nextdns VS GoodbyeDPI

I've tried hosted Pi-Hole and AdGuard Home. They are good as long as I'm around to fix stuffs. Then I tested something which can be global (home) and also for individual devices -- Control-D, NextDNS, and Adguard DNS. All of them works pretty well. If I really have to choose, then it would be in the order of NextDNS > Control-D > AdGuard DNS. Affiliated with none, and have decided to subscribe to all three to further test them for this year.

https://controld.com

https://nextdns.io

https://adguard-dns.io

Okay but NextDNS' own homepage says it "blocks ads and trackers on websites and in apps" - https://nextdns.io

I first used Safari on Windows around 2006. Put me off forever.

You just need Firefox and the extensions that mean ads are never seen.

That said, take a look at https://nextdns.io

just run snort and get nextdns.io account and use those DNS servers to control your DNS.

I'm using NextDNS which can be integrated into TailScale MagicDNS. It works seamlessly. You may need to pay if you have a high usage rate. I pay for the Pro version but that's less than $30 CAD a year. I did have in house Raspberry PI and Pi-Hole DNS but it was a lot of work.

pretty much to the same effect of a pihole, yet you can get up and running in minutes. You can then configure wherever you please: your browser, your laptop, your phone, or even your router.

[0]: https://nextdns.io

Check out NextDNS. You can set recreation time and block things like YouTube and Instagram at all times of the day except during your recreation time. Mine for instance is between 6pm and 9pm. At all other times, I can have it blocked. They market this feature to parents, which I think is short sighted because it’s great for productivity and works much more effectively at the network level compared to blocking apps which, at least on iOS, are limited in their capabilities.

Update: So I can see in https://github.com/nextdns/nextdns/wiki that the nextdns CLI I set up in opnsense is DOH, but I swear this wouldn’t work the first time I installed it, hence why I set up DOT. So confused now lol!

Right now, it is accessible only through VPN. Even programs like DPI blocker are not helping

As in you cant access those sites (you got redirected to the ISP site)? Try changing your dns (make sure to clear your dns cache too) and try using goodbyedpi. Recently my country start enforcing isp to block piracy sites along with other sites (porn, reddit, etc) but since their method is just to use dpi, i could just use goodbyedpi to bypass it.

ÖNCE BU GİTHUB PROJESINE GIRIYORSUNUZ https://github.com/ValdikSS/GoodbyeDPI

Russian internet censorship is very simple. They don't seem to be using DPI to target VPN protocols at all, instead trying to block IPs/subnets of known commercial VPN providers. Blocking IPs, subnets, and domains is the primary operating mode of Roskomnadzor.

There allegedly is DPI, but it only comes into play as an extra measure against things like domain fronting, proxies, and plaintext HTTP. It'd look at the SNI and inject a RST packet to drop the connection. As it does not even try to implement TCP, analyzing each IP packet in isolation, there are various interesting utilities[1] that mess with it by, for example, splitting the TLS ClientHello into two TCP packets in the middle of the domain name.

[1] https://github.com/ValdikSS/GoodbyeDPI

Also, try this tool, you'll find that unblocks most content for you. Good luck!

Cobain GoodbyeDPI. Masukin ke task scheduler biar auto nyala dan hide window nya.