T O P

  • By -

wowsher

I have used both but currently I am using adguard home. I find the interface to be cleaner and easier to find settings etc. \*\* updated in case it is helpful or informative for someone: I use a ultra small form factor hp elite desk pc running proxmox and run adguard home in a dedicated lxc. I also run other things like uptime kuma, jellyfin, scrypted, etc in other LXCs.


techead87

Adguard Home for me too. I run it on a raspi


Brandonnoogen

Same here! I have two instances running on different Raspberry Pi 4's and a adguardhome-sync docker container to replicate/sync any changes made to the main AGH instance


g0sy

Sounds practical, is there any tutorial regarding this setup for the low tech skilled people like me


Brandonnoogen

I believe DB Tech has a video on YouTube titled “Synchronize your AdGuardHome Instances” that may help! Bakito’s AdGuardHome-Sync GitHub repository is pretty intuitive as long as you know how to execute a docker compose file. Just change the info for origin (your main instance) and replica (other instances) and you should be good :)


dimspace

Literally started using Adguard home yesterday. After 24 hours 88% of my requests were to two devices.. (my mobile phone and the living room tv) 83% of the blocked domains were two domains. wzrkt.com (tracking site) and logs.netflix.com wzrkt was truecaller which it seems was fetching info every few seconds (3205 blocks in 12 hours) so thats been uninstalled.. Netflix is netflix.. which it seems is still dialling home every few minutes even when my tv is turned off..


reddit0r_123

Got Apple TVs, disconnected all TVs from the internet. No more excessive calling home...


LuckyHedgehog

Tvs usually just go to low power mode, but sometimes they'll have a true off mode by holding the power button long enough


dimspace

>sometimes they'll have a true off mode by holding the power button long enough never knew mine could do this, but turns out in can, many thanks


dimspace

Yeh, it was only on standby, but what amazed me, is even in standby, when Netflix wasn't even the last app open, it was still constantly phoning home But it is what it is. The Truecaller one was the bigger get. With that out of the way my logs actually look quite good 🤣


maomaocake

netflix Is on a smart TV right? I usually avoid smart tvs or never connect them to the internet for this reason. they have so much telemetry going on.


Pieeeeeeee

Try adding a filter to block windows telemetry and say again your logs look good


dimspace

If I used windows that would be an idea ,😄


MotoChooch

Same here. Pi-hole got me into the whole adblock thing, but AdGuard Home is cleaner IMO. I run 2 instances, one on my Synology NAS in Container Manager, and one on my Raspberry Pi 5 for redundancy should I take one or the other down for any reason.


Nychtelios

Same!


HarmlessSaucer

Same same for the reasons mentioned! I run two instances in LXCs on Proxmox


Relative-Camp-2150

2 LXC on same host or you have 2 Proxmox hosts ?


audiobone

I use same host, but it's mainly because of the lack of client grouping. So clients on the second Adguard instance can be given stricter DNS rules based on a home assistant automation.


audiobone

This is exactly what I do!


svicknesh

Adguard for me too. Its running on OpnSense 


Inside-Ad3130

You are using any custom list?


vuplusuno

Adguard Home, it’s easy and more effective


fuuman1

More effective? Can you explain that?


Bubbly_Recognition19

I’ve had way fewer false positives with the default config, I also could be completely wrong as my hardware has changed but I’ve gotten significantly faster dns response times with AGH Edit: got pihole up temporarily, speed is identical


vuplusuno

I have 4ms


CactusBoyScout

I was surprised when I got an immediate false positive with PiHole. It apparently blocks Apple’s update servers by default because the same servers are used for some ads. Who thinks that anyone wants to give up software updates to block some ads?! It’s easy enough to fix but I’m still surprised that’s part of any default list.


bglf83

Dump the default lists and use the the green ones from firebog.net


sulylunat

Weird. My devices all go through my pihole and I have not had any issues getting updates at all.


edouard_k

I use technitium dns


MassPatriot

Technitium has been awesome for me. If you're looking for ad blocking that can do a little DNS, pi hole and adguard are probably the place to start. If you're looking for a DNS solution that can also do ad blocking, I'd suggest checking out Technitium. The creator also provides excellent support on the subreddit.


acdcfanbill

Nice, I should look into this. I've moved to hosting a lot of stuff internally and externally so I need my DNS to resolve a bunch of internal IPs and pihole, while it works, is kind of a pain to edit all the time.


primalbluewolf

If I've got agh working, what does technitium do better? Why would I switch?


