AdGuard Home installation and use refers to the north
Why don't people like ads and trackers?
A good product, need to be widely reported, in order to survive, a good film, need to be widely reported, only a good box office. So there's advertising. From the initial word-of-mouth development to today's "thousands of people, guess what you like", advertising has evolved from a one-way form of communication to a dedicated delivery based on personal preferences, the user's right to accept from active to passive.
But when advertising is always flooding our lives, watching the news there are patch ads, brushing friends circle has Oba's interactive ads, watching TV dramas have 90 seconds of headline ads, small sites also have the feelings of online licensing, in "15 million value" ((Netflix episode "Black Mirror"In a house surrounded by screens, the male owner lives in a screen around the clock to play ads, want to block ads can only choose to pay, even after you block ads will remind users "for the continued development of the site, please turn off the ad blocking plug-in", in order to normal browsing the web, users can only compromise.
Not all ads are intrusive, user-impact ads, and there's no shortage of well-produced, well-experienced ads, presented by The Coalition for Better Ads Better Ads Standards Side-bar ads, small patch ads, top-bar/bottom ads have less impact on the user's browsing experience, while floating-window ads, large/full-screen patch ads, and auto-playing video ads can affect the user's mood. And users can only choose to block all, advertisers' earnings will be greatly affected. In addition to ads, information-gathering and analytics tools, such as Google Analytics, are blocked to help site owners improve website operations and provide better content without untringly violating users' privacy.
How does the ad blocking /anti-tracking plug-in work?
Url matches masking
Advertising alliance advertising resources are usually placed separately from the site, to Baidu Alliance, for example, Baidu Alliance's advertising domain name https://cpro.baidustatic.com/ , so we can mask separately from https://cpro.baidustatic.com/ without affecting the proper loading of the site's content. When the site domain name is the same as the ad resource domain name, url-based ads are blocked as if they were "South Orange North."
Web doM filtering
DOM（Document Object Model, file object model), in the W3C DOM standard (W3C DOM is a platform- and language-neutral interface that allows programs and scripts to dynamically access and update the content, structure, and style of documentsAny label or element in a Web page is a node in a tree structure. Web DOM filtering ads compensate for blocking ads based on matching URLs, targeting the ad DOM element through CSS3 Selector and using them display=none!important and other syntax to hide ads. The DOM filtering process occurs when a page is loaded, with the disadvantage that new ad content loaded through Ajax and Pjax cannot be blocked.
Set up filters at the physical/virtual gateway to block traffic with advertising characteristics, such as websites that use Https encryption, and take MITM (Man-in-the-middle attack，Man-in-the-middle attackDecrypting https encrypted traffic and blocking ad traffic in it is a feature that is common in some third-party router firmware, such as KoolProxy and ad blocking guru Plus.
Before decrypting, the client needs to install and trust the certificate generated by the ad blocking software, and if the website has Https encryption and needs to verify the certificate, traffic filtering ad blocking will affect the normal browsing of the page. In addition, if the device performance is low, this interception method will slow down the network speed to some extent.
We used to use ad blocking and privacy protection plug-ins like AdBlock Plus, AdGuard, Ghostery, and uBlock Origin on our computer browsers to remove disturbing ads from our web pages. For Android and iOS, system permissions are limited (Such as root permissions, system certificates, and user certificates), filter mode, want to be on the phone「It takes a while to find a piece of clean soil.
After the above method only for a single device to take effect, with the increase in the number of devices, one by one to set up very troublesome, in addition to increasing the cost of software subscriptions, in the face of smart TVs, smart speakers, traditional ad blocking software is difficult to cope with. And if you're using soft routing, NAS, or even Raspberry Pi in your home, try installing DNS ad blocking software on it for gateway-level ad blocking.
The DNS ad filter you're introducing today is AdGuard Home, developed by the AdGuard team.
AdGuard Home is an all-web ad blocking and anti-tracking software. Once you've installed it, it protects all your home devices, and you no longer need to install any client software. With the rise of the Internet of Things and connected devices, it's becoming increasingly important to take control of your own entire network environment.
—— AdGuard Home
AdGuard Home is a private DNS service side of AdGuard Open Source that enables ad blocking and privacy anti-tracking of global domain networks simply by deploying it at the gateway. During DNS resolution, URLs within the matching rule library are intercepted, and in the client, web doMs can also be blocked through custom filtering rules.
How do I install AdGuard Home?
