{"slug": "rethinkdns", "name": "RethinkDNS", "category": "networking", "category_name": "Networking and VPN", "description": "Open-source Android firewall and DNS-based ad, tracker and app connection blocker", "recommenders": 6, "commenters": 7, "warners": 0, "score": 5.924, "rising": 3.35, "first": "2026-03-04", "latest": "2026-10-06", "why": "HN commenters recommend it on Android for local, DNS-level ad and telemetry blocking with custom blocklists, which keeps working on mobile data and alongside a VPN.", "why_is_quote": false, "has_verdict": true, "sentiment": {"recommend": 6, "neutral": 1, "compare": 0, "warn": 0}, "spark": [0, 0, 0, 0, 1, 0, 0, 1, 0, 2, 1, 1], "listed": true, "loved": ["Blocklist adblocking", "Works with VPN"], "caveat": "Stability issues", "short_quote": "I use it to block all manufacturer and OEM related apps that I cannot uninstall through adb or disable.", "icon": true, "domain": null, "github_repo": "github.com/celzero/rethink-app", "official_url": "https://rethinkdns.com/", "pricing": "open source", "aliases": ["RethinkDNS", "Rethink DNS", "Rethink"], "verdict": [{"text": "HN commenters recommend it on Android for local, DNS-level ad and telemetry blocking with custom blocklists,", "cites": [{"id": 796471171, "item_id": 49779448, "url": "https://news.ycombinator.com/item?id=49779448", "by": "anygivnthursday", "date": "2026-09-20", "stance": "recommend", "quote": "For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data", "excerpt": "For a home network network pihole or unbound also supports blocklists (bundled with opnsense for example if you also want a firewall). For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data (it is vpn based).", "context": "", "use_case": "Android DNS blocking", "switched_from": "", "story": "ChatGPT now knows what you do on other websites via ad collector"}, {"id": 787136848, "item_id": 49196053, "url": "https://news.ycombinator.com/item?id=49196053", "by": "createful", "date": "2026-08-06", "stance": "recommend", "quote": "I use it to block all manufacturer and OEM related apps that I cannot uninstall through adb or disable.", "excerpt": "I use Rethink DNS for this, see (https://github.com/celzero/rethink-app). Despite it's name it can also block IPs and specific apps from connecting to specific servers. I use it to block all manufacturer and OEM related apps that I cannot uninstall through adb or disable. Very handy for blocking constant Chinese phone telemetry pings, as well as additional network level blocklists for ads (Pi-hole like), completely l", "context": "Android user", "use_case": "blocking telemetry and ads on Android", "switched_from": "", "story": "On non-rooted Android 17, ADB uninstall of system apps fails"}, {"id": 799744563, "item_id": 49984035, "url": "https://news.ycombinator.com/item?id=49984035", "by": "Onavo", "date": "2026-10-06", "stance": "neutral", "quote": "There are local device-only resolver apps like", "excerpt": "Sigh, that's a lot of words to describe DNS based adblocking. In Android you can either set your DNS server in the system settings or via the VPN API. Sample code here https://github.com/t895/DNSNet/blob/a-couple-updates/service/src/main/kotlin/dev/clombardo/dnsnet/service/vpn/DnsNetVpnService.kt They both do the same thing. There are local device-only resolver apps like https://rethinkdns.com/ https://github.com/m66", "context": "", "use_case": "local DNS ad blocking", "switched_from": "", "story": "System-level ad-blocking in Android"}]}, {"text": " which keeps working on mobile data and alongside a VPN.", "cites": [{"id": 796471171, "item_id": 49779448, "url": "https://news.ycombinator.com/item?id=49779448", "by": "anygivnthursday", "date": "2026-09-20", "stance": "recommend", "quote": "For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data", "excerpt": "For a home network network pihole or unbound also supports blocklists (bundled with opnsense for example if you also want a firewall). For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data (it is vpn based).", "context": "", "use_case": "Android DNS blocking", "switched_from": "", "story": "ChatGPT now knows what you do on other websites via ad collector"}, {"id": 756054146, "item_id": 47253384, "url": "https://news.ycombinator.com/item?id=47253384", "by": "Andromxda", "date": "2026-03-04", "stance": "recommend", "quote": "The RethinkDNS app also lets