Blocky

Overview

Blocky is a DNS proxy and ad-blocker for the local network, written in Go. It blocks DNS queries using external lists for ads and malware, supports client-specific allow/denylists, and provides network-wide ad blocking similar to Pi-hole without collecting user data or telemetry.¹⁸

Key Features

• DNS Query Blocking - Blocks DNS queries matching external ad-block and malware lists with allowlisting support.
• Client Grouping - Defines allow/denylists per client group such as kids or smart home devices.
• CNAME Inspection - Blocks request domains, response CNAMEs, and response IP addresses.
• Encrypted DNS - Supports encrypted upstream resolvers like DoH and DoT.
• REST API - Provides API for control and metrics including Prometheus export.
• CLI Interface - Command-line tool to control Blocky via the REST API.
• DNS Caching - Includes caching with prefetching for performance.

Pricing

Platforms & Requirements

Blocky runs as a standalone Go binary or Docker container on Linux, macOS, and Windows servers. It requires minimal resources and is commonly deployed on VPS, homelabs, or routers via DHCP. No client-side apps; works network-wide by setting as DNS server.¹²⁶

Integrations & Ecosystem

• External blocklists (ads, malware)
• Upstream DNS resolvers (DoH, DoT)
• Prometheus metrics
• REST API
• CLI control
• DHCP integration via routers
• Tailscale subnet routing

Alternatives

Reputation

Blocky is regarded as a lightweight, privacy-focused alternative to Pi-hole for network-wide ad blocking, praised for no telemetry and easy deployment in homelabs.¹⁴⁷ Users highlight its reliability in high-availability setups and performance via caching.²⁵ Lacks a web UI, requiring CLI or API for management, which suits technical users but may deter beginners.⁷