AdGuard Home based on Golang,Official support Runs within Linux 32-bit / 64-bit / ARM (v6 / v7)/MIPS, FreeBSD, Windows, macOS, Docker, and maintained by third-party developers OpenWrt package 、Home Assistant expansionAnd. Arch Linux 。
Due to space limitations, the following will show you how to install and configure AdGuard Home on NAS (System: Debian 10) and Windows PC (System: Windows 10), and check out the introductions or tutorials for netizens in AdGuard Home - Wiki for other devices. DNS servers in a local area network are recommended to run on long-term power-on devices such as soft-routed, NAS, or Raspberry Pi to avoid DNS not being resolved properly due to device shutdowns.
I do not recommend running tools such as AdGuard Home and Pi-Hole on a regular router, which has a significant impact on the operational efficiency of AdGuard Home. According to my tests, Pi-Hole empty loads use 15MB of memory (excluding cache), AdGuard Home empty loads take up 20MB of memory (excluding cache), AdGuard Home takes up 700MB of memory (including cache) with 13 units, and filter rules 74,000 plus.
AdGuard Home supports installation and operation in binary, Docker containers, and can be installed in the right way according to your personal preferences. Docker installations are recommended if the system running the device involves the operation of important businesses, such as NAS file storage, Web servers, and so on, and is not susceptible to business applications.
•The following tutorials require a certain foundation for computer operation, router usage, and server usage•The information you need to use below is shown below, and the settings vary from user to user •NAS LAN IP: 10.2.168.100 •AdGuard Home Back office: http://10.2.168.100:3000 •Private AdGuard Home DNS address: 10.2.168.100:53
Download and install AdGuard Home
To. AdGuard Home website Download the installation package.
Download the binary
Download using the browser/download tool: https://static.adguard.com/adguardhome/edge/AdGuardHome_windows_amd64.zip
The decompression package is obtained
AdGuardHome.exe Move to
C:\Program Files\AdGuard_Home folder
Open the command prompt as an administrator and execute the following command
cd "C:\Program Files\AdGuard_Home"
.\AdGuardHome.exe --service install
AdGuard Home is successfully installed and will automatically start on boot. This means that AdGuard Home was successfully installed on the current system. The address and port that manages the background are displayed on the command line, which is the default
Linux users are required to log into the SSH using the root user and execute commands for the corresponding system version.
Download, unzim, and move binary files
wget https://static.adguard.com/adguardhome/edge/AdGuardHome_linux_amd64.tar.gz -O AdGuardHome.tar.gz
wget https://static.adguard.com/adguardhome/edge/AdGuardHome_linux_386.tar.gz -O AdGuardHome.tar.gz
wget https://static.adguard.com/adguardhome/edge/AdGuardHome_linux_armv7.tar.gz -O AdGuardHome.tar.gz
wget https://static.adguard.com/adguardhome/edge/AdGuardHome_linux_armv6.tar.gz -O AdGuardHome.tar.gz
For ease of management, we moved the binary to
tar xvf AdGuardHome.tar.gz
mv AdGuardHome/AdGuardHome /usr/local/AdGuard_Home
Install AdGuard Home into the system
./AdGuardHome --service install
AdGuard Home is successfully installed and will automatically start on boot. This means that AdGuard Home was successfully installed on the current system. The address and port that manages the background are displayed on the terminal, which is the default
In addition to installing directly into the system, we can also install AdGuard Home with Docker. For a tutorial on installing Docker and adding Docker mirror feeds, search for yourself.
#拉取 image of AdGuard Home Docker
docker pull adguard/adguardhome
#设置 where AdGuard Home's profile is stored
Create a container
#创建 the AdGuard Home container
docker run \
--name AdGuard_Home \
-v /etc/AdGuard_Home/:/opt/adguardhome/work \
-v /etc/AdGuard_Home/:/opt/adguardhome/conf \
-p 53:53/tcp -p 53:53/udp -p 67:67/udp -p 70:68/tcp -p 70:68/udp -p 3000:80/tcp -p 446:443/tcp -p 853:853/tcp -p 3000:3000/tcp \
Be sure to check for port conflicts before creating containers, because my NAS uses OpenMediaVault, 53 (local DNS server in Debian / Ubuntu system), 68 (DHCP client), 80 (OpenMediaVault web background), 443 (Https) ports will conflict, so the corresponding ports can be adjusted to 70, 446, 3000, 53 port conflicts can be resolved by shutting down the local DNS server. If a port is occupied, it can be used
netstat-tunlp Grep port number The query occupies the process.
After the container is successfully deployed, pass
http://IP:3000 A successful opening of the installation interface indicates a successful deployment.
Initialize the settings
Go to the installation wizard
Open the background of AdGuard Home in your browser, go to the installation wizard, and click "Start Configuration." The default background address is:
Set up the network interface
Change the background access port to 3000 to avoid conflicts with the 80 ports in the NAS background, and keep the DNS port at 53.
