3b2f5d7842
Merge in DNS/adguard-home from 2704-local-addresses-vol.1 to master Updates #2704. Updates #2829. Updates #2846. Squashed commit of the following: commit 9a49b3d27edcb30da7f16a065226907833b1dc81 Author: Eugene Burkov <e.burkov@adguard.com> Date: Mon Mar 22 15:39:17 2021 +0300 aghnet: imp docs and logging commit 74f95a29c55b9e732276601b0ecc63fb7c3a9f9e Author: Eugene Burkov <e.burkov@adguard.com> Date: Fri Mar 19 20:56:51 2021 +0300 all: fix friday evening mistakes commit 0e2066bc5c16ed807fa601780b99e154502361a9 Author: Eugene Burkov <e.burkov@adguard.com> Date: Fri Mar 19 20:51:15 2021 +0300 all: upd testify, imp code quality commit 8237c50b670c58361ccf7adec3ff2452b1196677 Author: Eugene Burkov <e.burkov@adguard.com> Date: Fri Mar 19 20:19:29 2021 +0300 aghnet: imp test naming commit 14eb1e189339554c0a6d38e2ba7a93917774ebab Author: Eugene Burkov <e.burkov@adguard.com> Date: Fri Mar 19 19:41:43 2021 +0300 aghnet: isolate windows-specific functionality commit d461ac8b18c187999da3e3aba116571b7ebe6785 Author: Eugene Burkov <e.burkov@adguard.com> Date: Fri Mar 19 14:50:05 2021 +0300 aghnet: imp code quality commit d0ee01cb1f8613de2085c0f2f2f396e46beb52a5 Author: Eugene Burkov <e.burkov@adguard.com> Date: Fri Mar 19 11:59:10 2021 +0300 all: mv funcs to agherr, mk system resolvers getter |
||
|---|---|---|
| .github | ||
| client | ||
| client2 | ||
| doc | ||
| internal | ||
| openapi | ||
| scripts | ||
| .codecov.yml | ||
| .dockerignore | ||
| .gitattributes | ||
| .gitignore | ||
| .twosky.json | ||
| AGHTechDoc.md | ||
| changelog.config.js | ||
| CHANGELOG.md | ||
| go.mod | ||
| go.sum | ||
| HACKING.md | ||
| LICENSE.txt | ||
| main.go | ||
| Makefile | ||
| README.md | ||
| staticcheck.conf | ||
| tools.go | ||
Privacy protection center for you and your devices
Free and open source, powerful network-wide ads & trackers blocking DNS server.
AdGuard.com |
Wiki |
Reddit |
Twitter |
Telegram
AdGuard Home is a network-wide software for blocking ads & tracking. After you set it up, it'll cover ALL your home devices, and you don't need any client-side software for that.
It operates as a DNS server that re-routes tracking domains to a "black hole", thus preventing your devices from connecting to those servers. It's based on software we use for our public AdGuard DNS servers -- both share a lot of common code.
- Getting Started
- Comparing AdGuard Home to other solutions
- How to build from source
- Contributing
- Projects that use AdGuard Home
- Acknowledgments
- Privacy
Getting Started
Automated install (Linux and Mac)
Run the following command in your terminal:
curl -sSL https://raw.githubusercontent.com/AdguardTeam/AdGuardHome/master/scripts/install.sh | sh
Alternative methods
Manual installation
Please read the Getting Started article on our Wiki to learn how to install AdGuard Home manually, and how to configure your devices to use it.
Docker
You can use our official Docker image.
Snap Store
If you're running Linux, there's a secure and easy way to install AdGuard Home - you can get it from the Snap Store.
Guides
- Getting Started
- Configuring AdGuard
- Installing AdGuard Home
- Verifying Releases
API
If you want to integrate with AdGuard Home, you can use our REST API. Alternatively, you can use this python client, which is used to build the AdGuard Home Hass.io Add-on.
Comparing AdGuard Home to other solutions
How is this different from public AdGuard DNS servers?
Running your own AdGuard Home server allows you to do much more than using a public DNS server. It's a completely different level. See for yourself:
- Choose what exactly will the server block or not block.
- Monitor your network activity.
- Add your own custom filtering rules.
- Most importantly, this is your own server, and you are the only one who's in control.
