u/C4PTA1N

▲ 24 r/dns

Hello guys, I made a DNS proxy that combines blocking from multiple providers at once (+ a Cloudflare Worker version mostly for mobile)

The project, DNSieve: https://github.com/secu-tools/dnsieve

It sits in the middle, asks all your chosen DNS providers at the same time, and if any of them says a domain is blocked, it gets blocked. Best of both worlds instead of having to commit to just one.

No blocklists to download or maintain either, it just uses whatever filtering the upstream providers already do.

You just point it at whatever upstream providers you want (Quad9, Cloudflare for Families, Control D, NextDNS, whatever), and it handles the rest.

There is a small trade off: since its querying multiple servers instead of one, there is a tiny bit of extra latency. But modern DNS servers are so fast that (in my own testing and) in practice you wont notice it. Keep it to 2-3 upstreams and it should be fine (but you should still test this out since your network is prob much different than mine)

Theres also a Cloudflare Worker version: https://github.com/secu-tools/dnsieve-cfw

Same idea, but it runs on Cloudflare free Workers tier. Most for my mobile needs (still works for PCs, just ensure that you dont exceed your free quota, otherwise, catastrophic), deploy to CF worker, and just point devices DoH over

Both are open source (MIT), still under active development, built for personal use but sharing in case others find it useful. Happy to answer questions.

[AI assistant disclosure] Both projects are AI assisted. The core idea and original code started back in 2020 as a personal project, written in my own messy "it works on my machine" style. AI helped me add features, clean up and restructure the code, make it more efficient, and catch bugs I didnt even know were there. From my own testing, the result is genuinely better than what I would have shipped alone.

If you have concerns about what the project actually does, it talks to nothing except the IPs and domains you explicitly configure in the config file. Thats it. No telemetry, no callbacks, no surprises. You are welcome and encouraged to read through the code yourself to verify.

If AI-assisted code is a dealbreaker for you, totally respect that - this ones probably not for you. But if youre fine with it and just want something that works for your need, I do hope you find it useful as I am.

u/C4PTA1N — 21 days ago