Set up an administrator account
Complete the initialization setup
Once the installation is complete, we need to set up further and optimize it as needed.
•Filter update interval: The default update interval for DNS filter lists, typically 3 days to 7 days•Use AdGuard's Browse Safe web service: Similar to Chrome web security checks, AdGuard proactively blocks and pops up prompts when a user visits a potentially threatening website•Use the AdGuard "parental control" service: If you have an adult child in your home, it is recommended to turn it on and avoid visiting bad websites•Forced Safe Search: Hide inappropriate content such as Bing, Google, Yandex, NSFW on YouTube•Query record retention time: The AdGuard Home service uses sqlite file databases to store logs, and long retention can slow down while taking up a lot of storage space, with home users typically keeping it for 7 to 30 days•Statistics retention time: Data display for dashboards, typically for 7 to 30 days
•Upstream DNS Servers: The upstream DNS servers of AdGuard Home can be found in the recommended list below, generally with 1 to 2. In addition to being an ad filter gateway, AdGuard Home can also avoid DNS hijacking by carriers if pure DNS is set•BootStrap DNS server address: As a pre-DNS resolver for DoH/DoT DNS, you can refer to the recommended list below•Query mode, speed limit, EDNS, DNSSEC, blocking mode, DNS cache settings, access settings can be adjusted as needed, generally keep the default settings
DNS server recommendations
The speed at which you connect to DNS servers varies from region to region, and you can find the DNS server with the lowest local connection latency by pinging the speed measurement. More DNS servers are available AdGuard documentationfound in .
Due to layout restrictions, please go to the original text to view the form
DNS blocking list
In order to better play the AdGuard Home de-advertising function, relying on the default filtering rules is not enough, but it should not be too much, too many filtering rules will affect the speed of resolution, you can add filtering rules as needed.
Due to layout restrictions, please go to the original text to view the form
Replace device DNS
Once AdGuard Home is set up, you can deploy AdGuard Home's DNS address to a local area network device.
Change the router DNS address
The methods for modifying different brands of routers vary, referred to the instructions or online tutorials (Router Model s change DNS), as in the case of the Redmi AC2100 router below.
Open and log on to the router's background management page.
Find THE DNS settings in your LAN settings, change your preferred DNS server to the DNS address of AdGuard Home, and set up as another DNS service provider to avoid local area network inability to access the Internet due to downtime of the AdGuard Home server. When the changes are complete, click Save. After the router changes DNS, DNS resolution for all devices within the LAN is done through AdGuard Home DNS, enabling filtering advertising and anti-privacy tracking.
Change your phone's DNS address
•Go to Settings - Network and Internet - Wi-Fi and click the Settings button on the side of the currently connected network•Click the "Edit" button on the Wi-Fi details page•Find "IP Settings"•Enter the device's IP, gateway, and AdGuard Home server addresses, respectively
•Go to Settings - Wi-Fi and click on the name of the currently connected network•Find "Configure DNS" on the Wi-Fi Details page•Switch to manual settings and enter the AdGuard Home server address
Change your computer's DNS address
•Open Network Preferences, select the currently connected network, and click the Advanced button at the bottom right•Switch to the DNS tab and fill in the AdGuard Home server address
•Turn on Windows Settings - Network and Internet and click Change Adapter Options•Select the wired/wireless card and click on the toolbar "Change the settings for this connection"•Find "Internet Protocol Version 4" and click the "Property" button•Fill in the DNS server and click the "Edit" button
After using AdGuard Home to process DNS requests in a local area network for 12 hours, 6% of DNS requests are blocked. On the client side, floating-window ads and page-bounces can be blocked while browsing the web, and some privacy tracking services are blocked by AdGuard.
Of course, AdGuard Home isn't 14-escity either, as the official document says, with content blocking tools such as Adblock Plus, AdGuard, and uBlock Origin in the face of the same ad resource domain name, Twitch ads, YouTube video ads, and sponsored tweets on social platforms abroad.
Running AdGuard Home on a Linux device typically results in 53 (local DNS servers), 68 (DHCP clients), 80 (Https), and 443 (Https) port conflicts that can be resolved
netstat-tunlp Grep port number The query occupies the process. There are two solutions: use different ports and deactivation of conflicting processes.
If you are running AdGuard Home as Docker, it appears
listen udp 0.0.0.0:53: bind: address already in use tips that need to be handled manually.
systemctl stop systemd-resolved
#创建文件夹 (if not present)
#使用 create a profile with Nano
Paste the following in the editor:
After saving, execute the following command.
sudo mv /etc/resolv.conf /etc/resolv.conf.backup
#将 /etc/resolv.conf 链接至 /run/systemd/resolve/resolv.conf
ln -s /run/systemd/resolve/resolv.conf /etc/resolv.conf
systemctl restart systemd-resolved
Use when you're done
netstat -tunlp | grep 53 The command checks if there are still processes occupying the 53 ports, and if there is no conflict, restart the AdGuard Home container.