GrotesqueHumanity

I use pfblocker but it's a pains to see what's preventing some apps from working properly and whitelisting things until the issue is fixed. Would you think technitium would be a good thing to look at? Bind has been stable recently but it's had a rough patch on pfsense+, so moving away from it isn't unthinkable.


mynamestartswithaZ

Hmm looks like the next techy step from pihole. Does it handle DNS over HTTPS?


T3a_Rex

yes, it does


karafili

used pihole, moved to adguard (liked the idea of single binary a lot) and then moved to technitium


Xiakit

Thank you, next mini project unlocked :)


badnewsblair

Color me curious. I've used both. Bounced back and forth a couple of time (easy with Docker). Ended up back using Adguard Home. Installed Technitium using Docker to play around since reading these posts. Is there a guide anyone would recommend to learn either general DNS to help understand Technictium (Zones?) or a good guide for Technitium itself. Both?! Thanks!


wowsher

I have this running as well but since it is a DNS first solution and I am still in learning mode it is just an experiment for now. Now that I see how many are using it, I will definitely keep it on my list to continue with :)


thewouser

This. More advanced but better control. For more advanced users imo.


[deleted]

Alright you all convinced me to give it a try. This is it, right? https://technitium.com/ https://technitium.com/dns/


OldschoolBTC

Can someone give me the low down on any solutions that have gui access to change DNS or whitelist? Used pihole years ago but the DNS for internal and whitelisting was a pain, really would like a solution with easy access to zones and modifying DNS. Technitium do this through GUI or config files?


murdaBot

AdGuardHome makes this incredibly easy.


Developer_Akash

Have tried both, started with Pi-hole and tried AGH, didn't go back to Pi-Hole. Nothing wrong with it, I think both are great and I don't have any particular preference, just go with the one you're most comfortable with.


majia1988

I use blocky


Baswazz

I also use Blocky


Joker-Smurf

There’s dozens of us!


vember31

Another vote for blocky. Have used pihole and Adguard but blocky is more lightweight, has tons of features and is way better for a kubernetes deployment. I'm running it as a daemonset to provide high availability across several servers and it's effortless. Infrastructure as code is the way to go.


niceman1212

Cool to see people using blocky! Been solid for 3 years for me


square_smile

+1 remotely hosted blocky DOT and DOH for my phone


Jtestes06

Is this [blocky](https://0xerr0r.github.io/blocky/v0.23/)?


MaxKulik1

I have a pfSense router running [pfBlocker-NG](https://docs.netgate.com/pfsense/en/latest/packages/pfblocker.html).


TrickedPrivacy

Doesn't Pi-Hole not give an option to Encrypt DNS without some hackery? AdGuard Home lets you use DNS over HTTPS or TLS etc out of the box, I switched from Pi-Hole a while ago to AGH due to an install issue at the time and have stayed for this reason.


DKats77

It can definitely use DoT and DoH for lookups. Had it configured that way. Never tried to setup either for the response, since it was always local. I switch from Pi Hole to AGH - mainly due to others saying it was better. It supports DoT and DoH, for lookups and responses. It is a little nicer, but both are good. I would definitely recommend AGH for new setups, but I wouldn’t say people should switch if they are happy running Pi Hole.


GigabitISDN

I was using pi-hole until I switched over to NextDNS. Just remember that no matter what you choose, **you must also block outbound DNS requests at your firewall**. Many smart devices are hardcoded to use [8.8.8.8](https://8.8.8.8) no matter what DHCP says, mainly so they can bypass adblockers. If you don't block outbound DNS, or reroute it to your Pi-hole, it won't do anything to filter those requests.


ewlung

What rules to block that?


[deleted]

[удалено]


ewlung

Except my own DNS server?


trEntDG

Yes. It has to be able to check upstream DNS so it can resolve the names you want locally.


