Control D vs FilterDNS
Control D
controld.comFilterDNS
github.comSide by side
| Figure | Control D | FilterDNS |
|---|---|---|
| Price from | $2/mo | Free |
| Free plan | — | Yes |
| Free trial | Yes | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 4 | 1 |
| Spec score · Internet Filtering Software | 9.1 (#3) | 8.6 (#9) |
| API | The public API uses dashboard-created bearer tokens with read or write scopes and optional source-IP restrictions. | The service documents endpoints for profile management, logs, statistics, rules, presets, devices, and administration. |
| DNS protocols | Control D supports DNS-over-HTTPS, DNS-over-HTTPS/3, DNS-over-TLS, DNS-over-QUIC and legacy UDP port 53. | It supports DNS over HTTPS on port 443, DNS over TLS on port 853, and legacy DNS on port 53. |
| Headquarters | Toronto, Canada | Karlsruhe, Germany |
| Intended users | Control D says it is designed for SMBs, enterprises, individuals, and IT administrators seeking customizable DNS security and internet controls. | The README describes a self-service model in which users create and manage profiles for different devices or use cases. |
Plans
Control D
- SMB$2 a month
- EnterprisePriced on request
- MSP / ChannelPriced on request
- School / Non-profitPriced on request
In their own words
Control D
Control D is a configurable DNS filtering and traffic redirection service for controlling access to domains, services and browsing activity. Its filtering includes 20 content categories, custom rules and more than 1,000 premade services that users can block or allow. Malware protection uses threat intelligence feeds and machine learning, with selectable aggressiveness levels. DNS connections support DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC and DNS-over-HTTPS/3, as well as IPv4 and IPv6. Listed integrations cover Windows, macOS, Linux, iOS, Android, browsers, routers, RMM tools and Tailscale. API access includes generating and invalidating tokens. Raw query logs are retained for 30 days and lower-resolution analytics for up to one year; customers can choose analytics storage in New York, Amsterdam or Sydney. A free plan is available. The SMB plan costs $2 a month, billed per endpoint, and includes self-serve deployment and real-time analytics. Control D was founded in Toronto in 2021.
FilterDNS
FilterDNS is a self-hosted DNS filtering service for blocking ads, trackers, and malware. It supports DNS over HTTPS on port 443, DNS over TLS on port 853, and legacy DNS on port 53. Users can create separate profiles for different devices or use cases, with custom domain allow and deny rules and preset rule sets such as gaming and social media. Preconfigured blocklists include Hagezi, StevenBlack, and OISD. Query logs and statistics let users review DNS requests; logging is enabled by default in the documented configuration. Filtering can be paused for 5, 15, 30, or 60 minutes, and maintenance mode allows DNS only for approved domains. The project documents API endpoints for profiles, logs, statistics, rules, presets, devices, and administration. Its Docker Compose quick start uses PostgreSQL and a SvelteKit web UI available locally at http://localhost:8080. DoH and DoT require a wildcard TLS certificate for the service domain. FilterDNS is MIT-licensed and free to self-host.