ON
DNS settings
Upstream DNS servers
Enter one server address per line. Learn more about configuring upstream DNS servers. Here is a list of known DNS providers to choose from.
1.1.1.1
9.9.9.9
149.112.112.112
1.0.0.1
quic://dns-unfiltered.adguard.com:784
https://dns10.quad9.net/dns-query
https://dns.cloudflare.com/dns-query
https://security.cloudflare-dns.com/dns-query
1.1.1.1
9.9.9.9
149.112.112.112
1.0.0.1
quic://dns-unfiltered.adguard.com:784
https://dns10.quad9.net/dns-query
https://dns.cloudflare.com/dns-query
https://security.cloudflare-dns.com/dns-query
Examples:

    94.140.14.140, 2a10:50c0::1:ff: regular DNS (over UDP);
    94.140.14.140:53, [2a10:50c0::1:ff]:53: regular DNS (over UDP, with port);
    udp://unfiltered.adguard-dns.com: regular DNS (over UDP, hostname);
    tcp://94.140.14.140, tcp://[2a10:50c0::1:ff]: regular DNS (over TCP);
    tcp://94.140.14.140:53, tcp://[2a10:50c0::1:ff]:53: regular DNS (over TCP, with port);
    tcp://unfiltered.adguard-dns.com: regular DNS (over TCP, hostname);
    tls://unfiltered.adguard-dns.com: encrypted DNS-over-TLS;
    https://unfiltered.adguard-dns.com/dns-query: encrypted DNS-over-HTTPS;
    h3://unfiltered.adguard-dns.com/dns-query: encrypted DNS-over-HTTPS with forced HTTP/3 and no fallback to HTTP/2 or below;
    quic://unfiltered.adguard-dns.com: encrypted DNS-over-QUIC;
    sdns://...: DNS Stamps for DNSCrypt or DNS-over-HTTPS resolvers;
    [/example.local/]94.140.14.140: an upstream for specific domains;
    [/example.local/]94.140.14.140 2a10:50c0::1:ff: multiple upstreams for specific domains;
    # comment: a comment.

Fallback DNS servers
List of fallback DNS servers used when upstream DNS servers are not responding. The syntax is the same as in the main upstreams field above.
8.8.8.8
8.8.4.4
Bootstrap DNS servers
IP addresses of DNS servers used to resolve IP addresses of the DoH/DoT resolvers you specify as upstreams. Comments are not permitted.
9.9.9.10
149.112.112.10
2620:fe::10
2620:fe::fe:10
Private reverse DNS servers
DNS servers used by AdGuard Home for private PTR, SOA, and NS requests. A request is considered private if it asks for an ARPA domain containing a subnet within private IP ranges (such as "192.168.12.34") and comes from a client with a private IP address. If not set, the default DNS resolvers of your OS will be used, except for the AdGuard Home IP addresses.
By default, AdGuard Home uses the following reverse DNS resolvers: "1.1.1.1:53", "8.8.8.8:53".
DNS server configuration
Rate limit
The number of requests per second allowed per client. Setting it to 0 means no limit.
Subnet prefix length for IPv4 addresses
Subnet prefix length for IPv4 addresses used for rate limiting. The default is 24
Subnet prefix length for IPv6 addresses
Subnet prefix length for IPv6 addresses used for rate limiting. The default is 56
Rate limiting allowlist
IP addresses excluded from rate limiting
Blocking mode
Default: Respond with zero IP address (0.0.0.0 for A; :: for AAAA) when blocked by Adblock-style rule; respond with the IP address specified in the rule when blocked by /etc/hosts-style rule
REFUSED: Respond with REFUSED code
NXDOMAIN: Respond with NXDOMAIN code
Null IP: Respond with zero IP address (0.0.0.0 for A; :: for AAAA)
Custom IP: Respond with a manually set IP address
Blocked response TTL
Specifies for how many seconds the clients should cache a filtered response
DNS cache configuration
Here you can configure DNS cache
Cache size
DNS cache size (in bytes). To disable caching, leave empty.
Override minimum TTL
Extend short time-to-live values (seconds) received from the upstream server when caching DNS responses.
Override maximum TTL
Set a maximum time-to-live value (seconds) for entries in the DNS cache.
Access settings
Here you can configure access rules for the AdGuard Home DNS server
Allowed clients
A list of CIDRs, IP addresses, or ClientIDs. If this list has entries, AdGuard Home will accept requests only from these clients.
Disallowed clients
A list of CIDRs, IP addresses, or ClientIDs. If this list has entries, AdGuard Home will drop requests from these clients. This field is ignored if there are entries in Allowed clients.
192.168.0.134
Disallowed domains
Not to be confused with filters. AdGuard Home drops DNS queries matching these domains, and these queries don't even appear in the query log. You can specify exact domain names, wildcards, or URL filter rules, e.g. "example.org", "*.example.org", or "||example.org^" correspondingly.
version.bind
id.server
hostname.bind
HomepagePrivacy Policy
Copyright © 2025 AdGuard
Version: v0.107.55
suggest me the best settings