A free, self-hosted DNS filtering appliance for home users, families, and small businesses. Like Pi-hole, but as a hardened, pre-configured virtual appliance — import the OVA, point your router, and every device is protected. No account required, no cloud dependency.
One appliance protects every device — no per-device setup needed.
Traditional ad blockers work per-device and per-browser. VeloGuardian DNS operates at the network level — configure it once as your network's DNS server, and every device is protected automatically. Smart TVs, IoT devices, phones, laptops — everything.
When a device on your network makes a DNS request, VeloGuardian checks it against continuously updated blocklists. Malicious domains, ad networks, trackers, and phishing sites are blocked before the connection is ever made. Legitimate traffic passes through untouched.
Real-Time Query Activity and Statistics
Category-Based Filtering with 90+ Categories
Per-Client Filtering Profiles
From home users to small businesses — DNS filtering for all.
Block ads, trackers, and malware on every device — laptops, phones, smart TVs, IoT — without installing anything on each one. Faster browsing, less bandwidth waste.
Use category-based blocking as a parental control — block adult content, gambling, or social media across the whole network. Kids can't bypass it by switching browsers or using incognito mode.
Protect your office network from ads, phishing, and malware without enterprise pricing. Deploy on existing virtualization infrastructure and manage via the web dashboard — no IT department required.
Explore VeloGuardian VPN features →Everything you need for network-wide DNS protection.
Block intrusive ads, tracking pixels, and analytics domains across every device. Faster page loads, less bandwidth waste, and no more targeted advertising.
What is web filtering? →Prevent connections to known malicious domains before they happen. Continuously updated threat intelligence blocklists stop ads, malware callbacks, phishing lures, and command-and-control servers.
How anti-malware protection works →Purpose-built OVA with a minimal attack surface. No unnecessary services, locked-down OS, automatic security updates. Treat it as a network appliance, not a general-purpose VM.
Monitor queries in real time, manage blocklists, view per-device statistics, and configure allowlists/denylists — all from a clean browser-based interface.
Initial network configuration (IP, gateway, DNS upstream) through a lightweight console interface. SSH access available for advanced administration.
No subscriptions, no telemetry, no cloud dependency. VeloGuardian DNS runs entirely on your hardware. Your DNS data never leaves your network.
VeloGuardian DNS vs the most popular DNS filtering solutions for home and small business use.
| Feature | VeloGuardian DNS | Pi-hole | AdGuard Home | NextDNS | Cloudflare 1.1.1.1 |
|---|---|---|---|---|---|
| Self-hosted | Yes (OVA appliance) | Yes (manual install) | Yes (manual install) | No (cloud) | No (cloud) |
| Setup complexity | Import OVA & boot | Linux CLI install | Binary + config | Sign up & configure | Change DNS settings |
| Hardened OS included | Yes | No (BYO OS) | No (BYO OS) | N/A (cloud) | N/A (cloud) |
| Custom blocklists | Yes | Yes | Yes | Yes | Limited |
| Category-based filtering | Yes | Via blocklists | Yes | Yes | Families only |
| Parental controls | Yes | Manual config | Yes | Yes | Basic |
| Web dashboard | Yes | Yes | Yes | Yes | No |
| Data stays on your network | Yes | Yes | Yes | No | No |
| Account required | No | No | No | Yes | No |
| Price | Free | Free | Free | Freemium | Free |
From download to full network protection in minutes.
Download the OVA file and import it into your hypervisor — VMware, VirtualBox, or Proxmox. Boot the VM and follow the console wizard to set a static IP on your network.
Point your router's DNS setting to the VeloGuardian DNS appliance IP. Every device on your network will automatically route DNS queries through the filter. No per-device configuration needed.
Open the web dashboard from any browser on your network. View blocked queries in real time, add custom allow/deny rules, enable or disable blocklist categories, and check per-device activity.
Lightweight enough to run on any modern hypervisor.
Deep dives into DNS filtering technology and how it protects your network.
How DNS-level blocking stops threats before they reach your network. A foundational layer of protection for everyone.
Read more →A detailed comparison of VeloGuardian DNS, Pi-hole, AdGuard Home, NextDNS, and Cloudflare — setup, features, privacy, and cost.
Read more →Answers to the most frequent questions about VeloGuardian DNS.
Yes, completely. There are no paid tiers, no feature gates, and no account required. The appliance runs entirely on your hardware with no cloud dependency.
VeloGuardian DNS ships with curated blocklists for ads, trackers, malware, and phishing domains. You can add custom blocklists, create your own allow/deny rules, and toggle categories on or off from the web dashboard.
Blocklists update automatically on a daily schedule. System security updates are applied through the built-in update mechanism in the web dashboard.
No. DNS filtering adds negligible latency — typically under 1ms. Blocked queries actually resolve faster because the connection is never made. Most users report faster browsing due to eliminated ad and tracker requests.
Yes. You can configure VeloGuardian DNS as your primary DNS and set your existing DNS (e.g., Cloudflare, Google) as the upstream resolver. Queries that pass filtering are forwarded to your chosen upstream provider.
Yes. Because filtering happens at the DNS level, every device on your network is protected automatically — including devices that don't support traditional ad blockers like smart TVs, game consoles, and IoT devices.
No. VeloGuardian DNS and GoGuardian are completely unrelated products from different companies. GoGuardian is a paid, cloud-based content filtering platform designed for K-12 school Chromebook management. VeloGuardian DNS is a free, self-hosted DNS filtering appliance for home users, families, and small businesses that runs on your own hardware with no cloud dependency.
Both are self-hosted DNS filters, but VeloGuardian DNS is distributed as a hardened OVA virtual appliance — import it into VMware, VirtualBox, or Proxmox and it's ready to go. Pi-hole requires manual installation on a Linux system or Raspberry Pi, including OS setup, dependency management, and configuration. VeloGuardian DNS includes a locked-down OS, automatic security updates, and a pre-configured web dashboard out of the box.
Yes. The web dashboard gives you full control over filtering. You can enable or disable entire blocklist categories (ads, trackers, malware, adult content), add custom blocklists by URL, create per-domain allow and deny rules, and view real-time query logs to fine-tune your configuration.
No. VeloGuardian DNS is designed specifically for home users, families, and small businesses. It requires minimal resources (1 vCPU, 1 GB RAM, 8 GB disk) and is free with no enterprise licensing, no per-seat pricing, and no sales process. Just download the OVA and deploy it on any hypervisor.
Yes. VeloGuardian DNS supports category-based blocking, which allows you to block adult content, gambling, social media, or other categories across every device on your network. Because it operates at the DNS level, children cannot bypass it by switching browsers or using private/incognito mode. You can also create custom rules to block or allow specific domains.
Download VeloGuardian DNS and start blocking ads, malware, and trackers in minutes. Free forever, no account required.