1 — Configure
2 — Install
3 — Confirm
Agent configuration
Run this on your server
Waiting for agent to connect…
Listening for first heartbeat from
Stale serves
—
background refreshed
Resolver latency
—
upstream health
Actions
Edit policy for this agent
Changes apply within 60 seconds — no agent restart needed.
Pause blocking
Revoke and uninstall
Agent will self-uninstall within 60 seconds. Cannot be undone.
Quick apply to an agent
Select an agent and configure its policy. Changes apply within 60 seconds.
Preset blocklist feeds
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts — Ads, trackers, malware (203k domains)
https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn/hosts — + Fake news, gambling, adult
https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0 — Peter Lowe's ad servers
https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-hosts.txt — URLhaus malware domains
No resolver tokens yet
Create a token to get your personal DoH URL
Your DNS-over-HTTPS URL
Use this URL in your device, browser, or router settings.
—
Copied to clipboard
Setup instructions
- Open Settings → Network & Internet → Wi-Fi (or Ethernet)
- Click your active connection → Edit DNS server assignment
- Switch to Manual, enable IPv4
- Under Preferred DNS, set DNS over HTTPS to On
- Paste your DoH URL in the field below and click Save
—
- Open System Settings → Network
- Click your active connection → Details… → DNS
- Click + under DNS Settings and choose Encrypted DNS
- Select Custom and paste your DoH URL
- Click OK → Apply
—
- Go to Settings → General → VPN & Device Management
- Tap DNS (if available) or use a configuration profile
- Alternatively: Settings → Wi-Fi → tap your network → Configure DNS → Manual
- For system-wide DoH, install the Tareeq profile below
Generate iOS profile
A .mobileconfig profile applies DoH system-wide on iOS/iPadOS.
- Go to Settings → Network & Internet → Private DNS
- Select Private DNS provider hostname
- Android uses DoT, not DoH — enter the hostname only (no
https://)
Android Private DNS uses DoT (port 853), not DoH. Use the DoH URL in a DoH-capable app like Intra or AdGuard instead for full support.
—
Configure your router to use DoH and all devices on your network are protected with no per-device setup.
OpenWrt / pfSense / OPNsense
Network → DNS → DNS over HTTPS → paste URL
Asus Merlin / DD-WRT
WAN → DNS → DoH Server → paste URL
Unifi / Firewalla
Settings → Internet → DNS → Custom DoH
—
- Open Firefox → Settings → Privacy & Security
- Scroll to DNS over HTTPS
- Select Max Protection or Increased Protection
- Choose Custom and paste your URL
—
Note: Firefox may show "DNS Query endpoint requires Server mode" — this is expected and harmless.
- Open Chrome → Settings → Privacy and security → Security
- Scroll to Use secure DNS
- Switch to With a custom provider
- Paste your DoH URL and click outside to save
—
Query Log
Select a token to view queries
| Domain |
Type |
Verdict |
Latency |
Time |
| Select a token to view query log |
Account
Email—
Planfree
AI Assistant
The built-in free tier routes through your Tareeq API using Groq (Llama 3.1). Bring your own API key for a different provider or model.