blocky

A DNS proxy and ad‑blocker written in Go, designed for local networks. It filters queries using external blocklists for ads and malware, supports allowlists, regex rules, and can inspect response CNAMEs and IP addresses. Clients can be grouped (e.g., children, smart‑home devices) with separate allow/deny policies, and lists are reloaded periodically.

Beyond simple blocking, the tool offers custom DNS resolution, conditional forwarding, and per‑group upstream resolver definitions. Caching and prefetching improve resolution speed while a low memory footprint and support for UDP, TCP, DNS‑over‑HTTPS, and DNS‑over‑TLS keep performance high. DNSSEC validation and random upstream selection enhance security and privacy, and no telemetry is collected.

Integration options include Prometheus metrics, Grafana dashboards, and logging to CSV or SQL databases. Configuration is handled via a single YAML file; the project is distributed as a single binary and multi‑arch Docker image, runs on x86‑64 and ARM (including Raspberry Pi), and provides a Helm chart for Kubernetes deployments.