Life & fun · alternatives · 2026
24 alternatives to Running the second public ODoH relay
Every privacy-focused DNS service requires an account: NextDNS, Cloudflare for Families, Apple's iCloud Private Relay (paid, iOS-only). The protocol that doesn’t require one - ODoH - had basically one well-known public relay operator (Frank Denis on Fastly Compute, default in dnscrypt-proxy). I built a second one and the client to talk to it.
Running the Second Public ODoH Relay provides an alternative infrastructure option for users seeking privacy-focused DNS without account requirements. ODoH (Oblivious DoH) is a protocol that enables encrypted DNS… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
NextDNS protects you from all kinds of security threats, blocks ads and trackers on websites and in apps and provides a safe and supervised Internet for kids — on all devices and on all networks.
2019 · nextdns.io · its alternatives →
- 2
The Internet’s fastest, privacy-first DNS resolver
2018 · one.one.one.one · its alternatives →
- 3
A tiny command line DNS client with support for UDP, TCP, DoT, DoH, DoQ and ODoH. - natesales/q
2022 · github.com · its alternatives →
- 4
The 1.1.1.1 App▲689Faster, more private internet by Cloudflare, now on mobile
2018 · apps.apple.com · its alternatives →
- 5
- 6
Tired of companies snooping through your DNS traffic? Don't you wish you could get advertisements with your DNS records? Today we're introducing the innovative, privacy-focused, ad-supported DNS resolver - DN$! Traditional DNS resolvers provided by your internet service provider, cloudflare, or google could be tracking your internet activity and selling it to third-party data vendors. We at DN$ want to fix that and cut out these nefarious actors (until we've amassed a critical number of users to exploit). In order to support such a radically new business model, our service needs to serve…
2024 · github.com · its alternatives →
- 7NA
We just shipped a new feature in NextDNS: Bypass Age Verification. More and more sites (especially adult ones) are now forcing users to upload IDs or selfies to continue. We think that’s a terrible idea: handing over government documents to random sites is a huge privacy risk. This new setting workarounds those verification flows via DNS tricks. It’s available today to all users, including free accounts. We’re curious how the HN community feels about this. Is it the right way to protect privacy online, or will it just provoke regulators to push harder? https://nextdns.io
2025 · its alternatives →
- 8
- 9PD
2024 · privacy-dns.pw · its alternatives →
- 10
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go. -
2016 · github.com · its alternatives →
- 11KE
My goal was to create a DNS server as simple as the LDAP server I've been contributing to (glauth) and here it is: https://github.com/fusion/kittendns A few things to know about it: - It is easy to configure using a Toml file - I am using it to bail my coredns/etcd instances when under attack - (yes, it also works as a service location server) - It comes with a simple, plain English, rule engine that doesn't do much at this point - It can be used with LetsEncrypt. I use it to retrieve certificates for my home servers. - RFC: all the nice ones :) Anyway, feedback is…
2022 · its alternatives →
- 12
Most site blockers work by blacklisting distractions. That never worked for me, the internet is too big, and there’s always something new to waste time on. I wanted the opposite: allowlist‑only browsing. Block everything by default, and explicitly allow only what I need. So I built Sinkzone: a local DNS forwarder with two modes: Monitor mode: lets all traffic through, but logs every domain so you can decide what to allow. Focus mode: only allowlisted domains resolve; everything else is blocked (NXDOMAIN). It’s open source, written in Go, and runs locally on macOS, Linux, and Windows. Works a…
2025 · github.com · its alternatives →
- 13
1-click, self-hosted deployment of OpenVPN with DNS ad blocking sinkhole - ezaquarii/vpn-at-home
2018 · github.com · its alternatives →
- 14
Hey HN! Happy to finally launch Stack. We made it because we like to put apps into production quickly, and authentication & user management was taking up way too much time. We have components like and that automatically adapt to whatever theme & design system you're using. Check the blog post to see the example with Radix UI and Joy UI. Also, there's an admin dashboard for monitoring and editing accounts. Stack is 100% AGPL/MIT-licensed, so you can self-host it. Cheers!
2024 · stack-auth.com · its alternatives →
- 15
SSH-based "VPN for poors". Contribute to ivanilves/xiringuito development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 16AR
From the cryptic terminal commands to the innumerable ways to shoot yourself in the foot, I always struggled to use TLS certificates. I love how much easier (and cheaper) Let's Encrypt made it to get certificates, but there are still plenty of things to struggle with. That's why we built Relay: a free, browser-based tool that streamlines the ACME workflow, especially for tricky setups like homelabs. Relay acts as a secure intermediary between your ACME client and public certificate authorities like Let's Encrypt. Some ways Relay provides a better experience: - really fast, streamlined…
2025 · anchor.dev · its alternatives →
- 17
- 18
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go. -
2016 · github.com · its alternatives →
- 19
An experimental high-performance DNS query bruteforce tool built with AF_XDP for extremely fast and accurate bulk DNS lookups. - c3l3si4n/pugdns
2025 · github.com · its alternatives →
- 20
NS6.com▲71Register domains across 800+ extensions with free WHOIS privacy, free DNS and free SSL on every domain. Search, transfer in, and manage everything in one place.
2022 · ns6.com · its alternatives →
- 21OT
After the major outages from AWS and Cloudflare, I began wondering how to make my own services more resilient. Using nameservers from different providers is doable but a bit tricky to manage. OctoDNS helps automate keeping the zones synced so AWS, Cloudflare, etc. are all serving the same information. In an age of centralized infrastructure, we can exploit the capabilities from the origins of the decentralized internet.
Nov 2025 · octodns.readthedocs.io · its alternatives →
- 22
- 23
2022 · github.com · its alternatives →
- 24
This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…
Feb 2026 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →