referring to the alternative is not to run something better on a dedicated server/router, it's to do nothing at all and go back to using the router from your ISP.
- ddejohn 2y agoI'm one of those users -- I set up a pihole as my DHCP server to get ad blocking on all devices on my network a few years ago and haven't really thought about it since. Raspberry Pi was familiar enough. Networking in general is mostly Greek to me, so it wasn't the easiest thing to do, but it's pretty much been set-and-forget since the initial setup (aside from updating pihole itself and the web interface every few months). I've seen AdGuard recommended a lot recently but from what I can tell this doesn't do the same thing as a DHCP pihole. Something I'd love to do some day is replace my consumer router with something open source and run an all-in-one solution (ad blocking for all devices on network, DoH, as well as just a generally competent home router for a small apartment). Do you have any recommendations for where to start if I were to go down this road?
- LinuxBender 2y agoSimilar here. I use Unbound DNS plus 1Hosts [1] and a few others here and there and I block all the DoH/DoT servers. I also blackhole route known malicious networks. [1] - https://github.com/badmojr/1Hosts https://github.com/badmojr/1Hosts
- mihaaly 2y agoIs this a paid article (ad)?
- MattSayar 2y agoNo, I just wanted to put everything in the title so it didn't sound like clickbait. I laid out my experience with Pi-hole and why I chose a different service instead
- bherrmann7 2y agoThanks Matt
- neilv 2y agoSome of the language does sound like they're pitching a gizmo on TV, to separate retirees from their money. But still within the range of how genuine people sound enthusiastic when they've found a lifehack.
- MattSteelblade 2y agoThis is, almost verbatim, my exact same experience. Used pi-hole as an excuse to get a Raspberry Pi. Used it for a long time but got tired of troubleshooting. Discovered NextDNS (from this site), and have been a happy customer since. NextDNS has not been perfect (it looks like they abandoned their app(s)), but it has the added benefit of working outside of my home network.
- CharlesW 2y agoRegarding the client apps, I find them to be mostly not neccessary now that you can identify clients to DNS-over-TLS and DNS-over-HTTPS endpoints. What do you miss?
- MattSteelblade 2y agoBeing able to disable it on the fly is the number one thing I miss the most. Additionally, it would be nice to interface through the app instead of the website, but that's definitely under nice-to-have; the website is functional on a mobile device.
- djaychela 2y agoHave to say I've never had a single issue with pihole unlike the OP. It's literally been "install and forget" - not a single outage in maybe 3 years of use. When I use the Internet elsewhere I see what a good job it does when I'm at home...
- MattSayar 2y agoDo you think that's because of the hardware you're running it on? Do you actually use a Raspberry Pi or something more resilient?
- Hikikomori 2y agoI just run it in a Docker container on my NUC that i upgrade occasionally, no issues for years.
- djaychela 2y agoIt's running on my home server which is a low powered celeron J3120 (I think) on Ubuntu LTS , so possibly that may make a difference, although I've used pis in long term always on other applications and they've been fine but perhaps pihole may be too much for a pi.
- toywinder 2y agoI have been running pi-hole on a raspberry for years with no downtime, op is either pitching for the DNS provider or they have not deployed their pi-hole correctly.
- MattSayar 2y agoMy only financial relationship with NextDNS is the $40 I've spent on the service so far. Another comment mentioned turning off query logging since that amount of activity is hard on an SD card, so you may be onto something with deploying it incorrectly
- vitaflo 2y agoFor myself I’ve been running pihole on an RPi3 for 7 years and have never had one single issue with it at all. Maybe I’m just lucky I dunno. I’m always surprised when I hear people have issues with it.
- CharlesW 2y agoI'm also a very happy NextDNS user. A couple other thoughts for anyone considering this: • The free plan supports 300,000 queries/month (all features, unlimited devices, unlimited configurations) and is a great and simple way to test drive it. • If you like the idea but want more knobs, many people are also happy with competitor Control D. I'd just caution that the two-year-old comparison¹ on their site is just wrong about several claims (including "lower latency") and is not without problems itself². I looked at them and chose NextDNS as a better "set and forget" option that also plays well with Tailscale³. ¹ https://controld.com/blog/control-d-vs-nextdns/ https://controld.com/blog/control-d-vs-nextdns/ ² https://www.reddit.com/r/ControlD/comments/1irgehp/178ms_latency_today_why_is_that/mddxx06/ https://www.reddit.com/r/ControlD/comments/1irgehp/178ms_lat... ³ https://tailscale.com/kb/1218/nextdns https://tailscale.com/kb/1218/nextdns
- wrboyce 2y agoI’m also a happy Tailscale/NextDNS user, but for what it is worth Tailscale integrates with ControlD now too. https://tailscale.com/kb/1403/control-d https://tailscale.com/kb/1403/control-d
- dewey 2y agoHave been using it for a long time, never have any issues and you can even use it via Tailscale which is nice: https://tailscale.com/kb/1218/nextdns https://tailscale.com/kb/1218/nextdns
- sambaumann 2y agoI use my pihole for tailscale too without issue - just have a tailscale node on my home network and point the tailscale DNS settings to the pi-hole's IP
- willwade 2y agoDoes anyone out there have a working Apple Shortcut that can toggle on/off a denied domain like YouTube? That's one feature I had in Pihole that I can't seem to replicate. Update.. as usual I was trying this all day and only after posting this does this work - Here's a bash script https://gist.github.com/willwade/251fa791da27267b5470c75a7b55ff45 https://gist.github.com/willwade/251fa791da27267b5470c75a7b5... - a shortcut for this is way more complicated
- g_host 2y agoIt is understandable that one would be frustrated with a Raspberry Pi handling critical network services like DNS. I've been running pi-hole in KVM guest virtual machines for more years than I can remember and never had any problems. I would expect a Raspberry Pi to eventually choke on the demand of providing 24/7 service to a network. But not everyone has a hypervisor in their basement. Forking over $20/year is definitely better on the budget than buying a server. But if you already have a server or some reliable hardware in your LAN, there's no good reason to leave anything important up to a Raspberry Pi.
- gerdesj 2y agoYou can set a Pi to have a read only filesystem on card/stick with an overlay with a RAM based filesystem. Ship logs elsewhere or have a second card/stick. A Pi can run for a very long time if you are careful. I run my dad's phones with one with Raspbx. It has two USB sticks in it. Both are bootable and the live one copies itself to the other monthly. Its unlikely that both sticks will die at the same time - glacial speed RAID 1!
- dmd 2y agoI switched from NextDNS to ControlD because of bugs and feature requests that have been sitting untouched for literally years. I couldn’t even reach anyone to cancel my NextDNS subscription, so I did a chargeback - which went through because the card company was also unable to reach anyone there. It seems to be running in zombie mode.
- jdoss 2y agoI just learned about ControlD today and It seems their $2/mo per endpoint is pretty pricey. Do you just set it on your home router and that's it? I use my NextDNS with many different profiles and many unique devices. Are the ControlD features that much better? Edit: I totally missed they have a Personal tab at the top that has different pricing. It is still more expensive for their full control plan.
- dabeeeenster 2y agohttps://www.stacksocial.com/sales/control-d-5-year-subscriptions https://www.stacksocial.com/sales/control-d-5-year-subscript... ControlD over NextDNS - one is on zombie mode it seems, the other isnt...
- CharlesW 2y agoNextDNS is very much alive, although progress is measured and calm¹ as compared to Control D. But it's also been rock-solid for me for years, where Control D seems to be less so². ¹ https://github.com/nextdns/nextdns/releases https://github.com/nextdns/nextdns/releases ² https://www.reddit.com/r/ControlD/comments/1irgehp/178ms_latency_today_why_is_that/mddxx06/ https://www.reddit.com/r/ControlD/comments/1irgehp/178ms_lat...
- Saris 2y agoOnly 10 devices is a crazy limitation. I probably have close to 100 devices going through my DNS.
- tomschwiha 2y agoFor me, I have an option from my user account in Nextdns to cancel the subscription. Didn't that work for you?
- system7rocks 2y agoWow! I could have written this. PiHole works great... until your personal server does something weird or hangs or crashes or power flickers. NextDNS just works. Allowlists are pretty easy to implement too for those edge cases.
