Browser-based ad blockers are excellent, but they only protect your browser. What about your phone's apps? Your Smart TV? Your gaming console? DNS-level ad blocking solves this by filtering ads at the network level, protecting every device connected to your network.
How DNS Ad Blocking Works
Every time your device loads a webpage or app, it needs to look up the IP address of the server it is connecting to. This lookup goes to a DNS (Domain Name System) server. Normally, the DNS server returns the correct IP address for every domain, including advertising domains.
A DNS-level ad blocker intercepts these lookups. When it receives a request for a known advertising or tracking domain (like ads.google.com or tracker.facebook.com), it returns nothing instead of the real IP address. The ad never loads because your device never connects to the ad server.
This happens before the content reaches your device, so it works regardless of what device, browser, or app you are using.
Option 1: Pi-hole (Local Network)
Pi-hole is a free, open-source DNS server that you run on your local network. It was originally designed for Raspberry Pi devices but runs on any Linux machine, Docker container, or virtual machine.
Pros
- Completely free.
- Runs locally — your DNS queries never leave your network.
- Highly customisable with extensive blocklists and whitelist options.
- Detailed statistics dashboard showing what is being blocked.
Cons
- Requires hardware (a Raspberry Pi or similar device).
- Requires some technical knowledge to set up and maintain.
- Only protects devices on your home network — does not work when you are out.
Option 2: NextDNS (Cloud-Based)
NextDNS is a cloud-based DNS filtering service. You configure your devices or router to use NextDNS servers, and they handle the filtering. It has a generous free tier (300,000 queries per month) and a paid plan for unlimited use.
Pros
- No hardware required.
- Works everywhere — on your home network and on mobile data.
- Very easy to set up.
- Customisable blocklists and analytics dashboard.
Cons
- Your DNS queries go through a third party (NextDNS).
- Free tier has a monthly query limit (sufficient for most users).
Option 3: AdGuard DNS
AdGuard DNS is another cloud-based option with similar features to NextDNS. It offers a free public DNS that blocks ads and trackers without requiring any account or configuration beyond changing your DNS settings.
Setting Up DNS Ad Blocking on Your Router
The most powerful approach is configuring DNS blocking on your router. This protects every device on your network automatically — no per-device setup required.
- Log into your router's admin panel (usually at 192.168.0.1 or 192.168.1.1).
- Find the DNS settings (typically under WAN, Internet, or Network settings).
- Replace the default DNS servers with your chosen filtering DNS (Pi-hole's local IP, or NextDNS/AdGuard DNS server addresses).
- Save and reboot the router.
After this, every device — including Smart TVs, game consoles, and IoT devices — gets ad blocking without installing anything on them. This is especially valuable for streaming on Smart TVs, where installing ad blockers is difficult or impossible. See our Smart TV guide for more details.
Combining DNS and Browser Ad Blocking
DNS ad blocking and browser ad blocking are complementary, not redundant. DNS blocking catches ads at the network level, while browser extensions like uBlock Origin catch ads at the page level (including cosmetic filtering that hides ad placeholders).
For the best protection, use both. DNS blocking handles the broad filtering, and uBlock Origin handles the fine-grained blocking that DNS cannot do.
For a complete overview of all ad blocking options, see The Ultimate Ad Blocking Guide.