How does AdGuard Home compare to Pi-Hole
At this point, AdGuard Home has a lot in common with Pi-Hole. Both block ads and trackers using "DNS sinkholing" method, and both allow customizing what's blocked.
We're not going to stop here. DNS sinkholing is not a bad starting point, but this is just the beginning.
AdGuard Home provides a lot of features out-of-the-box with no need to install and configure additional software. We want it to be simple to the point when even casual users can set it up with minimal effort.
Disclaimer: some of the listed features can be added to Pi-Hole by installing additional software or by manually using SSH terminal and reconfiguring one of the utilities Pi-Hole consists of. However, in our opinion, this cannot be legitimately counted as a Pi-Hole's feature.
| Feature | AdGuard Home | Pi-Hole |
|---|---|---|
| Blocking ads and trackers | ✅ | ✅ |
| Customizing blocklists | ✅ | ✅ |
| Built-in DHCP server | ✅ | ✅ |
| HTTPS for the Admin interface | ✅ | Kind of, but you'll need to manually configure lighthttpd |
| Encrypted DNS upstream servers (DNS-over-HTTPS, DNS-over-TLS, DNSCrypt) | ✅ | ❌ (requires additional software) |
| Cross-platform | ✅ | ❌ (not natively, only via Docker) |
| Running as a DNS-over-HTTPS or DNS-over-TLS server | ✅ | ❌ (requires additional software) |
| Blocking phishing and malware domains | ✅ | ❌ (requires non-default blocklists) |
| Parental control (blocking adult domains) | ✅ | ❌ |
| Force Safe search on search engines | ✅ | ❌ |
| Per-client (device) configuration | ✅ | ✅ |
| Access settings (choose who can use AGH DNS) | ✅ | ❌ |
| Running without root privileges | ✅ | ❌ |
How does AdGuard Home compare to traditional ad blockers
It depends.
"DNS sinkholing" is capable of blocking a big percentage of ads, but it lacks flexibility and power of traditional ad blockers. You can get a good impression about the difference between these methods by reading this article. It compares AdGuard for Android (a traditional ad blocker) to hosts-level ad blockers (which are almost identical to DNS-based blockers in their capabilities).
However, this level of protection is enough for some users. Additionally, using a DNS-based blocker can help to block ads, tracking and analytics requests on other types of devices, such as SmartTVs, smart speakers or other kinds of IoT devices (on which you can't install traditional ad blockers).
Known limitations
Here are some examples of what cannot be blocked by a DNS-level blocker:
- YouTube, Twitch ads
- Facebook, Twitter, Instagram sponsored posts
Essentially, any advertising that shares a domain with content cannot be blocked by a DNS-level blocker.
Is there a chance to handle this in the future? DNS will never be enough to do this. Our only option is to use a content blocking proxy like what we do in the standalone AdGuard applications. We're going to bring this feature support to AdGuard Home in the future. Unfortunately, even in this case, there still will be cases when this won't be enough or would require quite complicated configuration.
How to build from source
Prerequisites
Run make init to prepare the development environment.
You will need this to build AdGuard Home:
- go v1.15 or later.
- node.js v10.16.2 or later.
- npm v6.14 or later (temporary requirement, TODO: remove when redesign is finished).
- yarn v1.22.5 or later.
Building
Open Terminal and execute these commands:
git clone https://github.com/AdguardTeam/AdGuardHome
cd AdGuardHome
make
Please note, that the non-standard -j flag is currently not supported, so
building with make -j 4 or setting your MAKEFLAGS to include, for example,
-j 4 is likely to break the build. If you do have your MAKEFLAGS set to
that, and you don't want to change it, you can override it by running
make -j 1.
Check the Makefile to learn about other commands.
Building for a different platform. You can build AdGuard for any OS/ARCH just like any other Go project.
In order to do this, specify GOOS and GOARCH env variables before running make.
For example:
env GOOS='linux' GOARCH='arm64' make
Or:
make GOOS='linux' GOARCH='arm64'
Preparing release
You'll need this to prepare a release build:
Commands:
make build-release CHANNEL='...' VERSION='...'
Docker image
- Run
make build-dockerto build the Docker image locally (the one that we publish to DockerHub).
Please note, that we're using Docker Buildx to build our official image.