- JadoJodo 2y agoI came to a similar conclusion. I love tinkering and messing with stuff. Those in my household also enjoy (tolerate) my tinkering. What they don't enjoy is when that tinkering impacts them and is unreliable. The amount of time I spent on a monthly basis keeping PiHole working (through updates, list updates, and the random "PiHole just stopped resolving all requests" was laid bare when I paid $19… and didn't ever have to touch it again. The bonus is that I can access it on every device I own, anywhere in the world. I appreciate PiHole and I know there are use-cases for it; I just couldn't go back after trying NextDNS.
- fuzzy_biscuit 2y agoThis post reads like an ad/marketing copy. Even shows the pricing right off the bat.
- damion6 2y agoThe only issue I had was minor and had to do with updating and breaking my system. That was easily solved with one command after update so script. That issue was just fixed.
- password4321 2y agoRelated yesterday: https://news.ycombinator.com/item?id=43093328 https://news.ycombinator.com/item?id=43093328 Pi-hole v6
- sjs382 2y agoSame. Happy customer since 2020. It's basically set-it-and-forget-it.
- smileybarry 2y ago+1 for NextDNS. Have been using them for years for blocking ads but also helped me troubleshoot some issues, as I could live track DNS queries by device. Note the free plan is great for several devices as long as they’re not Apple. For some reason, 2+ Apple devices blow through the 300,000 query limit really easily. When I used a Pixel 2 I think it averaged 60,000 and fit in the quota with my other devices, and when I switched to iPhone it pushed the total over 300,000. But they’re cheap and definitely worth it.
- gorjusborg 2y agoDon't run the pihole on a rpi, a basic computer with a real disk controller will handle the job much better. I ran pihole on an rpi but it kept corrupting the filesystem on any power blip. It isn't the pihole software's fault here.
- Beijinger 2y agoA Swissbit card would have prevented this
- gwerbret 2y agoNo issues with NextDNS (I've deployed it for people who don't have the chops to wrangle a Pi-hole), but this reads very, very much like an ad. That aside, I've had pretty much the same issues with NextDNS that I've had with Pi-hole -- issues that have nothing to do with the infrastructure per se. (The classic example is of an app that doesn't work because domain `X` is being blocked, thus kicking up the usual 15 - 30 minute-long log search and DNS cache-clearing to find and whitelist the domain.)
- andrewinardeer 2y agoLet's not forget that if you run NextDNS, you can check the logs and be utterly surprised at what websites you dad views late at night after going to bed.
- AnonC 2y agoI disagree with the author that NextDNS is “essentially a finished product”. For me NextDNS is not that usable and is not a finished product because: a) I need the ability to turn it off temporarily once in a while (even if it’s on a family member’s device) b) the NextDNS client apps on iOS/iPadOS are abandoned (not updated for years) and the toggle to turn off or on doesn’t reliably work c) there is hardly any support in the community forums With the abandoned and flakey client apps, visiting test.nextdns.com would show “unconfigured” or a NextDNS server information randomly. I never know whether it’s really on or not. Using a VPN profile is recommended through it cannot be easily turned off and on. But even the VPN profile doesn’t work on my Apple TV. The NextDNS DNS servers around the world seem to work, but the experience on devices is unreliable and poor. If the founders could employ someone to improve the apps and how it works, I’d use it. I had considered a paid subscription a few years ago but didn’t go through because of these experiences.
- hnbear 2y agoAlways seems that people forget piholes run really well in a docker container basically anywhere. The pi bit of it is less important than the hole bit of it. and with things like Tailscale or ZeroTier you can run your pihole at home and use it from anywhere on mobile devices too I run a couple at home and they've been rock solid in containers on mini-pcs for a long time.
- tnfru 2y agoNext DNS is IMO the best solution for phones. It's plug and play and I've never hit the free limit. For home use I'm currently testing out AdGuard Home as it comes as pre installed with the Flint 2 router. I can't get it to work on my phone so I don't see myself switching away from NextDNS any time soon.
- BrandoElFollito 2y agoI have an excellent experience with PiHole but why I like it is not for the ad block (this too of course) It is the only product I know (short of running dnsmasq standalone) to run a DHCP linked with a DNS and what registers in the DHCP is also registered in the DNS.