Hacker News new | past | comments | ask | show | jobs | submit login




> similar but open source

Netguard (per HN title) is open-source GPLv3: https://github.com/M66B/NetGuard

Rethink uses cloud services by default?

  The [DNS] resolver is deployed to Fly.io at max.rethinkdns.com 
  and Deno Deploy at rdns.deno.dev too, 
  apart from the default deployment on Cloudflare Workers.


rdns dev here

> Rethink uses cloud services by default?

There isn't anything sinister going on here with the use of "cloud services" [0][1]. Rethink, which is geared more towards anti-censorship, has its default resolver "ip-fronted" on Cloudflare (whose IPs are seldom blocked) and it works great in countries where the app is popular.

Users can opt to switch to any DoH, DoT, ODoH, DNSCrypt v3 resolver of their choice. In fact, we encourage users on our reddit/telegram groups to use ODoH (we also run a public-facing ODoH proxy) and DNSCrypt upstreams because of their privacy guarantees.

[0] If anything, hosting it cost us a bomb: https://old.reddit.com/r/rethinkdns/comments/17h2y6r / https://archive.md/slpZ9

[1] Our stub resolvers are open-source & "open deploy" (ie deploy straight from github actions): https://github.com/serverless-dns/serverless-dns/actions/


FWIW, Netguard's UI feels like one of an average opensource mobile app, while Rethink is a very polished experience. Well done!


> rdns dev here

I have a question for you about RethinkDNS:

Can you point me the link to one thread or question about Netguard on some major internet forums like HN, Reddit or similar, where you or other RethinkDNS devs did not jump in and hijacked the thread? Only one example, please?

Your spammy marketing tactics of spamming makes your product looks like a scum, and I don't even have a desire to test.

Also, why do you keep comparing one on device firewall like Netguard with a cloud first solution like RethinkDNS?


> hijacked the thread

I (try and) mostly only respond to subthreads that mention Rethink.

> why do you keep comparing one on device firewall like Netguard with a cloud first solution like RethinkDNS

Rethink isn't cloud-first.

> where you or other RethinkDNS devs

There's 2 of us. The other one isn't on HN, or reddit, or any other forum.

> spammy marketing tactics of spamming makes your product looks like a scum

I'm sorry you think that.


Right, I saw their pro features listed and skipped over the oss mention.

Yes rethink uses public fly resolver by default but you can self host that as well. Apologies, that's something I should have mentioned.

https://github.com/serverless-dns/serverless-dns


I tried Rethink for the day.

I had previously set Android's private DNS to dns.adguard-dns.com, which didn't block anything.

Rethink's battery usage is 15 - 20% on my pixel in logging mode.

It definitely works, but I can't seem to associate blocked requests with apps, which renders it far less useful.

Overall I think it's a very busy UI.

You definitely want to exclude Firefox with uBO as elsewise Firefox behaves as though the network is down, whereas with uBO you can interactively choose to proceed.

I see there is an option to download the block lists locally. Does that mean it no longer uses DNS blocking? I see it described as a DNS blocker but it requires a VPN.

Anyway, off to try a Adaway next.


> Rethink's battery usage is 15 - 20% on my pixel in logging mode.

This is unusually high. It doesn't cross 3% on my Android, but I'm using a version (v055o( that's yet to launch (but will in a week or so).

If you only need DNS based blocking, tap on the down-arrow next to the STOP/START button and choose DNS-only mode. That should bring down battery use to 1% or so.

> but I can't seem to associate blocked requests with apps, which renders it far less useful.

Rethink most definitely can. Make sure to turn OFF Private DNS (instead of setting it to Opportunistic or Automatic).

Ex A: https://mastodon.social/@tuxicoman@social.jesuislibre.net/11...

Ex B: https://mastodon.social/@33dBm@lazysocial.de/112051004405969...

> ...download the block lists locally. Does that mean it no longer uses DNS blocking

If you download the blocklists locally, then you can set those on your device, and use any DNS upstream (DoH/DoT/DNS53/DNSCrypt/ODoH) and the rules should be applied, regardless.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: