you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 1 week ago* (last edited 1 week ago) (6 children)

I only know the basics of networking, so I've been wondering why this "DNS-sinkhole" functionality can't simply be implemented directly in private routers (as some kind of blocklist) instead of adding a new device to your network. Do routers not support this for technical or security reasons?

  • source
  • hideshow 6 child comments
  • [–] 7 points 1 week ago* (1 child)

    Routers are usually hardware level optimized for throughput, filtering is inherently computationally expensive compared to routing (not crazy expensive just more than usually fits an FPGA), especially if you have to keep up multi-gigabit throughput

    You could totally do it at the router, it would just become a more expensive piece of hardware and most people choose to cheap out

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 1 week ago

    Most consumer routers don't offer this functionality out of the box, likely because manufacturers don't consider it essential for most users. There's no major technical reason it couldn't be built in though. You can already set up DNS sinkholing with OPNsense or pfSense if you don't mind running and managing your own router.

  • source
  • parent
  • [–] 4 points 1 week ago (1 child)

    A Raspberry Pi 3b is adequate to run PiHole to do the job, or implementing AdGuard DNS.

    However, these require a little skill and knowledge to implement.

    Consumer routers aren’t built to do the job.

  • source
  • parent
  • hideshow 1 child comment