Own DNS — ad-free and split-horizon
DNS is the first stop of every connection — so it runs on your own network. AdGuard Home filters ads and trackers for every device, resolves internal names locally, and sends everything else out encrypted. Deliberately redundant, so DNS never becomes a single point of failure.
AdGuard Home as resolver
A network-wide DNS resolver with curated blocklists against ads, trackers and malicious domains. The protection applies to every device on the network — phone, TV, IoT — with no client software at all.
Split-horizon
Internal names resolve locally and stay on the LAN instead of "hairpinning" out over the public internet. Public names go out normally — one config, two clean views.
Encrypted upstreams
Requests that leave the network go out via DNS-over-HTTPS or DNS-over-TLS — no more plaintext DNS. The provider sees much less, and tampering gets harder.
Built redundant
DNS is critical infrastructure: if it fails, it feels like "the whole internet" is down. So a distributor sits in front of the resolvers, spreads queries across two instances and skips a failed one automatically — nobody in the house notices.