you use DNS-level adblocking and a VPN at the same time.", "excerpt": "Rooting is a very bad idea. https://madaidans-insecurities.github.io/android.html#rooting But GrapheneOS is fully open source and provides great build instructions, so you can always make your own build and add whatever features or privileged apps you like within the standard AOSP frameworks for privileged apps with system integration. > Backing up all app data via Neo Backup GrapheneOS includes Seedvault by default.", "context": "", "use_case": "DNS ad blocking with VPN", "switched_from": "", "story": "Motorola GrapheneOS devices will be bootloader unlockable/relockable"}]}, {"text": " The main complaint is instability on GrapheneOS,", "cites": [{"id": 787192320, "item_id": 49199520, "url": "https://news.ycombinator.com/item?id=49199520", "by": "subscribed", "date": "2026-08-06", "stance": "recommend", "quote": "all in all it's a fantastic software, just doesn't work very stable for me.", "excerpt": "I love rethink but stopped using it on my up-to-date GOS. It randomly stops and no app can reach the internet (or me), randomly it doesn't obey the split tunneling rules or doesn't forward the connections to the tunnel at all (thus blocking all internet if wg proxy is enabled), and couple of other things. I'll check Rethink again because all in all it's a fantastic software, just doesn't work very stable for me.", "context": "GrapheneOS user", "use_case": "blocking connections on Android", "switched_from": "", "story": "On non-rooted Android 17, ADB uninstall of system apps fails"}]}, {"text": " where it can randomly stop and cut off internet access or ignore split tunneling rules.", "cites": [{"id": 787192320, "item_id": 49199520, "url": "https://news.ycombinator.com/item?id=49199520", "by": "subscribed", "date": "2026-08-06", "stance": "recommend", "quote": "all in all it's a fantastic software, just doesn't work very stable for me.", "excerpt": "I love rethink but stopped using it on my up-to-date GOS. It randomly stops and no app can reach the internet (or me), randomly it doesn't obey the split tunneling rules or doesn't forward the connections to the tunnel at all (thus blocking all internet if wg proxy is enabled), and couple of other things. I'll check Rethink again because all in all it's a fantastic software, just doesn't work very stable for me.", "context": "GrapheneOS user", "use_case": "blocking connections on Android", "switched_from": "", "story": "On non-rooted Android 17, ADB uninstall of system apps fails"}]}], "praise": [{"label": "Blocklist adblocking", "summary": "Supports DNS-level ad and tracker blocking with blocklists such as Hagezi.", "quotes": [{"id": 796471171, "item_id": 49779448, "url": "https://news.ycombinator.com/item?id=49779448", "by": "anygivnthursday", "date": "2026-09-20", "stance": "recommend", "quote": "For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data", "excerpt": "For a home network network pihole or unbound also supports blocklists (bundled with opnsense for example if you also want a firewall). For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data (it is vpn based).", "context": "", "use_case": "Android DNS blocking", "switched_from": "", "story": "ChatGPT now knows what you do on other websites via ad collector"}, {"id": 787136848, "item_id": 49196053, "url": "https://news.ycombinator.com/item?id=49196053", "by": "createful", "date": "2026-08-06", "stance": "recommend", "quote": "I use it to block all manufacturer and OEM related apps that I cannot uninstall through adb or disable.", "excerpt": "I use Rethink DNS for this, see (https://github.com/celzero/rethink-app). Despite it's name it can also block IPs and specific apps from connecting to specific servers. I use it to block all manufacturer and OEM related apps that I cannot uninstall through adb or disable. Very handy for blocking constant Chinese phone telemetry pings, as well as additional network level blocklists for ads (Pi-hole like), completely l", "context": "Android user", "use_case": "blocking telemetry and ads on Android", "switched_from": "", "story": "On non-rooted Android 17, ADB uninstall of system apps fails"}, {"id": 756054146, "item_id": 47253384, "url": "https://news.ycombinator.com/item?id=47253384", "by": "Andromxda", "date": "2026-03-04", "stance": "recommend", "quote": "The RethinkDNS app also lets you use DNS-level