Private DNS, hosted in Europe
Resolve.
On your terms.
Custom block and allow rules, encrypted queries, per-device analytics, and detailed logs, in one lightweight DNS resolver.
What you get
One resolver. Turn on what each profile needs.
Block ads & trackers
Curated blocklists stop known ad, tracker, and telemetry domains before they ever resolve.
Threat intelligence
Continuously updated feeds block malware, phishing, and command-and-control domains as they surface.
Parental controls
Filter adult and gambling sites, force SafeSearch and YouTube Restricted Mode, and block specific apps or games per profile.
Custom allow & deny lists
Block a domain and all its subdomains with a single rule. Your allow list always wins, so trusted domains resolve even when a blocklist would catch them.
Encrypted DNS
DoH, DoT, and DoQ work out of the box, so your queries stay unreadable to your network and ISP in transit. Oblivious DoH is also available, hiding your IP from us via a relay.
Device identification
Tag each device in the DNS hostname or URL path, then filter every log and chart down to a single device.
Query analytics
Track total and blocked queries, top resolved and blocked domains, busiest source IPs, and encrypted traffic share, by device and time window.
Multiple profiles
Keep separate profiles for home, work, and travel, each with its own rules, blocklists, and linked IP, all under one account.
Stacked profiles
Set shared rules once in a base profile, then layer per-device overrides on top without repeating yourself.
RESTful API
Manage profiles, rules, logs, and analytics from your own scripts over a documented REST API with scoped tokens. View the API docs.
Your DNS data stays in Europe
dundns runs entirely on infrastructure in the European Union. Queries are handled under EU jurisdiction and European privacy law, out of reach of foreign data requests, and are never sold.
Setup
No software to install. Point your device at the resolver.
Create a profile
Sign up and create your first DNS profile. Each profile gets a unique 6-character ID that identifies it to the resolver.
Configure your rules
Enable blocklists, add custom allow or deny rules, and choose which encrypted DNS protocol your device should use.
Point your device
Set your DNS to your-id.dns.dundns.eu using DoT, DoQ, or DoH. Queries are filtered from then on.
Private DNS, configured your way
Encrypted, EU-hosted, free to start.
Create your account 300,000 filtered queries a month, free · no card required