Side by side

CIRA Canadian Shield vs webfilter-ng

Both stand on internet filtering software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.

CIRA Canadian Shield

Free plan AndroidiPhoneLinux+3

Visit CIRA Canadian Shield

webfilter-ng offers several domain-filtering methods while avoiding HTTPS decryption and client proxy configuration. Linux networking requirements and limits around IPv6 and QUIC should be considered before deployment.

Visit webfilter-ng

The facts

	CIRA Canadian Shield	webfilter-ng
Free plan	Yes	Yes
Open source	Not published	Not published
Runs on	Android, iPhone, Linux, Mac, Web, Windows	Linux, Self-hosted
Lowest paid plan	Not published	Not published
Plans published	None	None
Maker	Not published	Not published
Website	cira.ca	github.com
On internet filtering software	#23 of 65	#27 of 65

CIRA Canadian Shield: what it does well

webfilter-ng: what it does well

Filters HTTPS through SNI without decryption
Works without client proxy settings
Supports whitelists and blacklists
Provides safe-search controls through BIND9 RPZ
Free and licensed under LGPL-3.0

What to know first

IPv6 is not supported
Standard IETF QUIC is not filtered
Installation targets Debian or Ubuntu
Categorify API option is gateway-only

Alternatives to CIRA Canadian Shield Alternatives to webfilter-ng The whole list