AdguardTeam/AdGuardHome
AdGuardHome
AdGuardHome is a network-wide software solution that provides centralized control over domain name resolution, content filtering, and local network management. It functions as a recursive DNS server and DHCP address server, intercepting network traffic to enforce security policies and block unwanted content across all connected devices. By acting as a central gateway, it ensures that every device on a home or office network benefits from consistent protection and private, authenticated name resolution.
The software distinguishes itself through granular client management and robust security features. It automatically identifies connected hardware to provide detailed traffic statistics and allows for the application of custom filtering rules to specific devices or groups. To ensure privacy, it supports encrypted DNS protocols, including DNS-over-HTTPS and DNS-over-TLS, and automates the acquisition and renewal of SSL certificates. Administrators manage these settings through a centralized web-based dashboard, which also provides tools for monitoring performance and configuring upstream routing.
The platform is designed for flexible deployment across diverse environments, including virtual servers, single-board computers, and isolated containers. It maintains system state through human-readable configuration files and supports non-privileged execution to enhance security. The project emphasizes integrity and reliability, offering reproducible build verification and standardized packaging for various operating systems and hardware architectures.
Features
- DHCP Servers - Automatically assigns IP addresses and network settings to connected devices while providing custom options and local hostname resolution.
- DNS Servers - Provides a recursive DNS resolver that intercepts domain queries to enable network-wide content filtering and privacy protection.
- DHCP Servers - Provides automated IP address assignment and network configuration management for devices within a private network.
- Network Filtering Systems - Blocks unwanted websites and tracking services for all devices on a network from a single central point.
- Release Verification Tools - Verifies the integrity of distributed binaries by rebuilding them from source code to ensure the output matches official releases.
- Container Images - Provides official multi-architecture container images to simplify deployment and installation across diverse server environments.
- Container Orchestration & Deployment - Facilitates application deployment through isolated container environments with persistent storage and network port configuration.
- Container Orchestration Tools - Deploys and manages network utilities within isolated containerized environments to ensure consistent performance across cloud platforms.
- Container Orchestration Utilities - Automates the replacement of service instances by pulling updated container images and managing the redeployment process.
- System Daemons - Installs and manages background processes on remote servers to ensure continuous operation and persistent service availability.
- DNS Configuration Tools - Directs network traffic to filtering services by configuring DNS settings on routers and individual devices.
- Network Configuration Utilities - Automates the configuration of network resolvers to ensure traffic is correctly routed through a specific filtering service.
- Network Device Discovery - Automatically detects and identifies connected hardware devices on a network to provide human-readable labels for traffic analysis.
- Network Mapping Tools - Enables custom domain redirection and traffic blocking by mapping IP addresses to specific hostnames within the local network.
- Reverse Proxies - Forwards encrypted DNS requests through proxy servers while maintaining client IP transparency via trusted request headers.
- Certificate Management - Automates the validation and renewal of encryption certificates to maintain secure communication channels.
- Content Filtering Engines - Provides a rule-based engine for matching domain requests against blocklists to restrict network access.
- Content Filtering Rules - Implements custom blocking logic using standard syntax and regular expressions to control hostname matching and traffic flow.
- DNS Security - Configures client devices to use secure DNS-over-HTTPS or DNS-over-TLS protocols for private and authenticated name resolution.
- DNS Security Tools - Provides a secure proxy that translates standard DNS queries into encrypted protocols for private name resolution.
- Domain Blocklists - Generates text-based domain blocklists to automate site access restrictions across a network.
- Encrypted DNS Resolvers - Secures domain name lookups by routing traffic through private and authenticated protocols to prevent eavesdropping by third-party observers.
- Privilege Management - Enforces security by executing processes with restricted user accounts and limited network capabilities.
- Signature Verification Tools - Validates the authenticity of downloaded files by checking digital signatures against official public keys.
- Administrative Dashboards - Provides a centralized browser-based interface for managing network settings, traffic, and security policies.
- Network Configuration Services - Provides a containerized DHCP server that utilizes host networking for direct local network interface access.
- Network Management Utilities - Automates IP address assignment and hostname management to simplify connectivity for hardware on local networks.
- Performance Profilers - Exposes runtime profiling data and process traces via web endpoints to facilitate memory analysis and performance tuning.
- Networking and Servers - DNS server with ad-blocking and tracker protection capabilities.
- DNS Management - DNS server with built-in ad and tracker blocking.
- Network Filtering Tools - Network-wide software for blocking ads and trackers at the DNS level.
- Network Infrastructure - DNS server for blocking ads and trackers across the network.
- Ad Blockers - DNS-based ad and tracker blocker with encryption support.
- Package Managers - Provides standardized installation and deployment support for Linux distributions using the snap package format.
- Configuration Management - Provides centralized management of application settings and parameters through structured configuration files.
- Deployment Pipelines - Facilitates the testing of pre-release software versions by pulling specific container image tags for experimental build execution.
- Package Distribution - Provides official distribution packages for multiple operating systems and hardware architectures to ensure broad installation compatibility.
- Credential Recovery Utilities - Provides utilities to generate new encrypted password hashes for regaining administrative access after credential loss.
- Domain Filtering Verification - Verifies that domain blocking is correctly active by querying the local server for restricted host responses.
- Software Update Managers - Automates the application of latest features and security patches by managing binary replacements and update processes.
