Hacker News new | ask | show | jobs
by mattrighetti 1174 days ago
Do yourself a favour and install AdGuardHome/PiHole in your LAN so that you don't have to connect to a VPN each time, that way DNS is going to work and return a valid response back to every single device that you own in the network.
4 comments

No dice if you're a Vodafone customer, they run DPI so that they block specific IPs (or even specific domains if the IP is shared).
This is why we need everyone to use ECH (encrypted client hello) [1] [2] and large CDNs to share IPs.

[1] https://en.wikipedia.org/wiki/Server_Name_Indication#Encrypt...

[2] https://blog.cloudflare.com/handshake-encryption-endgame-an-...

I have two Plusnet Hub Ones at home being used as wireless access points. Both are flashed with OpenWrt and one has AdBlock installed; that one is the house's primary DNS server, with OpenDNS upstream.

Coupled with uBlock origin on all laptops and PCs, the online world is very ad-free.

If I bypass the blocking I am dismayed by how much ad crap there is out there.

Not that I don't recommend something like that for other benefits, but GP could probably just switch their router or devices to use some non-ISP DNS - 1.1.1.1, 9.9.9.9, 8.8.8.8, whatever. It's not blocking specific DNS requests that will fix their immediate problem, it's not blocking them (by not using ISP's resolver).
Isn't there a docker image one can spin up cheaply and not connect to dubious vpn provisers?
PiHole is local. You can docker it but you have some.. issues depending on configuration. AdGuard is a pihole like SaaS (that seems pretty good, it's the sort of thing I'd get for my mom).
Would this work? I assumed that ISP blocking would still block even when I use a Pihole.
In most of my cases, they're just blocking the DNS.