DNS ad blocking for the network you run.
Make kudurru the DNS server your router hands out to devices. Filter ad and tracker domains for clients using that resolver, keep local DNS names alongside your blocklists, and see the rule behind each blocked answer in one dashboard.
One container, your own resolver
Run kudurru in Docker with a persistent data volume. The container includes DNS, the dashboard and the API; you do not need a separate database. A starter blocklist is embedded, and you can add URL sources or your own entries in hosts, domain, adblock and regex formats.
Give the host a stable address and configure your router's DHCP settings to advertise it as the DNS server. DHCP stays on your router or existing DHCP server. Test with one client before switching the whole network.
Start one Docker containerFind out why a domain was blocked
The query log names the matching list and rule, the client, the upstream and the node that answered. Allow or deny a domain directly from the log, disable an individual list entry, or pause blocking for a set amount of time while you troubleshoot.
Client groups match IP addresses and CIDR ranges. Policies can give a subnet its own lists and schedule, such as a kids' VLAN. Policies beyond the default require a license key; eligible personal users can request a free key.
Learn about groups and policiesUnderstand the limits of DNS filtering
DNS filtering blocks domain names, not individual URLs or page elements. It cannot selectively remove an ad served from the same hostname as the content you want. A browser content blocker can complement network DNS filtering.
Devices that use another resolver, a VPN's DNS or their own encrypted DNS settings can bypass your network resolver. kudurru supports DoT, DoH, DoQ and DoH3 for clients you configure to use it; supporting those transports does not force other clients to use them.
Configure your network and encrypted DNSCommon questions
Do I need to install an app on every device?
No app is needed for clients that use the DNS server advertised by your router. Devices with their own DNS or VPN settings may need additional configuration.
Is kudurru free for a home network?
Eligible personal use is free under the Kudurru Community License. One node with the default policy works without a key. A free personal key unlocks additional policies and licensed features for up to three nodes. Business and government production use requires a commercial agreement.