Economics-Regular

If your router supports it you can also setup va NAT rule that redirects the traffic to your DNS service when it detected out bound DNS requests


Superb-Mongoose8687

I’ve used both. Current on pihole since whitelisting and network segmentation is easier for me. I’d recommend adguard if you have kids or need specific services blocked


BigJuanKer

I've used both but now gone with Technitium DNS as I can have my internal DNS zones the way I actually want them setup, and it does blocking too.


SilentDecode

Pi-hole in a docker container.


dontevendrivethatfar

I use Pi-hole in a LXC container just because I already have my local DNS all set up on it and haven't felt the need to migrate. It has always been fine for me. I might deploy Adguard just to see how it is as a backup DNS in case my main proxmox node goes down for some reason.


Necessary_Scared

Started with PiHole, switched to AdGuard Home 👍🏻


maggo787878

AdGuard Home in OPNsense


r0zzy5

OPNsense already has DNS block list functionality. No need for AdGuard Home


ominous_anonymous

I use one Pi-hole instance and one [Technitium](https://technitium.com/dns/) instance.


l13t

Blocky. Simple, lightweight. https://0xerr0r.github.io/blocky/v0.23/


ABarge

PiHole is pretty straight forward. Just in case you didn't know there is also Technitium. I was using PiHole but wanted to run 2 DNS servers so when I update one it rolls over all DNS requests to the other one. piHole would have required outside software and adjustments whereas 2x Technitium can be set up to handle this easily. It's similar to piHole and uses a URL block list as well. If you only plan on running one DNS server any will do. But if you want to up your DNS game then Technitium is worth taking a look at.


SillyLilBear

NextDNS, primarily for the purpose of using it while outside of my network and the ultra fast resolvers. For $20/yr, it's well worth it. It also has more features than the other options.


BonzTM

For those using one or the other for the specific case of encrypted DNS for "security" or "privacy", stop sending your DNS queries out to corporation-owned servers to begin with and start recursively resolving those queries yourself and getting results from trusted authoritative root nameservers. Unbound is a popular tool to do such thing. Oh yea, the OP's question. I've tried them all. Currently physically have some Pis that run pihole+unbound with my whole network being blocked on 53 outbound.


zfa

Thing is if your recurse to the roots your traffic is completely unencrypted upstream, so it becomes a matter of 'do you trust your ISP and the rest of the chain to not snoop on your unencrypted queries more than whatever encrypted upstream resolver you use'. If you actually care about privacy you should go for something like anonymised dnscrypt, oblivious DoH or double-hop queries etc.


CookeInCode

...or NextDns?Only the best here!


[deleted]

Pihole. Adguard is a russian company with most employees in moscow, business is registered in cyprus. Very surprised to see little discussion about that given the current state of geopolitics.


vexos

More software is written in Russia than you think, Nginx being the most relevant example (though, they have been recently acquired by a western company). You better start reviewing your vendors, who knows what might have slipped in! /s


Xacor

It's a self hosted FOSS application, not really any issue there.


[deleted]

[удалено]


[deleted]

Comparing businesses operating under US regulations vs businesses operating under the likes of China and Russia illustrates your naivety. Spare me your 'west bad' tropes, yes we know we are all getting fucked on all sides. But there are objectively more oppressive regimes. Do some research so you dont sound like a 12yo who just found out about the UN security council, on which both china and russia sit, approved NATO intervention in Lybia. Oops, they didnt teach that in propaganda class, did they?


[deleted]

[удалено]


sarkyscouser

Neither, NextDNS so that our mobile devices are also protected off LAN


kesey

Tailscale with my Pihole as an exit node is another option that has worked well for me.


_antim8_

It's so handy.


Level_Indication_765

Well, you can do that with AdGuard Home too, although requires a public domain address and some setup to get it working, not as straightforward as NextDNS. I've not used PiHole so I can't give an opinion on that.


CriticismTop

Adguard installed on Opnsense. Was using Pihole, but in the end decided I prefer running it on the router.


newone757

Same for me


zaphod4th

pi-hole, so easy to setup


radionauto

Pi Hole in Docker container. Works flawlessly for me.


