Dashboard

ShieldDNS is Active

Your requests are being filtered and secured.

Connection Guide (Updates based on your domain)

Private DNS (Android DoT Hostname)

DoT URL

DNS-over-HTTPS (DoH) URL

DNS-over-QUIC (DoQ) URL

Total Queries (24h)

Blocked Queries (24h)

Blocking Ratio

- %

Avg. Response Time

- ms

Unique Clients (24h)

Cache Hit Ratio

- %

Active QPS

0.0

Blocked Domains

Traffic Overview (Last 24h)

Live Query Log

Time	Domain	Client IP	Type	Status	Actions

Advanced Analytics

Top Blocked Domains

Domain	Hits

Top Clients

Client IP	Country	Queries

Query Types

A / AAAA: Standard website connections (IPv4 / IPv6 addresses).

HTTPS / SVCB: Modern secure connection and service metadata.

MX / NS: Mail server records and domain authority info.

TXT: Text data, often used for email verification (SPF/DKIM).

SRV / PTR / SOA: Service discovery, reverse DNS, and zone authority.

DNSKEY / DS: DNSSEC security records for authenticated DNS.

NAPTR / HINFO: Telephony (VoIP) and host hardware information.

ANY: General requests for all available records of a server.

Request Origin (Countries)

geo: Internal or local network traffic (Private IPs).

ISO Codes: International traffic categorized by country of origin.

-: Unknown or currently resolving origins.

Query Log

Time	Domain	Client IP	Type	Status	Actions

System Diagnostics

SSL Certificate

Loading certificate data...

System Status

API Reachability Online

DNS Port (53) Active

DoT Port (853) Active

Resource Usage

CPU Load (1/5/15m) 0.00, 0.00, 0.00

Detecting...

RAM Usage 0 / 0 MB

Disk Space 0 / 0 GB

Uptime 00:00:00

Upstream Performance

Upstream Server	Status	Response Time
Loading performance data...

Settings

Global DNS Settings ⚙️

Debug Mode

Write detailed diagnostic information to the system logs.

Upstream DNS Servers (Standard)

Comma separated IP addresses (Max 5)

Upstream DoT Servers (DNS over TLS)

Comma separated hostnames (Max 5). Example: unfiltered.joindns4.eu

Admin Domain (for Block Page)

The domain used for the Admin UI (e.g., dns.mydomain.de). Used for professional redirects.

Default IPv4 Block Page IP

Prefer Encrypted Upstreams (DoT)

Always try to use DNS-over-TLS if available.

Security & Abuse Detection 🛡️

Sign Apple Profiles (.mobileconfig)

Use the server's SSL certificate to sign generated profiles for a "Verified" status on iOS.

Abuse Detection Engine (Auto-Blocking)

Automatically block clients abusing the server with floods or DGA bots.

DGA Sensitivity Threshold

Lower is more sensitive (Default: 3.8). Blocks domains with high entropy.

DGA Minimum Length

Ignores subdomains shorter than this (Default: 8).

DoH Query Rate Limit (req/s)

Max requests per client per second on the DoH endpoint (Default: 30).

API Keys

Manage API keys for third-party monitoring and automation. Tokens are shown only once.

Name	Permissions	Created	Last Used	Actions

Smart Networking & Maintenance

Smart Upstream Selection

Dynamic latency sorting for fastest response times.

Data Retention (Days)

Latency Test Interval (Minutes)

Frequency of response time checks. Distributed across the interval.

Diagnostics Refresh Interval (Seconds)

Frequency of hardware resource updates (CPU, RAM, etc.) in Diagnostics view.

Smart Selection Mode

Strategy used for upstream selection when Smart Selection is active.

Enable Serve Stale

Serve expired cache entries while refreshing in background (faster perceived speed).

DNSSEC Validation

Perform full local DNSSEC validation. Disable to offload to upstream (recommended for speed).

Verify Upstream TLS

Ensure upstream servers provide valid, trusted certificates.

System Backup & Restore

Download a full system backup (.zip) or restore your configuration (.json).

Threat Intelligence 🛡️

Automatically block high-risk IP addresses from public threat feeds (blocklist.de).

Malicious IP Blocking

Enforce real-time protection using curated threat lists.

Update Interval (Hours)

How often to refresh the threat feed (Range: 1-168 hours).

Geo-Blocking 🌍

Block entire countries from accessing or resolving through this DNS server.

Select Countries to Block

Client IP Blocking 🚫

Manually block specific client IP addresses or view automatically blocked clients.

Block New Client IP

Currently Blocked Clients

0 Clients Blocked

Autoblock Whitelist 🛡️

Prevent specific IPs from being banned by the automated security system.

IP Address	Blocked At	Country	Reason	Actions

Full System Refresh 🔄

Perform a total refresh of all system components. This will re-download all enabled filter lists, reload all custom rules (IP/Geo), and restart the CoreDNS server to apply changes and flush its cache.

Note: This process usually takes a few seconds. DNS resolution will be briefly interrupted during the restart.

Security 🔐

Multi-Factor Authentication (MFA) 🛡️

Add an extra layer of security to your account using TOTP (Authenticator App) or Passkeys (biometrics, security key, or device PIN).

Status: Checking...

ShieldDNS is Active

Connection Guide (Updates based on your domain)

Traffic Overview (Last 24h)

Live Query Log

Top Blocked Domains

Top Clients

Query Types

Request Origin (Countries)

SSL Certificate

System Status

Resource Usage

Upstream Performance

Custom Blocklist

Custom Allowlist

Local DNS Mappings

Your Active Blocklists

Your Active Allowlists

Suggested Blocklist Presets

Suggested Allowlist Presets

Global DNS Settings ⚙️

Security & Abuse Detection 🛡️

API Keys

Smart Networking & Maintenance

Threat Intelligence 🛡️

Geo-Blocking 🌍

Manual Server Location (Fallback)

Client IP Blocking 🚫

Currently Blocked Clients

Full System Refresh 🔄

Security 🔐

Multi-Factor Authentication (MFA) 🛡️

Set Up Authenticator App

Authenticator Apps (TOTP)

Security Keys & Passkeys

Environment

Project Links

ShieldDNS Setup

Step 1: Admin Password

Step 2: Upstream Configuration

Step 3: Blocklists

ShieldDNS Login

MFA Challenge 🛡️

Add Blocklist

Generate API Key

⚠️ High Risk Operation

Final Confirmation

System Resetting...

Notification

Confirmation

Enter Name

List Details

Client Details

Top 10 Domains (Allowed)

Top Blocked Domains

Recent Activity

Domain Details

Top Clients for this Domain

Recent Queries

Activity Console