Thinkpad 431s if you are on a low budget. It's the best performing cheap option, IMO. Obviously block access to internet nonsense. I just started using ControlD.com and it works like a charm. Or, if you have the time, make the PiHole and your Home Lab & Network Lab a project that you two build together. Make the command line kid friendly, like using bat instead of cat and LSD instead of ls and so on. Colors are... - Source: Hacker News / 9 months ago

I've tried hosted Pi-Hole and AdGuard Home. They are good as long as I'm around to fix stuffs. Then I tested something which can be global (home) and also for individual devices -- Control-D, NextDNS, and Adguard DNS. All of them works pretty well. If I really have to choose, then it would be in the order of NextDNS > Control-D > AdGuard DNS. Affiliated with none, and have decided to subscribe to all three to... - Source: Hacker News / about 1 year ago

I used Pi-Hole, then went to NextDNS, then to AdGuard DNS, tinkered with AdGuard Home, and currently testing Control-D. They are all actually pretty good, similar features, and it has become just a matter of personal choice. In all fairness, when I have some time and can invest in decent hardwares, I might go back to AdGuard Home with one of the paid services as backup for travel, and when for the other family... - Source: Hacker News / about 1 year ago

I've used ControlD [https://controld.com/] for this and liked it. Does anyone know how NextDNS compares to it? ControlD has worked well for me, outside a few UI complaints I have with their site. I do have some concerns with trust as I don't know much about ControlD, and I'd rather use the most trusted service for this. - Source: Hacker News / about 1 year ago

Firefox is my daily in macOS, iOS and Windows. It is great and I love the syncing. The #1 companion on the desktop is uBlock Origin but on iOS I really miss an adblocker. As a workaround I block adds via DNS with Control D (https://controld.com/) but I prefer an extension on the phone. The Firefox Focus app on iOS does not sync with my Firefox account so that's not an option either. Sure, I could use a different... Source: over 1 year ago

Because your are redirected to one.one.one.one via the location header and 301 status code from the ip address. http://1.1.1.1 redirects to https://1.1.1.1 which then redirects to https://one.one.one.one but the TLS cert on https://1.1.1.1 (or https://[2606:4700:4700::1111] on ipv6) is still valid for the ipaddress otherwise your browser would put up a warning during the tls handshake. - Source: Hacker News / 3 months ago

If you go to https://1.1.1.1 it redirects you to https://one.one.one.one, I think that's what the author meant. - Source: Hacker News / 4 months ago

Apt install jool-dkms jool-tools On a box behind the NAT: curl --resolve one.one.one.one:443:64:ff9b::1.1.1.1 https://one.one.one.one If you want DNS64, 1.1.1.1 and 8.8.8.8 offer 2606:4700:4700::64 and 2001:4860:4860::6464 respectively or you can configure unbound pretty easily. - Source: Hacker News / 5 months ago

Cloudflare WARP is a very popular free VPN. It's fast since it operates on Cloudflare’s global network through WireGuard connection. There's no limit to bandwidth usage. But it can't spoof your location, and it will not work very well with torrenting, since it doesn't support port-forwarding. - Source: dev.to / about 1 year ago

I've been playing with Pingora to create a reverse proxy that connects backend HTTP or HTTPs service to a single HTTPs frontend (similar to what is generally done with Nginx) serving distinct SSL certificates (using SNI and the host header) for each backend service. In this example, if you connect to https://127.0.0.1:4430: * with an SNI and Host header of somedomain.com, you will be served an SSL certificate to... - Source: Hacker News / about 1 year ago