Network-Wide Ad & Malware Blocking

A free, self-hosted DNS filtering appliance for home users, families, and small businesses. Like Pi-hole, but as a hardened, pre-configured virtual appliance — import the OVA, point your router, and every device is protected. No account required, no cloud dependency.

YOUR NETWORK Laptop Phone Smart TV IoT No per-device setup DNS QUERIES site.com malware.io ads.tracker DNS Filter 90+ categories RESULTS ✓ Allowed malware.io ads.tracker Every device protected — no software to install
How It Works

DNS Filtering for Your Entire Network

One appliance protects every device — no per-device setup needed.

Network-Level Protection

Traditional ad blockers work per-device and per-browser. VeloGuardian DNS operates at the network level — configure it once as your network's DNS server, and every device is protected automatically. Smart TVs, IoT devices, phones, laptops — everything.

Block Before Connection

When a device on your network makes a DNS request, VeloGuardian checks it against continuously updated blocklists. Malicious domains, ad networks, trackers, and phishing sites are blocked before the connection is ever made. Legitimate traffic passes through untouched.

VeloGuardian DNS dashboard showing query activity, blocked domains, and color-coded statistics

Real-Time Query Activity and Statistics

VeloGuardian DNS categories page showing category groups with domain counts

Category-Based Filtering with 90+ Categories

VeloGuardian DNS profiles page showing per-client filtering profiles with category selection

Per-Client Filtering Profiles

Who It's For

Built for Everyone

From home users to small businesses — DNS filtering for all.

Home Users

Block ads, trackers, and malware on every device — laptops, phones, smart TVs, IoT — without installing anything on each one. Faster browsing, less bandwidth waste.

Parents & Families

Use category-based blocking as a parental control — block adult content, gambling, or social media across the whole network. Kids can't bypass it by switching browsers or using incognito mode.

Small Businesses

Protect your office network from ads, phishing, and malware without enterprise pricing. Deploy on existing virtualization infrastructure and manage via the web dashboard — no IT department required.

Explore VeloGuardian VPN features →
Features

Built for Security, Designed for Simplicity

Everything you need for network-wide DNS protection.

Ad & Tracker Blocking

Block intrusive ads, tracking pixels, and analytics domains across every device. Faster page loads, less bandwidth waste, and no more targeted advertising.

What is web filtering? →

Malware & Phishing Protection

Prevent connections to known malicious domains before they happen. Continuously updated threat intelligence blocklists stop ads, malware callbacks, phishing lures, and command-and-control servers.

How anti-malware protection works →

Hardened Virtual Appliance

Purpose-built OVA with a minimal attack surface. No unnecessary services, locked-down OS, automatic security updates. Treat it as a network appliance, not a general-purpose VM.

Web Dashboard

Monitor queries in real time, manage blocklists, view per-device statistics, and configure allowlists/denylists — all from a clean browser-based interface.

Console CLI

Initial network configuration (IP, gateway, DNS upstream) through a lightweight console interface. SSH access available for advanced administration.

Completely Free, No Account

No subscriptions, no telemetry, no cloud dependency. VeloGuardian DNS runs entirely on your hardware. Your DNS data never leaves your network.

Comparison

How It Compares

VeloGuardian DNS vs the most popular DNS filtering solutions for home and small business use.

Self-hosted
VeloGuardian DNS Yes (OVA appliance)
Pi-hole Yes (manual install)
AdGuard Home Yes (manual install)
NextDNS No (cloud)
Cloudflare 1.1.1.1 No (cloud)
Setup complexity
VeloGuardian DNS Import OVA & boot
Pi-hole Linux CLI install
AdGuard Home Binary + config
NextDNS Sign up & configure
Cloudflare 1.1.1.1 Change DNS settings
Hardened OS included
VeloGuardian DNS Yes
Pi-hole No (BYO OS)
AdGuard Home No (BYO OS)
NextDNS N/A (cloud)
Cloudflare 1.1.1.1 N/A (cloud)
Custom blocklists
VeloGuardian DNS Yes
Pi-hole Yes
AdGuard Home Yes
NextDNS Yes
Cloudflare 1.1.1.1 Limited
Category-based filtering
VeloGuardian DNS Yes
Pi-hole Via blocklists
AdGuard Home Yes
NextDNS Yes
Cloudflare 1.1.1.1 Families only
Parental controls
VeloGuardian DNS Yes
Pi-hole Manual config
AdGuard Home Yes
NextDNS Yes
Cloudflare 1.1.1.1 Basic
Web dashboard
VeloGuardian DNS Yes
Pi-hole Yes
AdGuard Home Yes
NextDNS Yes
Cloudflare 1.1.1.1 No
Data stays on your network
VeloGuardian DNS Yes
Pi-hole Yes
AdGuard Home Yes
NextDNS No
Cloudflare 1.1.1.1 No
Account required
VeloGuardian DNS No
Pi-hole No
AdGuard Home No
NextDNS Yes
Cloudflare 1.1.1.1 No
Price
VeloGuardian DNS Free
Pi-hole Free
AdGuard Home Free
NextDNS Freemium
Cloudflare 1.1.1.1 Free

Read the full comparison article →

Getting Started

Get Protected in 3 Steps

From download to full network protection in minutes.

