Filtering DNS resolver with blocklists, query logs and per-device profiles, served as DNS over HTTPS from your Cloudflare account
- Deploy
- One-click
- License
- AGPL-3.0
- GitHub stars
- 22 stars
- Last commit
Self-hosted alternatives to Control D
Control D is a hosted DNS filtering service that blocks malware and unwanted content, redirects traffic per service and keeps query logs. One listed app does its main job and runs in your own Cloudflare account.
Each answer comes from the app’s README and source code, compared with the features Control D describes on its own site.
Control D features, app by app
| Feature | DNS Worker |
|---|---|
| Malware blocking | Partly |
| Web filtering by category | Partly |
| Service filtering | Partly |
| Custom filtering rules | Yes |
| Traffic redirection | No |
| Analytics and admin logs | Yes |
| Multiple users and organizations | Partly |
| DoH, DoT and DoQ | Partly |
Filtering DNS resolver with blocklists, query logs and per-device profiles, served as DNS over HTTPS from your Cloudflare account
- What a Control D user would miss
- There is no proxy network for redirecting traffic and no ready-made service or category filters, and on Workers it serves only DNS over HTTPS.
- What it adds
- Query logs stay in your own Cloudflare account, and the same project runs as a standalone server with classic DNS and DNS over TLS.
- Partly Malware blocking. Through the blocklists you subscribe to.
- Partly Web filtering by category. Blocklists can cover categories; no built-in category picker listed.
- Partly Service filtering. Possible with wildcard rules, without ready-made per-service toggles.
- Yes Custom filtering rules. Wildcard rules and custom overrides.
- No Traffic redirection. Overrides change DNS answers, but there is no proxy network.
- Yes Analytics and admin logs. Analytics page and a query log for each lookup.
- Partly Multiple users and organizations. User accounts and several profiles; no reseller or MSP features listed.
- Partly DoH, DoT and DoQ. DoH on Workers; the other protocols only with the standalone server.
Sources:github.com/Obein/DNS-Worker#key-highlightsobein.github.io/DNS-Worker/deployment/matrix/workersnative.directory/api/apps/dns-worker