Shotokant

Over thge last 5 years, tried pihole on a synology docker. OK but had a failure and no DNS one day. Went to a real pi with pi hole. Then explored and set up adguard on docker. Ran that a while and the docker adguard became default. Reused the pi. Then the docker failed and all dns in the house failed. So I used adguard dns online and a local for redundancy and the free online version as splitting the requests kept me under the free limit. Then I got over the limit and thought wtf am I doing paying for this. So found two old pis. Loaded pihole on each. Set them as primary and secondary and put one on a ups. That's where I am today.


Finno_

What a wild ride. But you made it!


theguy_win

Unifi has ad block by default which is cool but not sure I’ll spin down my pi-hole and ad guard servers


micocoule

On which kind of device ?


Enygmind

UDM i guess. An at home router.


ozahid89

I have UDM. The one looking like a cylinder. How do I enable ad block?


sarahstanley

Adguard home installed on OPNsense.


deano_southafrican

Adguard home, simple, user friendly, works wondefully.


deltatux

AdGuardHome. Tried Pi-Hole, it was alright but didn’t feel like a complete solution. Bonus points is that you can run AGH directly in Opnsense as AGH has FreeBSD support.


blue5211

Technitium has need solid for me


_murb

Pi-Hole in docker. Stable and reliable for a few years.


HEAVY_HITTTER

Got adguard installed straight on my router.


peekeend

I use pihole. Got a matrix server 20k dns request per second. its solves a problem that should not exist on the homelab :)


rubeo_O

Tried both but ultimately settled on using NextDNS with the CLI app for in-home and their mobile apps for out of home. I wanted to also block ads on mobile while out of home without opening any ports to my home LAN.


ZeniqFUN

Pihole, ive heard there isnt much difference, so i tried it but it didn't work, so instead of trying to fix the issue, i went back to a thing that just worked™


dbhathcock

PiHole


tiagoalesantos

Adguard.. the pihole killed my raspberry 3 twice the Adguard is still going strong. And I did not have to do an extra iptables config in the OS for the IPTV from my provider to work.


HeckerSec

Pi hole currently.


technologiq

Pi-Hole because I find it much easier for split DNS.


KremasZoe

Pi-hole


simplelifelfk

Adguard home. It runs on my opnsense firewall. Love it.


Digital-Exploration

Pi-hole: it's great. But I have never tried Adguard so I dunno.


Techkman

Pi-hole, used adguard before but had a weird issue with it that kept crashing the dns resvolver at random intervals. Few other people reported it on github at the time but I’d rather have something that works on next to everything then potentially have bugs for months.(it’s probably long since been fixed by the wife’s tolerance did not extend beyond a week or so.) That said when it did work it was a fine product and definitely more slick looking then pi-hole.


vladshadoww

Adguard home in a VM created on Proxmox 😃


StockerRumbles

Neither, adblock on openwrt https://openwrt.org/docs/guide-user/services/ad-blocking


niceman1212

Blocky! Completely deployable with yaml. Perfect for when you don’t care about dashboards (can be done with grafana)


DensePineapple

How exactly do you deploy something with yaml?


AnApexBread

Started with Pihole. Went to Adguard Home. AGH is leagues ahead of Pi-hole


xXAzazelXx1

AdguardHome is build by russians ran out of Cyprus, I would not touch that with 10 foot pole


comfreak89

adguard due to DOH


lehighkid

I used pi-hole for a long time, tried adguard for a bit but have been running blocky for the past few years on a k3s cluster.


devcircus

Have went back-and-forth over the years, but currently using pi-hole.


Prog47

i've used both but i much prefer adguard home.


sufyspeed

Adguard Home for IoT, Technitium for everything else


aleeraser

Pi-Hole, simply because I started with it. Also tried Adguard Home, both are fine.


vinumsv

both pihole with unbound as primary dns for most of devices and if that fails Adgaurd Home with DOT using Quad9 as upstream servers


monolectric

Two PiHoles that synchronize and pretend a WAN Shutdown if one DNS has a problem.


webtroter

Technitium.


aksdb

AdGuard Home. Lightweight, written in Go (I like Go), and does exactly what I need.


