AdguardTeam / AdGuardHome

Network-wide ads & trackers blocking DNS server
https://adguard.com/adguard-home.html
GNU General Public License v3.0
25.39k stars 1.82k forks source link

AdGuard Service Bypass or Fail Open #7218

Open RegalMonkey opened 2 months ago

RegalMonkey commented 2 months ago

Prerequisites

The problem

When using the AdGuard browsing security and/or parental control features if the external internet connectivity to the submission service fails the domain resolution will also fail. This is problematic though when dealing with internal domain names that should never be filtered by these controls.

Proposed solution

Addition of a field to exclude specified domains from the external service checks which would allow local domains to continue normal function in the event of an internet outage.

Alternatives considered and additional information

Alternately, an option to toggle a fail-open/fail-closed in the event that external service response fails.

RegalMonkey commented 2 months ago

It would of course solve the issue if one where to move the domain controller DNS in front of AdGuard and forward those queries to the AdGuard system, but this then loses visibility into the specific clients making the requests, instead showing only that the call came from the AD controllers.