Android DNS app that doesn't create a VPN

VPN
1

Do any apps exist that use a local http proxy instead of a VPN. This to allow the use of a VPN and encrypted NextDNS at the same time.

The only one I’ve found currently is the AdGuard app, if you’re rooted you can change it from VPN to local http proxy auto mode and then set the DNS using DNS over HTTPS (DoH).

Is anyone aware of any others?

Edit: I do use DNS over TCL (DoT) when possible but unfortunately this isn’t an option when on my work (and some public) WiFi as port 853 is blocked which is what DoT uses. I also use a real VPN to get around blocked websites. That means I can’t use the VPN or DoT methods for linking to NextDNS at work. That leaves using either unencrypted IPv4 or a local http proxy for DoH.

Update: 2 very good apps identified called “Nebulo” and “Personal DNS Filter” which both have a non-VPN mode and support DoH and DoT.

Personal DNS Filter also has a good non-VPN/non-root method too if you use their modified version of the OpenVPN for Android app (OpenVPN for pDNSf).

2

you don’t need an app,

Just configure the DoT DNS server (dns.nextdns.io) of NextDNS within Android:

open the Settings app on your phone, go to the network settings, and find the option for a Private DNS server. You can type the servername into the address field. It has to be the TLS hostname (dns.nextdns.io) and not an ip address

3

InviZible Pro (its on F Droid)

4

No need to use an app. Just change your dns in your connection settings. Instructions are on setup page for your nextdns account.

5

If you use Net-Guard, you can add a SOCKS5

6

Personal DNS filter on F-Droid is what I use.

7

widevpn, suport wireguard, unblock any content. $9.99/yearly

8

Disconnect pro with privatedns

9

Thank you. I do use that method 99% of the time. Unfortunately port 853 is blocked on my work WiFi so it isn’t an option there. I need to use the VPN to get around blocked websites. That means I can’t use a VPN or DoT at work for NextDNS. That leaves using a http proxy for DoH. I’ll add this to the OP.

10

If you do that your connection won’t be encrypted. Also you can’t always use Private DNS for DNS over TLS (DoT) as it’s blocked on some networks (work WiFi) and isn’t an option for Android 8 and below, I should have mentioned this in the OP.

11

Thank you, has the no VPN root option which is perfect, having some issues getting it to work but will figure it out eventually.

12

Got this to work, a good option, thanks

13

I know you’ve solved this but If you’re rooted why does the Android version matter? Update your rom to Android 9+.

14

Good to hear. Another solution would be to use BlahDNS as your Private DNS which uses both Port 853 and 443.

15

Do you mind how did you set it up? Is it required installing both Personal DNS Filter (from PlayStore?) and OpenVPN for pDNSf?

Thanks!

16

The port TLS uses is blocked on some networks and isn’t an option for Android 8 and below.

17

I have a tablet on Android 8 but the unofficial Android 9/10 has quite a bugs which has put me off. Good suggestion though!

18

Yes that’s right install them both.

OpenVPN for personalDNSfilter

For integrating with personalDNSfilter (minimal Version 1.50.38), select the Option “DNS Proxy Mode” within the personalDNSfilter advanced settings.
In OpenVPN for personalDNSfilter, configure own DNS Server “10.10.10.10” within the “IP and DNS” configuration section.
Without this special DNS, OpenVPN for personalDNSfilter will behave exactly as the original OpenVPN for Android application.

I’ve also discovered another app called VPN Client Pro from the Play Store, it allows you to set an encrypted DNS directly to an OpenVPN profile.

19

Yes those are facts…a far cry from stating TLS is not encrypted though…

20

Mind if you share your DNS configuration for NextDNS? This part in the help.

Also, in Advanced Settings, which toggles you enabled?

I don’t want any blocking on the app, blocking is already hanled by ND in the cloud. So, have you disabled Enable blocking in the home page of the app?

Yet another, but an important question: I currently have the NextDNS app, but it keeps getting killed in the background for some reason, rendering the device unprotected. I’ve followed all the recommendations to prevent this, such as whitelisting ND from battery optimizations, pinning it in the background, enabling Always-on VPN, and Auto-start. However, it still gets killed anyway. So, do both pDNSfilter and OpenVPN for pDNSfilter have to run in the background all the time to work? Have you managed to make them run without getting killed?

As for VPN Client Pro, does it work without local VPN? That’s what I’m after with personalDNSfilter.

I also found another solution, using Nebulo with no VPN mode and forwarding DNS queries to it with Rethink DNS. I’ll test both and see which one works best.

Thanks!