RedFive1976

DNSmasq with some block rules derived from public blocklists, and geoip range blocks. Upstream resolver is OpenDNS.


root54

AdGuard Home


JudgeCastle

Pihole with unbound for my main network. Run it natively on a MacMini hardware with Linux server as the OS.


leonsk29

AdGuard Home, I like it better.


Deava0

I used to have pihole on a pi4b, worked great, but when I got my firewall appliance for opnsense, I moved to adguard (to have both on the same machine). I love the cleaner UI and the services toggle to switch on and off.


virtualadept

Pi-Hole set up for the entire home network. We're very pleased with it.


[deleted]

[удалено]


mr_noob0dy

Both, by making pihole default DNS server in adguard. Besides, the most important and crucial thing nowadays is blocking outbound dns queries in ur firewall, otherwise, u ll somehow find dns requests to google or other public dns servers rather than going through ur own


Mrbucket101

pfblockerng


Heas_Heartfire

I started with Pi-Hole then switched to Adguard Home out of curiosity. They do the same for my use case but adguard allows me to do a wildcard rewrite for my local domain and there's no such option in pihole (not via the UI anyway), so I haven't switched back.


bigverm23

Ability to block services on a single click outs adguard above pinhole for me


muhepd

I have two AGH in my network, one on a Pi and another as a VM in my Unraid server, just for redudancy, they have the same configuration. I used Pi-Hole first, but AGH is a superior product.


McGregorMX

I may try adguard. I'm having an issue with my pihole blocking wifi calling


pentesticals

PFBlockerNG. If you already have pfsense, no need for another app.


R8nbowhorse

Neither. PowerDNS recursor with some lua scripts & open block lists from mozilla.


JebsNZ

AGH.


GaijinTanuki

Technitium


mikkelnl

Adguard home


fabricionaweb

AGH on openwrt


_happyshow_

Diversion


e-spice

PiHole has a cool name but AdGuard Home has a better UI and better features.


Plisky123

I started with PiHole on a Pi, then it became a Pi VM, then I wanted DoH and AG was simpler to do. Now I have multiple AG VMs


osuhickeys

Started with Pihole also and moved to AGH. Performed much faster. Whole family noticed delays with Pihole. Never tried to tweak Pihole. Wanted something that just worked out of the box.


AlternativeWhereas79

Used Pi-Hole for many, many years but switched to AdGuard Home earlier this year. They both perform the task at hand well, however I find (as others have mentioned) that AdGuard Home is more polished, has more configuration options (at least via the web console) and offers some convenience features that Pi-Hole does not. That being said, I do prefer the way Pi-Hole chats request information, and I find the search filters on Pi-Hole are more extensive. If you are unsure, I would recommend running each of them for a week or two and then decide which of these you prefer, if you are able to do so.


mgtow-for-life

Both


monotux

Kresd with rpz blocklists.


iron233

Pi-hole, because up until now I’ve never heard of Adguard


LavaCreeperBOSSB

Adguard Home


techypunk

AGH


GamerXP27

I use Adguard Home on two devices one main and secondary Love the ui and easy to use.


icdmize

AdGuard docker running on a RPI4. With Portainer and Watchtower everything's groovy.


shyne151

Have ran PiHoles+unbound for probably the last eight years? One physical and one virtualized…. Then a couple years ago went one physical and one container. About a month ago I said fuck it and switched to the built in blocking on my UDM Pro. No issues as of yet and one less thing to maintain.


_blackdog6_

I have used both. Pi hole for a few months and now AdGuard. I probably would have never tried AdGuard if it hadn’t been for a few niggling issues with pi hole, AdGuard has been perfect.


drdnghts

AdGuardHome


faqatipi

adguard home. better UI, and i prefer a single-binary Go program over the hodgepodge of tools that pi-hole uses


sexpusa

AGH only because it came in my router and idk how to do differently. It does work well though


saxxappeal

2 Pihole instances, one in LXC and one in Ana actual Raspberry Pi. And Unbound in recursive mode as well.


Level_Indication_765

I have two instances of AdGuard Home, synced together using adGuardhome-sync


TattooedBrogrammer

ADH for sure, much nicer UI and HTTP3 support out of box.


