alt Hacker News> My phone is always VPNed into my home network which has DNS-level ad and tracker blocking.
I've been looking to do this setup. Would you share a few details of which tools you've used?
Replies
My setup is similar: A server at home runs Unbound for recursive DNS, filtered by Hagezi's blacklists. The phone (running GrapheneOS) consumes the DNS service through a Wireguard tunnel. This is 100% self-hosted and does not rely on Tailscale or a third-party DNS service. All the mobile carrier or WiFi hotspot used sees is a single encrypted connection to the server.
I'm also interested. I use tailscale and there is supposed to be a way to configure it to use my pihole DNS, but there is something in Android that prevents that. I think I have to set a custom DNS on the phone.
RethinkDNS does everything for me. You're tied to their DNS server if you want to use the in-app interface to make changes to the blocklists in use, but that's not a hard requirement. As a bonus, it also supports actual VPNs (wireguard, http connect, and socks proxy). If you don't care to micro-manage it, trackercontrol is also pretty good. There's other apps as well, like personalDNSfilter.