Side by side
Blocky vs DNS Daddy
Both stand on internet filtering software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Choose Blocky if you want a free DNS proxy for local-network ad blocking with client-group rules and configurable DNS settings. Its metrics, logs, and REST API may suit administrators who also need monitoring and controls. Look elsewhere if advanced activity reports are central to your requirements.
Visit Blocky
DNS Daddy combines threat-feed blocking with detailed DNS visibility in a self-hosted package for smaller environments. Its single-server scale, upstream DNSSEC handling and lack of independent security review are important considerations.
Visit DNS DaddyThe facts
| Blocky | DNS Daddy | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | API, Linux, Mac, Self-hosted, Windows | API, iPhone, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | Free or on request | Free or on request |
| Plans published | 1 | 1 |
| Maker | Not published | Not published |
| Website | 0xerr0r.github.io | dnsdaddy.dev |
| On internet filtering software | #5 of 65 | #9 of 65 |
Blocky: what it does well
- Free and open source, with no telemetry or data collection.
- Per-client group rules include upstream resolver settings.
- Supports DNS over UDP, TCP, HTTPS, TLS, QUIC, and HTTPS/3.
- Exports metrics to Prometheus and provides Grafana dashboards.
- Query logs can be stored in several database formats.
What to know first
- Activity reports are listed as advanced.
- There is no free trial; the plan is free.
DNS Daddy: what it does well
- Free plan with no account or subscription.
- Blocks malware, phishing, C2 and cryptomining by default.
- Plain-English query records identify devices and block reasons.
- CIDR-based policies can differ across sites and VLANs.
- Includes dashboard, REST API, metrics and SIEM-friendly exports.
What to know first
- Experimental detectors alert but do not block.
- Standard configuration does not locally validate DNSSEC.
- No clustering or anycast; one instance is one server.
- No independent professional security review or audit.
Alternatives to Blocky Alternatives to DNS Daddy The whole list