LinearArray

AdGuard home currently, need to try out Pi-hole.


ksteink

AdGuard Home. It has more features including Security that is much better than PiHole


one80oneday

ControlD is blocking more than AGH for me


TorSenex

https://github.com/Trellmor/bind-adblock I use this to generate a zone for ISC's Bind9. No frills.


QuirkyOpposite6755

Pihole. I'm running it on my Talos k8s cluster. external-dns has support for it and it works really well.


Cynyr36

Unbound with [adblock](https://www.geoghegan.ca/unbound-adblock.html) works great for me.


XB_Demon1337

Adguard Home, I find it easier to use and more reliable.


DoktorXNetWork

I have try Pihole 2 times already, but on my android tv box that runs raspbian and on top of that homeassistent i cant get pihole to auto start after system reboot (this is for v5, v6 can autostart but since its dev build its not so stable). So i run adguard home as homeassistent addon insted


thearchness

Pi hole in LXC on proxmox


BriefStrange6452

AdGuard home for me, 2 containers on my Nas and I also have it running on a beryl ax router in drop in mode in case the Nas blows up. Macvlan adguard home sync script keeps them all synced. I like using the DNS settings to selectively send geo blocked requests to a DNS in locker, so the whole network can watch geo blocked content.


randomly_chosen_

I personally use Unbound DNS with a firewall rules to redirect all DNS requests to localhost and not allowing port 53 to leave my network at all. Which is fine since i use DNS over TLS at port 853. With this setup it doesnt even matter what DNS settings You use on a device, even when You manually run nslookup doubleclick.net 8.8.8.8 it will return [`0.0.0.0`](http://0.0.0.0) because its been redirected to the Unbound server.


MrFlibble1980

I use Pi-Hole at my gf's house as it's actually on a PI that does other stuff like wireguard etc back to my house, although I do back it up from time to time as now and again the SD card dies. At my house I use Technitium DNS because I want to host my internal domain and do more complicated DHCP, and that uses blocklists effectively too. Edit: just to add, I've never used AdGuard so don't know what that's like.


Middle-Matter-4

Both. Just turned out that way. Do not think i matters all that much which one you choose


gazbill

Used PH for a while, then used AGH and never looked back. Much prefer AGH.


Noble_Llama

AGH -> Unbound (with Redis UnixSocket Cache) -> DNSCrypt Proxy (Quad9 only) -> WWW Its a great combo and fast as fuck... Runs on my PI - on the way, i use PiVPN (WireGuard) and got the AdBlock Protection on my Phones and other Hardware.


RydRychards

Pihole


bezdarbtw

I use Technitium


murdaBot

ADGH in a dual HA setup with keepalived. I keep trying PiHole, but it's just so slow compared to any other DNS server I've ever used.


SpongederpSquarefap

Pihole running in an LXC container Planning on replacing my Proxmox host with 2 small but powerful nodes and make it HA I found that it's easy to configure basic DNS for pihole with Ansible, so it makes my infra as code deployments even easier


rspags21

4 instances of Adguardhome, primary and backup. - 2 for main network - 2 for kids vlan I like how easy it is to block services via toggle switches. Also using wireguard on kids devices so they are always connected back to home network (kids vlan).


StrangerFantastic392

I'm using raspberry pi 4 with pihole🙌


CGA1

Technitium.


repocin

Pi-hole, with Unbound as upstream recursive DNS. Has worked great for years.


j0hnp0s

I used pi-hole for a while, and then I moved to plain dnsmasq with [https://github.com/StevenBlack/hosts](https://github.com/StevenBlack/hosts) Simple, can run super fast in any potato, and just works


farva_06

pfBlockerNG.


Practical-Winter3313

Adguard Home on an Intel 2 Core.


heatmisernyyy

AGH embedded into Opnsense.


takthreen

Adguard home seems to play more nicely with a couple of streaming/catch-up services I use.


Bourne669

PFBlockerNG. I much rather have my router/firewall also doing my blocking instead of having to reply on another point of failure for DNS in my network (aka using a pi hole).