You may need to prepare before using these builds:
- (Linux-only) Install Qemu:
docker run --rm --privileged multiarch/qemu-user-static --reset -p yes --credential yes - Prepare builder:
docker buildx create --name buildx-builder --driver docker-container --use
Resources that we update periodically
scripts/translationsscripts/whotracksme
Contributing
You are welcome to fork this repository, make your changes and submit a pull request — https://github.com/AdguardTeam/AdGuardHome/pulls
Please note that we don't expect people to contribute to both UI and golang parts of the program simultaneously. Ideally, the golang part is implemented first, i.e. configuration, API, and the functionality itself. The UI part can be implemented later in a different pull request by a different person.
Test unstable versions
There are two update channels that you can use:
beta- beta version of AdGuard Home. More or less stable versions.edge- the newest version of AdGuard Home. New updates are pushed to this channel daily and it is the closest to the master branch you can get.
There are three options how you can install an unstable version:
- Snap Store -- look for "beta" and "edge" channels there.
- Docker Hub -- look for "beta" and "edge" tags there.
- Standalone builds. Use the automated installation script or look for the available builds below.
Beta:
curl -sSL https://raw.githubusercontent.com/AdguardTeam/AdGuardHome/master/scripts/install.sh | sh -s beta
Edge:
curl -sSL https://raw.githubusercontent.com/AdguardTeam/AdGuardHome/master/scripts/install.sh | sh -s edge
-
Beta channel builds
- Linux: 64-bit, 32-bit
- Linux ARM: 32-bit ARMv6 (recommended for Raspberry Pi), 64-bit, 32-bit ARMv5, 32-bit ARMv7
- Linux MIPS: 32-bit MIPS, 32-bit MIPSLE, 64-bit MIPS, 64-bit MIPSLE
- Windows: 64-bit, 32-bit
- MacOS: 64-bit, 32-bit
- FreeBSD: 64-bit, 32-bit
- FreeBSD ARM: 64-bit, 32-bit ARMv5, 32-bit ARMv6, 32-bit ARMv7
-
Edge channel builds
- Linux: 64-bit, 32-bit
- Linux ARM: 32-bit ARMv6 (recommended for Raspberry Pi), 64-bit, 32-bit ARMv5, 32-bit ARMv7
- Linux MIPS: 32-bit MIPS, 32-bit MIPSLE, 64-bit MIPS, 64-bit MIPSLE
- Windows: 64-bit, 32-bit
- MacOS: 64-bit, 32-bit
- FreeBSD: 64-bit, 32-bit
- FreeBSD ARM: 64-bit, 32-bit ARMv5, 32-bit ARMv6, 32-bit ARMv7
Report issues
If you run into any problem or have a suggestion, head to this page and click on the New issue button.
Help with translations
If you want to help with AdGuard Home translations, please learn more about translating AdGuard products here: https://kb.adguard.com/en/general/adguard-translations
Here is a link to AdGuard Home project: https://crowdin.com/project/adguard-applications/en#/adguard-home
Other
Here's what you can also do to contribute:
- Look for issues marked as "help wanted".
- Actualize the list of Blocked services. It it can be found in dnsfilter/blocked.go.
- Actualize the list of known trackers. It it can be found in client/src/helpers/trackers/adguard.json.
- Actualize the list of vetted blocklists. It it can be found in client/src/helpers/filters/filters.json.
Projects that use AdGuard Home
- AdGuard Home Remote - iOS app by Joost
- Python library by @frenck
- Home Assistant add-on by @frenck
- OpenWrt LUCI app by @kongfl888 (originally by @rufengsuixing)
- Prometheus exporter for AdGuard Home by @ebrianne
- AdGuard Home on GLInet routers by Gl-Inet
- Cloudron app by @gramakri
Acknowledgments
This software wouldn't have been possible without:
- Go and it's libraries:
- Node.js and it's libraries:
- whotracks.me data
You might have seen that CoreDNS was mentioned here before — we've stopped using it in AdGuard Home. While we still use it on our servers for AdGuard DNS service, it seemed like an overkill for Home as it impeded with Home features that we plan to implement.
For a full list of all node.js packages in use, please take a look at client/package.json file.
Privacy
Our main idea is that you are the one, who should be in control of your data. So it is only natural, that AdGuard Home does not collect any usage statistics, and does not use any web services unless you configure it to do so. Full policy with every bit that could in theory be sent by AdGuard Home is available here.