NextDNS is the privacy-enabled tool you’ve been waiting for. It’s like Pi-hole but runs in the cloud.
Right now it’s free, but once they leave beta they plan to charge a couple bucks a month. Worth. every. penny.
NextDNS will encrypt your DNS, block ads, bypass censorship, protect your privacy and offer parental controls.
NextDNS will also protect you from everything like Cryptojacking, threat intelligence, crazy algorithms, NSA spying, wide spectrum trackers (like wtf!) and much more
Finally you can use NextDNS like a Pi-hole in the cloud and block any list of websites, including lists like Steven Black’s Host Files.
You can run NextDNS on every device individually. Download the specific app, enter your configuration id, done!
Make sure you’re running an up to date DD-WRT version. Most routers support the latest updates.
The nice part about this is that you don’t have to install any apps. The tricky part is, depending on the router/software you have, this can turn into a shitshow.
You can see if your router supports one-click install here. A lot of your favorite routers are supported:
- Merlin (Asus)
- Ubiquiti EdgeOS / USG
Since I run dd-wrt, it’s a bit more complex:
Don’t blame me for it, every router config is different. YMMV, etc. Make sure you back it up and whatever.
Click Administration Tab
Scroll down to JFFS2 Support. It’s probably disabled. Click Enable
Save. Wait a few seconds. Then, click Apply Settings.
Go back to JFFS2 Support. Click “Enable” on Clean Internal Flash Storage. Don’t click Save, just Apply Settings.
Once the settings are applied, turn off Clean Internal Flash Storage and Click Save
Reboot your router!
It sounds like a PITA but it really isn’t bad. You need a USB stick.
- You need e2fsprogs to convert to e2f fiesystem that’s supported by your router:
brew install e2fsprogs
sudo $(brew --prefix e2fsprogs)/sbin/mkfs.ext2 -L opt /dev/disk2s1Run diskutil list to see the right disk
- mkfs.ext2 for USB dis, mkfs.ext3 for hard drive
- If you get a “resource busy” command then run
diskutil unmount disk3(again, find disk with diskutil list)
- Once that’s done, plug it into your router
- Go to DD-WRT Admin, find Services USB and turn on: Core USB Support, USB Storage and Automatic Drive Mount are all enabled
- Reboot your router
- Download Entware
- Go here and under “Installation” figure out your router type. It’s probably ARM7 but make sure !!! https://wiki.dd-wrt.com/wiki/index.php/Installing_Entware
mkdir /opt/jffs mount -n --bind /opt/jffs /jffs
Whew, we’re finally here!
sh -c "$(printf "GET /install HTTP/1.0\nHost: nextdns.io\n\n" | openssl s_client -quiet -connect "nextdns.io:443" 2>/dev/null | sed -n '/^\r/,$p' | sed 1d)"
DD-WRT support is finnicky right now, but the NextDNS team is actively working on making it a one-click installation.