How long is the average processing time?
There are several factors that can take AdGuard Home too long to process:
•Local-to-upstream DNS speed: If the local carrier's DNS does not have DNS hijacking and poisoning issues, it is recommended to use the carrier DNS plus public DNS scheme, DNS speed can be compared by ping value. And in AdGuard Home, you choose to handle DNS requests in a "parallel request" manner Browse security, home control, and mandatory secure search services: all three features that do not go through DNS caches when DNS requests are made, directly to upstream DNS servers, slowing down AdGuard Home processing•IPv6: If you are using broadband and the campus network does not support IPv6, you can disable resolution IPv6 to improve response speed•Filtering rules: Too many filtering rules can affect the speed of response, preferring to choose the rule that best suits you, generally keep 3 to 4 ad filtering rules.•Statistical cycle: After completing the above optimization, it is found that the average processing time has not changed much, the use experience is not slow, it is possible that the statistical cycle is too long, the results before the optimization will be counted, resulting in the results before and after the optimization is not much different. Reduce the dashboard's statistical cycle to 24 hours and take a look.
The usage experience after completing the above steps is worse than not using AdGuard Home, and the problem is a bit serious. This is when you need to look up AdGuard Home's logs to find the cause of the problem.
Some pages were mistakenly killed by AdGuard Home
If some pages are mistakenly killed by AdGuard Home, you can look in AdGuard Home's logs for intercepts. If there is a conflict with the rule, you need to add the mansoeed URL to the whitelist through a custom filter rule, or select another filter rule. Common conflicts include Google Analytics, ad networks, and more.
Custom filtering rules
AdGuard Home's filtering rules are compatible with Adblock syntax, Hosts syntax, and Domain-only syntax. Specific usage can be used by reference to the AdGuard Grammar Rules - How to Create Your Own Ad Filters ()https://www.leeyiding.com/archives/50/）。
Can I use AdGuard Home DNS with the Surge/Clash gateway?
OK. Surge and Clash are available separately
dns-nameserver Field for the user to modify the DNS resolution server, just fill in the profile with the DNS server address of AdGuard Home.
The last words
If you have a need to get rid of ads on multiple devices, and you happen to have a raspberry pi, soft route, NAS and even an old computer that glows, AdGuard Home might be a good choice to bring you a refreshing online world. Similar tools include Pi-Hole, which, when upgraded to version 5.0, is not much different from AdGuard Home except for a lack of multilingual support, fewer built-in filter choices, and less compatibility than AdGuard Home.
•AdGuard Home Wiki•AdGuard: How ad blocking works•How to run AdGuard Home in Docker with 'resolved' daemon
•Want a "clean" web browsing experience? You need this platform-wide advertising guide•AdGuard Grammar Rules - How to create your own ad filters•W3C DOM•The Coalition for Better Ads - Better Ads Standards
The reference link
 Better Ads Standards: https://www.betterads.org/standards/
 Official support: https://adguard.com/zh_cn/adguard-home/overview.html
 OpenWrt Package: https://github.com/rufengsuixing/luci-app-adguardhome
 Home Assistant Expansion: https://github.com/hassio-addons/addon-adguard-home
 Arch Linux: https://aur.archlinux.org/packages/adguardhome/
 AdGuard Home Website: https://adguard.com/zh_cn/adguard-home/overview.html
 AdGuard documentation: https://kb.adguard.com/zh/general/dns-providers
 AdGuard Home Wiki: https://github.com/AdguardTeam/AdGuardHome/wiki
 How to run AdGuard Home in Docker with 'resolved' daemon: https://hub.docker.com/r/adguard/adguardhome
 Want a "clean" web browsing experience? You need this platform-wide advertising guide: https://sspai.com/post/56617
 AdGuard Grammar Rules - How to create your own ad filters: https://www.leeyiding.com/archives/50/
 W3C DOM: https://www.w3.org/TR/dom41/#introduction-to-the-dom
 The Coalition for Better Ads - Better Ads Standards: https://www.betterads.org/standards/
Thank you for your support
Send to the author
Press and hold the QR code to transfer money to me
Thank you for your support
As a result of Apple's new rules, WeChat's iOS version of the appreciation feature has been turned off to support public numbers via QR code transfers.
Go to "Discovery" - "Take a look" browse "Friends are watching"
sent to have a look