Pi-hole: DNS filtering on your own network

Pi-hole filters DNS queries on your network. When a device asks for a domain, Pi-hole can answer normally or block the query according to your rules. This provides useful traffic insight and can block many advertising and tracking domains.

What it does not do

Pi-hole is not a VPN, an antivirus engine or a guarantee against tracking. It cannot generally distinguish an advertisement from other content on the same domain. Devices using another DNS service, for example encrypted DNS, may bypass your local setup.

Prepare a stable host

Use a supported Linux machine or container setup with a stable local IP address. Raspberry Pi is an option, not a requirement. Check the current system requirements and network ports. Update the operating system and back up any existing installation.

Install using the current guide

Follow Pi-hole’s installation guide. Read the installation script before running it with administrator rights. Do not follow old instructions that bypass the supported-system check.

1. Install Pi-hole and select an appropriate upstream DNS service.
2. Create a reservation in the router’s DHCP configuration so the host retains its local address.
3. First test with one client using Pi-hole as its DNS server.
4. Check the query log and try ordinary websites and apps.
5. Then configure the DNS server through your router if you want to use it more widely. Save the old settings so you can roll back.

Troubleshoot one change at a time

If something stops working, investigate which domain is being blocked. Add a justified exception rather than installing random large lists. Pay attention to IPv6 and devices that select their own DNS.

Keep it private

Do not expose the DNS server or administration page directly to the internet. To use your home setup while travelling, follow an appropriate VPN solution and its security guidance. The query log may reveal users’ activity; limit access and retention to what you actually need.