Alternatives to Stubby

Local DNS stub resolver that encrypts queries with DNS-over-TLS. The listings below can replace it for an important use case. Each note says what changes if you switch.

Replacements

Listings that take over the same core job as Stubby.

  • dnscrypt-proxy

    Encrypts your DNS lookups so your internet provider cannot read or tamper with them, and blocks domains while it is there.

    FreeOpen sourceWindowsmacOSLinuxCommand line

    dnscrypt-proxy adds DNSCrypt, Anonymized DNS, Oblivious DoH, Tor routing and domain filtering, configured with a TOML file instead of YAML.

  • Blocky

    Lightweight DNS proxy with blocklists, written for container deployments.

    FreeOpen sourceWindowsmacOSLinuxSelf-hostedCommand line

    Blocky forwards to encrypted upstream resolvers and adds blocklists with per-client rules, aimed at container deployments serving several devices, and is configured in YAML.

  • dnsproxy

    A simple DNS proxy server supporting DNS-over-TLS, DNS-over-HTTPS, DNSCrypt and DNS-over-QUIC.

    FreeOpen sourceSelf-hostedCommand line

    dnsproxy is maintained by the AdGuard team and supports DoH, DoQ and DNSCrypt as well as DoT, with Docker setup included, but it has no blocklist management.

  • YogaDNS

    A Windows DNS client that intercepts system DNS requests and sends them over encrypted protocols by rule.

    FreemiumProprietaryWindows

    YogaDNS is a freemium, closed-source Windows-only client that captures system DNS without manual configuration and routes by hostname over DoH, DoT, DoQ or DNSCrypt.

  • AdGuard DNS CLI

    A lightweight cross-platform DNS client that forwards a machine's DNS requests to AdGuard DNS.

    FreeOpen sourceWindowsCommand line

    AdGuard DNS CLI is an open source local server forwarding to the AdGuard DNS service with filtering, for Windows or Docker, rather than any chosen resolver.

  • RouteDNS

    A DNS stub resolver, proxy and router with blocklists and DoT, DoH, DoQ and DTLS support.

    FreeProprietaryLinuxSelf-hostedCommand line

    RouteDNS adds DoH, DoQ and DTLS upstreams, routing between resolvers and built-in blocklists, though setting it up well takes DNS knowledge.

Also worth comparing

These listings name Stubby as their own alternative, so the relationship runs both ways.

Similar software

Related functionality, not a direct replacement.