adblocking and a VPN at the same time.", "excerpt": "Rooting is a very bad idea. https://madaidans-insecurities.github.io/android.html#rooting But GrapheneOS is fully open source and provides great build instructions, so you can always make your own build and add whatever features or privileged apps you like within the standard AOSP frameworks for privileged apps with system integration. > Backing up all app data via Neo Backup GrapheneOS includes Seedvault by default.", "context": "", "use_case": "DNS ad blocking with VPN", "switched_from": "", "story": "Motorola GrapheneOS devices will be bootloader unlockable/relockable"}]}, {"label": "Works with VPN", "summary": "Being VPN-based, it blocks on mobile data and can run DNS adblocking alongside a VPN.", "quotes": [{"id": 796471171, "item_id": 49779448, "url": "https://news.ycombinator.com/item?id=49779448", "by": "anygivnthursday", "date": "2026-09-20", "stance": "recommend", "quote": "For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data", "excerpt": "For a home network network pihole or unbound also supports blocklists (bundled with opnsense for example if you also want a firewall). For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data (it is vpn based).", "context": "", "use_case": "Android DNS blocking", "switched_from": "", "story": "ChatGPT now knows what you do on other websites via ad collector"}, {"id": 756054146, "item_id": 47253384, "url": "https://news.ycombinator.com/item?id=47253384", "by": "Andromxda", "date": "2026-03-04", "stance": "recommend", "quote": "The RethinkDNS app also lets you use DNS-level adblocking and a VPN at the same time.", "excerpt": "Rooting is a very bad idea. https://madaidans-insecurities.github.io/android.html#rooting But GrapheneOS is fully open source and provides great build instructions, so you can always make your own build and add whatever features or privileged apps you like within the standard AOSP frameworks for privileged apps with system integration. > Backing up all app data via Neo Backup GrapheneOS includes Seedvault by default.", "context": "", "use_case": "DNS ad blocking with VPN", "switched_from": "", "story": "Motorola GrapheneOS devices will be bootloader unlockable/relockable"}]}, {"label": "Local and trustworthy", "summary": "Filtering runs entirely on the device instead of through a third-party service.", "quotes": [{"id": 787136848, "item_id": 49196053, "url": "https://news.ycombinator.com/item?id=49196053", "by": "createful", "date": "2026-08-06", "stance": "recommend", "quote": "I use it to block all manufacturer and OEM related apps that I cannot uninstall through adb or disable.", "excerpt": "I use Rethink DNS for this, see (https://github.com/celzero/rethink-app). Despite it's name it can also block IPs and specific apps from connecting to specific servers. I use it to block all manufacturer and OEM related apps that I cannot uninstall through adb or disable. Very handy for blocking constant Chinese phone telemetry pings, as well as additional network level blocklists for ads (Pi-hole like), completely l", "context": "Android user", "use_case": "blocking telemetry and ads on Android", "switched_from": "", "story": "On non-rooted Android 17, ADB uninstall of system apps fails"}, {"id": 799744563, "item_id": 49984035, "url": "https://news.ycombinator.com/item?id=49984035", "by": "Onavo", "date": "2026-10-06", "stance": "neutral", "quote": "There are local device-only resolver apps like", "excerpt": "Sigh, that's a lot of words to describe DNS based adblocking. In Android you can either set your DNS server in the system settings or via the VPN API. Sample code here https://github.com/t895/DNSNet/blob/a-couple-updates/service/src/main/kotlin/dev/clombardo/dnsnet/service/vpn/DnsNetVpnService.kt They both do the same thing. There are local device-only resolver apps like https://rethinkdns.com/ https://github.com/m66", "context": "", "use_case": "local DNS ad blocking", "switched_from": "", "story": "System-level ad-blocking in Android"}]}, {"label": "Per-app firewall", "summary": "Can block IPs and stop specific apps, including OEM telemetry apps, from reaching servers.", "quotes": [{"id": 787136848, "item_id": 49196053, "url": "https://news.ycombinator.com/item?id=49196053", "by": "createful", "date": "2026-08-06", "stance": "recommend", "quote": "I use it to block all manufacturer and OEM related apps