01

Download & Deploy

Download the OVA file and import it into your hypervisor — VMware, VirtualBox, or Proxmox. Boot the VM and follow the console wizard to set a static IP on your network.

02

Configure Your Network

Point your router's DNS setting to the VeloGuardian DNS appliance IP. Every device on your network will automatically route DNS queries through the filter. No per-device configuration needed.

03

Monitor & Customize

Open the web dashboard from any browser on your network. View blocked queries in real time, add custom allow/deny rules, enable or disable blocklist categories, and check per-device activity.

Requirements

System Requirements

Lightweight enough to run on any modern hypervisor.

Hypervisor

  • VMware Workstation / ESXi 6.5+
  • VirtualBox 6.0+
  • Proxmox VE 7.0+

Minimum Resources

  • 1 vCPU
  • 1 GB RAM
  • 8 GB disk
  • 1 network adapter (bridged mode)

Learn More About DNS Filtering

Deep dives into DNS filtering technology and how it protects your network.

What is DNS Filtering?

How DNS-level blocking stops threats before they reach your network. A foundational layer of protection for everyone.

Read more →

VeloGuardian DNS vs Pi-hole & NextDNS

A detailed comparison of VeloGuardian DNS, Pi-hole, AdGuard Home, NextDNS, and Cloudflare — setup, features, privacy, and cost.

Read more →
FAQ

Common Questions

Answers to the most frequent questions about VeloGuardian DNS.

Yes, completely. There are no paid tiers, no feature gates, and no account required. The appliance runs entirely on your hardware with no cloud dependency.

VeloGuardian DNS ships with curated blocklists for ads, trackers, malware, and phishing domains. You can add custom blocklists, create your own allow/deny rules, and toggle categories on or off from the web dashboard.

Blocklists update automatically on a daily schedule. System security updates are applied through the built-in update mechanism in the web dashboard.

No. DNS filtering adds negligible latency — typically under 1ms. Blocked queries actually resolve faster because the connection is never made. Most users report faster browsing due to eliminated ad and tracker requests.

Yes. You can configure VeloGuardian DNS as your primary DNS and set your existing DNS (e.g., Cloudflare, Google) as the upstream resolver. Queries that pass filtering are forwarded to your chosen upstream provider.

Yes. Because filtering happens at the DNS level, every device on your network is protected automatically — including devices that don't support traditional ad blockers like smart TVs, game consoles, and IoT devices.

No. VeloGuardian DNS and GoGuardian are completely unrelated products from different companies. GoGuardian is a paid, cloud-based content filtering platform designed for K-12 school Chromebook management. VeloGuardian DNS is a free, self-hosted DNS filtering appliance for home users, families, and small businesses that runs on your own hardware with no cloud dependency.

Both are self-hosted DNS filters, but VeloGuardian DNS is distributed as a hardened OVA virtual appliance — import it into VMware, VirtualBox, or Proxmox and it's ready to go. Pi-hole requires manual installation on a Linux system or Raspberry Pi, including OS setup, dependency management, and configuration. VeloGuardian DNS includes a locked-down OS, automatic security updates, and a pre-configured web dashboard out of the box.

Yes. The web dashboard gives you full control over filtering. You can enable or disable entire blocklist categories (ads, trackers, malware, adult content), add custom blocklists by URL, create per-domain allow and deny rules, and view real-time query logs to fine-tune your configuration.

No. VeloGuardian DNS is designed specifically for home users, families, and small businesses. It requires minimal resources (1 vCPU, 1 GB RAM, 8 GB disk) and is free with no enterprise licensing, no per-seat pricing, and no sales process. Just download the OVA and deploy it on any hypervisor.

Yes. VeloGuardian DNS supports category-based blocking, which allows you to block adult content, gambling, social media, or other categories across every device on your network. Because it operates at the DNS level, children cannot bypass it by switching browsers or using private/incognito mode. You can also create custom rules to block or allow specific domains.

Protect Your Network Today

Download VeloGuardian DNS and start blocking ads, malware, and trackers in minutes. Free forever, no account required.

Download OVA View Features