NxFilter vs Quad9

NxFilter is a lightweight DNS filter for controlling DNS queries across a network. It supports URL keyword filtering, custom blocklists, safe search controls, filtering schedules, and policies for individual users or groups. Screen time limits and data caps add controls, while reports provide daily, weekly, and user-level views; logs can be retained for up to 400 days. NxFilter caches responses from an upstream DNS server and serves cached results locally. Authentication options include Active Directory integration. Remote Windows and Android devices can use filtering agents, while iOS devices can be filtered through DNS over HTTPS. For roaming iOS or Android devices, NxFilter can provide DNS over HTTPS when an SSL certificate is installed and users authenticate with NxFilter. Clustering supports one master and up to four slave nodes for load balancing and fail-safe operation. The maker offers Windows executable, Debian package, and ZIP downloads, and points users to third-party RPM packages and Docker images. NxFilter itself is freeware for commercial or non-commercial use. Paid list options include Jahaslist Monthly at $7 a month for 50 users, Jahaslist Annual at $60 a year for 50 users, and Cloudlist Annual at $150 a year for 50 users.

Quad9 is a free recursive DNS service that blocks requests to domains associated with malware, viruses, adware, phishing and scams. It draws on threat information from more than 20 partners to identify malicious domains. The service supports DNS over TLS, DNS over HTTPS and DNSCrypt, and provides DNSSEC validation on its resolver services. Quad9 says it does not store end-user IP addresses and operates under Swiss privacy law. Its focus is malicious-domain blocking, not content filtering; it also does not offer custom domain policies. Setup documentation covers Cloudflared, Pi-hole and open-source routers including pfSense, OPNsense, OpenWrt, MikroTik RouterOS and IPFire. Support assists with setup questions and issues. Quad9 reports 99.999% uptime for its global anycast service. The service costs nothing, with no contract or sign-up process, and is listed for Android, iOS, Linux, macOS and Windows. Large organizations planning high-volume DNS traffic are asked to contact Quad9 first.