dnsdome
Create account Sign in
DNS filtering · multi-tenant

Block ads, malware
and content at the DNS layer.

One resolver. Your rules. Per profile. Point a network at dnsdome and decide what it’s allowed to resolve — for the whole household, office or site.

Get started See pricing
No client to install · works on any device · answers only your networks
What you get

Control resolution, not just devices.

dnsdome runs a recursive resolver scoped to your networks. Toggle filtering categories, add your own blocks, and only the source IPs you authorise ever get an answer.

Multiple filtering categories

Toggle whole content classes on per profile — one click each.

Ads & TrackingThreats & MalwareAdultGamblingPiracyFake NewsNewly Registered DomainsLookalike Domains

Your own blocklist

Add specific domains to block exactly, on top of the categories — scoped to each profile.

Source-IP allowlisting

Your resolver answers only for the networks you authorise — single IPs or CIDR ranges. Everyone else is refused.

Multiple profiles

Independent filtering profiles per account — home, office or kids’ devices, each with its own IPs, categories and blocks.

Per-account dashboards

Total and blocked query counts, time-series and top categories — windows from 24h to 365 days.

Searchable query log

Raw allow/block entries — domain, category, client IP, profile and timestamp — with paging and filters.

How it works

Live in three steps.

01

Create an account & profile

Sign up, then add a filtering profile and the source IPs allowed to use it.

02

Point your DNS at dnsdome

Set your router or device resolver to the dnsdome address — no client to install on individual devices.

03

Toggle categories & watch

Flip on the categories you want blocked, add custom domains, and follow it live on the dashboard.

Resolver Point your network DNS at your account’s dnsdome resolver address — shown in the panel under How to connect. Step-by-step guides for every router and OS are in the docs.
Pricing

Plans that scale with your networks.

Every plan includes every filtering category. Pick by how many profiles, allowed networks and history you need.

Free
€0
 
  • 1 profile
  • 1 allowed IP
  • 2 custom blocks
  • 10 queries/sec
  • 120,000 queries/month
  • 1 day log retention
Start free
Home
€4.99/mo
billed monthly
  • 3 profiles
  • 25 allowed IPs
  • 200 custom blocks
  • 50 queries/sec
  • 12 million queries/month
  • 30 days log retention
Choose Home
Pro
€7.49/mo
billed monthly
  • 10 profiles
  • 200 allowed IPs
  • 2,000 custom blocks
  • 250 queries/sec
  • 60 million queries/month
  • 90 days log retention
Choose Pro
Business
€24.99/mo
billed monthly
  • Unlimited profiles
  • 2,000 allowed IPs
  • 10,000 custom blocks
  • 2,000 queries/sec
  • 1.2 billion queries/month
  • 365 days log retention
Choose Business

Every plan includes all filtering categories and your custom blocklist. Past the monthly query cap an account resolves as plain DNS without filtering until the period resets, or refuses queries if you prefer. Pay yearly and you get two months free.

FAQ

Good to know.

How does dnsdome block things?
It runs a recursive DNS resolver for your account. When a device looks up a domain, dnsdome checks it against the categories you’ve enabled and your custom blocklist; blocked lookups are sinkholed so the site simply doesn’t load. Allowed lookups are resolved and cached normally.
Do I need to install anything on each device?
No. You point your router (or a device’s resolver) at your dnsdome address once, and every device behind it is covered. No agent, no per-device setup.
Is there an Android app?
Yes — the dnsdome app for Android signs in to your account, lets you pick a profile and turns protection on or off with one switch, so your phone stays covered on any network, mobile data included. Get it on Google Play. No Google Play on your phone? Download the APK instead — the same app with the same signing key, installed outside Google Play (allow the install when Android asks); it checks once a day and tells you when an update is available. If you installed a version older than 0.3.0, uninstall it first — 0.3.0 switched to the production signing key, so nothing can install over those early builds. Prefer no app? Every profile in the panel also shows a Private DNS hostname that works on Android 9+ with nothing installed.
Who can use my resolver?
Only the source IPs or CIDR ranges you add to a profile’s allowlist. Every other source is refused — your filtering policy can’t be borrowed by strangers.
Can I run different rules for different networks?
Yes. Create multiple profiles — e.g. home, office, kids — each with its own allowed IPs, categories and custom blocks. Your plan sets how many profiles you can have.
What do I see in the dashboard?
Total and blocked query counts, time-series charts and top blocked categories, over windows from 24 hours up to 365 days (by plan), plus a searchable raw query log.
Is there a free plan?
Yes — a Free tier with one profile, one allowed IP and all categories, so you can try it on a single network before upgrading.

Put a dome over your network.

Create an account, add your profile and point your DNS — you’ll see blocked queries within minutes.

Get started Sign in to the panel