nextdns VS dnscrypt-proxy

You may try something like Blokada (https://blokada.org) or NextDNS (https://nextdns.io/)

PiHole will do this for your entire network. There's also NextDNS if you'd rather use a cloud service (easier setup). Once you start using a network wide DNS blocker you'll never want to go back.

nextdns.io became top root domain after I installed nextDNS app on iPhone and MAC and wondering if this is known. Before when I only was using NextDNS cli on router I didn't have this issue

DNS blocking, if you aren’t technically astute try NextDNS

I use nextdns.

You can also install NextDNS on your router (if supported), which will let your router cache the requests, which may improve latency : https://github.com/nextdns/nextdns/wiki

I have setup NextDNS on my computer and I can recommend you to try it. It should filter a lot of microsoft trackers and you can try it and see in log on my.nextdns.io.

Hey, try a DNS alternative like NextDNS which allows you to block ads. Just go to https://nextdns.io and you can find steps there

Depending on what you're trying to accomplish, you can also load the blocklists directly onto your hosts. For example, hblock (https://github.com/hectorm/hblock) has a few scripts to format its blocklist for your platform. The StevenBlack list's github page has instructions for adding to a range of platforms and links to several hosts/blocklist managers (https://github.com/StevenBlack/hosts). You can also point your router at an adblocking public DNS such as https://adguard-dns.com/en/public-dns.html (free) or https://nextdns.io/ (might cost). Lastly, depending on what router you run, you could load the host lists directly onto the router.

Do you mean this one: https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Installation-Windows ?

Confusing because it seems to differ from this set of instructions. https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Installation-on-Debian-and-Ubuntu

If you're still using standard DNS and standard servers, that might be a problem. To work around that, you can use multiple encrypted DNS-over-HTTPS connections to non-corporate anti-censorship servers and they can't do shit.

Only things I have personally stuck with outside of WireGuard are CAKE for traffic control (eliminating bufferbloat etc); and replacing dnsmasq with dnscrypt-proxy for adblocking and encrypted upstream DNS lookups.

Download latest release from: https://github.com/DNSCrypt/dnscrypt-proxy/releases/

Per this: https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Oblivious-DoH

1: DNSCRYPT-PROXY