FilterDNS vs UnveilDNS

FilterDNS is a self-hosted DNS filtering service for blocking ads, trackers, and malware. It supports DNS over HTTPS on port 443, DNS over TLS on port 853, and legacy DNS on port 53. Users can create separate profiles for different devices or use cases, with custom domain allow and deny rules and preset rule sets such as gaming and social media. Preconfigured blocklists include Hagezi, StevenBlack, and OISD. Query logs and statistics let users review DNS requests; logging is enabled by default in the documented configuration. Filtering can be paused for 5, 15, 30, or 60 minutes, and maintenance mode allows DNS only for approved domains. The project documents API endpoints for profiles, logs, statistics, rules, presets, devices, and administration. Its Docker Compose quick start uses PostgreSQL and a SvelteKit web UI available locally at http://localhost:8080. DoH and DoT require a wildcard TLS certificate for the service domain. FilterDNS is MIT-licensed and free to self-host.

UnveilDNS is a DNS filtering solution for protecting business networks, with an on-premise deployment described by its maker. It can block access to sites linked to malware, ransomware, phishing, and other threats, and offers customizable category filters for inappropriate or distracting content. The service checks DNS requests against threat-intelligence databases and describes continuous monitoring for emerging threats. Its reporting covers network activity, blocked threats, and security trends. Listed encrypted DNS options include DNS over HTTPS, DNS over TLS, and QoT, alongside certificate management. The free Community plan includes unlimited devices and requests, filtering by 120+ services, safe browsing and search, DNS redirections, custom black and white lists, and real-time traffic information. Secured costs $199 a year; Ultimate costs $299 a year and lists features including 40-category filtering, family protection, country geo-blocking, and custom RPZ files. Supported platforms include Android, iOS, Windows, macOS, browsers, routers, and on-premise networks.