Comment by lostlogin

10 months ago

Oh wow. Thanks for this.

I just run Pihole in a container, and a spare one is on a NAS. I’ve learned the hard way, losing DNS is a shit show and a spare server saves you.

Added complexity has its downsides.

Yeah it's not perfect on iOS but better than maintaining your own stack. Basically it creates a VPN to localhost then proxies the DNS and traffic over that. It only modifies the DNS using a blocklist and passes your normal traffic straight through.

Works well. Even the crappiest nasty sites won't get through it.