DNS Daddy review
A free, open-source DNS filter with detailed policies, logs, reports, and integrations.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
DNS Daddy is a free, open-source protective DNS resolver for homelabs and smaller organisations. It runs as a self-hosted Go binary with an embedded dashboard and supports web, Windows, macOS, Linux, iOS, API, and self-hosted DNS environments. Its filtering scope includes malware, phishing, command-and-control, cryptomining, ads, adult content, gambling, and newly registered domains through public threat feeds. Custom allow and block lists, per-network policies matched by CIDR, encrypted DNS support, and explainable behavioural detections give administrators control over how policies are applied.
The published product details describe DNS Daddy as free permanently, with no paid tiers identified. Its strongest area is policy visibility: per-query logs include plain-English reasons, while hourly and daily reporting rollups provide broader activity views. DNS-over-HTTPS and DNS-over-TLS support add encrypted DNS options. For operational workflows, the REST API uses OpenAPI 3.1, and Prometheus metrics plus NDJSON exports support monitoring and analysis. These capabilities make the product a fit for teams that want inspectable DNS decisions rather than a basic blocklist alone.
Integration breadth is another practical strength. DNS Daddy lists pfSense, OPNsense, UniFi, FortiGate, Windows Server, Wazuh, Elastic, Splunk, and Sentinel among its integrations, alongside self-hosted deployment. The tradeoff is project maturity: it is described as alpha software, actively developed, and unaudited. SafeSearch enforcement is planned and currently nonfunctional, so organisations that require working SafeSearch controls should choose a different product. DNS Daddy suits buyers comfortable with self-hosting who value open-source policies, explainable logs, and infrastructure integration; it is less suitable for those seeking a mature, fully audited service or functional SafeSearch enforcement.
DNS Daddy pros and cons
- Where it wins
- Per-query logs explain blocking decisions in plain English
- CIDR-based network policies and per-policy allow/block lists
- REST API, Prometheus metrics, and SIEM-oriented exports
- Where it doesn't
- Alpha software is actively developed and unaudited
- SafeSearch enforcement is planned but currently nonfunctional
- Self-hosting requires managing a Go binary and DNS environment
DNS Daddy fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update