Specifiction
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your tool
Vendor dashboard
Tech riderRev. 20 Sept 2026

webfilter-ng

Ch 516.1of 65 Internet Filtering Software
  1. 1Runs onLinux, self-hosted
  2. 2CostsNot stated by the maker
  3. 3Custom blocklistsYes
  4. 4Safe search controlsYes
  5. 5Platform supportLinux computers, routers, and internet gateways
4 lines stated Written from the maker's own pages: github.com
Visit site Alternatives
The webfilter-ng homepage

Overview

webfilter-ng is ranked #51 of 65 in internet filtering software on Specifiction. It runs on Linux, Self-hosted.

Compared on internet filtering software

Custom blocklists
Yesgithub.com
Safe search controls
Yesgithub.com
Platform support
Linux computers, routers, and internet gatewaysgithub.com

Facts

Purpose
webfilter-ng filters HTTP and HTTPS web access by domain name using the HTTP Host field or TLS SNI.github.com · 5 Oct 2026
Deployment
It is intended for a standalone Linux computer or a router/internet gateway, and works transparently without client proxy settings.github.com · 5 Oct 2026
TLS filtering
It reads TLS ClientHello SNI to filter HTTPS without decrypting traffic or installing root certificates on client computers.github.com · 5 Oct 2026
Filtering modes
The README describes filtering with squidGuard, a public DNS filtering service, that service with the categorify.org API, or a whitelist or blacklist.github.com · 5 Oct 2026
DNS bypass checks
In DNS mode, it compares the requested IP with IPs returned by the filtering DNS service to detect use of non-filtering DNS, local hosts files, DoT, or DoH.github.com · 5 Oct 2026
Categorification
The categorify.org API option is gateway-only, and the README says its current implementation adds reliability only to adult-content filtering.github.com · 5 Oct 2026
Integrations
The documented integrations and dependencies include BIND9, iptables, DHCP, squidGuard, and the categorify.org API.github.com · 5 Oct 2026
Safe search
The README describes using a BIND9 RPZ zone to enforce safe search for Bing and Google on a router or gateway.github.com · 5 Oct 2026
Platform requirement
Installation instructions specify Debian or Ubuntu and require Linux networking packages including iptables and libnetfilter_queue.github.com · 5 Oct 2026
IPv6 limit
The README says IPv6 is not yet supported and instructs users to disable it on the Linux computer or router.github.com · 5 Oct 2026
QUIC limit
The README says standard IETF QUIC is not currently filtered; Google-QUIC support is described as experimental or work in progress.github.com · 5 Oct 2026
Logs
The README says logs are available at /var/log/webfilter-ng.github.com · 5 Oct 2026
License
The repository identifies its license as LGPL-3.0.github.com · 5 Oct 2026

Best webfilter-ng alternatives

See all 20
All accessCh 01 AdGuard DNS Free planFree trialAndroid Free to start8.0 All accessCh 02 Control D Free trialAndroidAPI from $2/mo7.6 All accessCh 03 NextDNS Free planAndroidAPI from £1.79/mo7.5 All accessCh 04 NxFilter Free planAndroidAPI from $5/mo7.5 All accessCh 05 SafeDNS Free trialAndroidAPI from $1.20/mo7.4 All accessCh 06 UnveilDNS Free planAndroidiOS from $16.58/mo7.4

Where it ranks on Specifiction

Is webfilter-ng yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote webfilter-ng

Sources