search

AdguardTeam / AdGuardDNS

Public DNS resolver that protects you from ad trackers
https://adguard-dns.io/
GNU Affero General Public License v3.0
748 stars 61 forks source link

Speed improvement vs Pi-hole #9

Open siliconhippy opened 5 years ago

siliconhippy commented 5 years ago

Hi !

( Tried posting on your website news item from Dec'18 but Disqus is jammed. Don't know how to post a comment on the hackernews thread-no button !)

Just read the informative hackernews thread:

https://news.ycombinator.com/item?id=18788410

  1. Per Troy Hunt article, how much speed/throughout improvement can we expect from Adguard DNS compared with Pi-hole?

  2. Is it true that Youtube/ Netflix/other websites could slow down with Adguard DNS compared with Pi-hole? What is the comparison?

  3. CloudFlare states that Adguard uses it as CDN for 4x speed improvement, with a quote from Adguard founder:

https://www.cloudflare.com/case-studies/adguard/

So this all confuses me given many online references to "slow" Adguard service.

Can Adguard clarify all this?

Btw those who tell me Adguard is "Russian" implying not trustworthy, ought to remember Ed Snowden. If you can trust friendly Google, you can trust anyone !

ameshkov commented 5 years ago

Well, first of all, AdGuard DNS is not the same thing as Pi Hole. The main difference is that with Pi Hole you are the one who controls everything -- for instance, what exactly should be blocked, what DNS upstream to use, and many more. There is another product like Pi Hole that provides the same (or even more, I should find time to write a comparison) capabilities. It is AdGuard Home.

AdGuard DNS, on the other hand, is much easier to configure and use.

Now to the questions.

Per Troy Hunt article, how much speed/throughout improvement can we expect from Adguard DNS compared with Pi-hole?

It depends on what DNS you configured in Pi-Hole. Generally, Pi-Hole (or AdGuard Home) should be a little bit faster as it works in your local network so, for that 20 % of requests which are blocked, there will be no request to the remote DNS server. However, I doubt you'll feel the difference.

The second point is that with AdGuard DNS we're trying to not break websites when it's possible so it may block less trackers than the default Pi-Hole or AdGuard Home configuration. The thing is that you can change PiHole/AGHome settings whenever you encounter a problematic websites, but we can't do it on AdGuard DNS, the settings are the same for all users.

Is it true that Youtube/ Netflix/other websites could slow down with Adguard DNS compared with Pi-hole? What is the comparison?

It could indeed if you are routed to some distant AdGuard DNS server. This can happen due to some CDNs using geolocation based load-balancing based on DNS resolution.

More on GeoDNS: https://constellix.com/dns/geo-dns-services/geo-dns-explained/

You can see which one of AdGuard servers is used in your case on the servers map (scroll the page down): https://adguard.com/en/adguard-dns/overview.html

CloudFlare states that Adguard uses it as CDN for 4x speed improvement, with a quote from Adguard founder:

We use CloudFlare for our website and serving filters updates, but it has nothing to do with the DNS.

siliconhippy commented 5 years ago

Thanks for the clarification !

  1. How can the user/Adguard Home/ AdguardDNS prevent DNS hijacking by ISP?

Is it best to simply change udp/53 to some other port in router? Any other method?

  1. Will using Wireguard VPN be effective to secure the DNS link if the user wants to set up Adguard Home in a VPS and access via DNS settings on multiple devices (pretty much like Pi-hole has a VPN protected VPS setup explained on their website)?

Looks to me then that if the user wants much better throughput as the Troy Hunt article claims, Adguard Home is the way to go. Of course settings will be key.

  1. I found this other interesting article about https ads timeouts slowdown:

https://www.erol.name/speed-page-loading-time-pi-hole/

Is this effective for a speed up, and does the local address need be put up? Or can the user make this address fixed?

Any other issues for slowdown that the user can mitigate?

  1. I noticed that there is a RPi 32bit package available for Adguard Home.

Can this package be used on the usual TV boxes running Amlogic S905* 64 bit aarch64/arm ?

I will be particularly interested in setting up Adguard Home on a LibreElec.tv or discourse.coreelec.org minimal (JeOS) distro for Kodi. They are very popular applications as you know.

And Adguard has a good brand so I should expect more features 😃

Pi-hole does have Docker but it is foolish to use on a JeOS with a 120-200MB Debian base ( Pi-hole had earlier tried a 5MB Alpine base Docker but it had conflicts given the newer Alpine musl libc.)