GateSentry

Spec sheet

Purpose

GateSentry is a filtering proxy and DNS server for home and small networks, with a web dashboard.Read 11 Oct 2026 · github.com

Audience

The project describes GateSentry as useful for network-wide content filtering, privacy guarding, parental controls, and blocking known-bad domains.Read 5 Oct 2026 · github.com

Deployment

The project provides Docker images for linux/amd64 and linux/arm64 and binary downloads for Linux, macOS, and Windows.Read 11 Oct 2026 · github.com

Integrations

An optional read-only Tailscale integration can read peer status from a tailscaled process on the same Linux host.Read 5 Oct 2026 · github.com

License

The repository identifies GateSentry as open source under the Apache-2.0 license.Read 5 Oct 2026 · github.com

Additional features

It includes keyword and content filters, optional AI image filtering, timed exceptions and pauses, logs, statistics, device inventory, and backup and restore features.Read 11 Oct 2026 · github.com

AI image filtering

Optional AI image filtering is disabled by default and supports xAI, OpenAI, or an operator-configured Ollama endpoint.Read 5 Oct 2026 · github.com

AI integrations

Optional AI image filtering supports xAI, OpenAI, or a configured Ollama endpoint.Read 11 Oct 2026 · github.com

Data handling

Proxy logs can include requested URLs and client identity, DNS logs include queried domains, and log database entries expire after a hard-coded seven-day TTL.Read 11 Oct 2026 · github.com

DNS filtering

It filters network DNS using downloadable blocklist categories and per-device or proxy-user policies.Read 11 Oct 2026 · github.com

Filtering

It supports DNS blocklists, per-device or per-user policies, scheduled rules, safe search, keyword filters, and content filters.Read 5 Oct 2026 · github.com

Filtering limit

DNS filtering operates on domains only; URL, keyword, and content rules require traffic to pass through the proxy.Read 11 Oct 2026 · github.com

Filtering limits

DNS filtering works on domains only; VPNs, encrypted DNS, QUIC/HTTP/3, and other traffic paths may bypass or fall outside content inspection.Read 5 Oct 2026 · github.com

HTTPS and malware limits

The maker states GateSentry does not provide universal HTTPS or malware coverage, and certificate-pinned clients may reject interception.Read 5 Oct 2026 · github.com

HTTPS inspection

Optional HTTPS inspection can match URL paths and response content types when traffic is routed through the proxy and clients trust its CA certificate.Read 5 Oct 2026 · github.com

Policy rules

Rules can target all traffic, specific domains, or categories, and can include schedules and user restrictions.Read 11 Oct 2026 · github.com

Proxy filtering

The HTTP/HTTPS proxy can match URL paths and response content types when HTTPS inspection is enabled and clients trust its installed CA certificate.Read 11 Oct 2026 · github.com

Safe search

DNS-enforced safe search is supported for Google, Bing, DuckDuckGo, and YouTube restricted mode.Read 11 Oct 2026 · github.com

Security defaults

The security policy says the defaults are intended for a trusted local network, the admin UI uses plain HTTP, and HTTPS MITM is disabled by default.Read 11 Oct 2026 · github.com

Security support

The latest published release receives best-effort security support, older releases are unsupported, and the project has no long-term-support release line.Read 5 Oct 2026 · github.com

Support policy

The latest published release receives best-effort security support, older releases are unsupported, and there is no long-term-support release line.Read 11 Oct 2026 · github.com

Visibility and recovery

The dashboard provides logs, statistics, device inventory, and backup and restore functions.Read 5 Oct 2026 · github.com

Who it is for

The README describes GateSentry as intended for home and small networks.Read 11 Oct 2026 · github.com

Plans and prices

Every GateSentry plan and price →

Where Specifiction places it

• Internet Filtering Software#7 of 658.7