that I cannot uninstall through adb or disable.", "excerpt": "I use Rethink DNS for this, see (https://github.com/celzero/rethink-app). Despite it's name it can also block IPs and specific apps from connecting to specific servers. I use it to block all manufacturer and OEM related apps that I cannot uninstall through adb or disable. Very handy for blocking constant Chinese phone telemetry pings, as well as additional network level blocklists for ads (Pi-hole like), completely l", "context": "Android user", "use_case": "blocking telemetry and ads on Android", "switched_from": "", "story": "On non-rooted Android 17, ADB uninstall of system apps fails"}]}, {"label": "Essential tool", "summary": "Users call it fantastic software and an app they cannot do without.", "quotes": [{"id": 777043729, "item_id": 48565233, "url": "https://news.ycombinator.com/item?id=48565233", "by": "aussieguy1234", "date": "2026-06-16", "stance": "recommend", "quote": "There are some apps I can't do without like ReThink DNS, NewPipe and other open source apps which I use regularly.", "excerpt": "With Google making side loading extremely difficult soon, there's never been a better time to switch to a more secure OS for your phone. There are some apps I can't do without like ReThink DNS, NewPipe and other open source apps which I use regularly. All would get blocked under Googles new regime.", "context": "", "use_case": "DNS/firewall on Android", "switched_from": "", "story": "GrapheneOS has been ported to Android 17 and official releases are coming soon"}, {"id": 787192320, "item_id": 49199520, "url": "https://news.ycombinator.com/item?id=49199520", "by": "subscribed", "date": "2026-08-06", "stance": "recommend", "quote": "all in all it's a fantastic software, just doesn't work very stable for me.", "excerpt": "I love rethink but stopped using it on my up-to-date GOS. It randomly stops and no app can reach the internet (or me), randomly it doesn't obey the split tunneling rules or doesn't forward the connections to the tunnel at all (thus blocking all internet if wg proxy is enabled), and couple of other things. I'll check Rethink again because all in all it's a fantastic software, just doesn't work very stable for me.", "context": "GrapheneOS user", "use_case": "blocking connections on Android", "switched_from": "", "story": "On non-rooted Android 17, ADB uninstall of system apps fails"}, {"id": 799761552, "item_id": 49985097, "url": "https://news.ycombinator.com/item?id=49985097", "by": "jurakovic", "date": "2026-10-06", "stance": "recommend", "quote": "Just use Rethink app", "excerpt": "Just use Rethink app https://github.com/celzero/rethink-app", "context": "", "use_case": "Android ad blocking", "switched_from": "", "story": "System-level ad-blocking in Android"}]}], "caveats": [{"label": "Stability issues", "summary": "One GrapheneOS user saw random stops, ignored split tunneling rules and lost connectivity.", "quotes": [{"id": 787192320, "item_id": 49199520, "url": "https://news.ycombinator.com/item?id=49199520", "by": "subscribed", "date": "2026-08-06", "stance": "recommend", "quote": "all in all it's a fantastic software, just doesn't work very stable for me.", "excerpt": "I love rethink but stopped using it on my up-to-date GOS. It randomly stops and no app can reach the internet (or me), randomly it doesn't obey the split tunneling rules or doesn't forward the connections to the tunnel at all (thus blocking all internet if wg proxy is enabled), and couple of other things. I'll check Rethink again because all in all it's a fantastic software, just doesn't work very stable for me.", "context": "GrapheneOS user", "use_case": "blocking connections on Android", "switched_from": "", "story": "On non-rooted Android 17, ADB uninstall of system apps fails"}]}, {"label": "Sideloading restrictions", "summary": "A commenter worries that Google's planned sideloading restrictions could block apps like it.", "quotes": [{"id": 777043729, "item_id": 48565233, "url": "https://news.ycombinator.com/item?id=48565233", "by": "aussieguy1234", "date": "2026-06-16", "stance": "recommend", "quote": "There are some apps I can't do without like ReThink DNS, NewPipe and other open source apps which I use regularly.", "excerpt": "With Google making side loading extremely difficult soon, there's never been a better time to switch to a more secure OS for your phone. There are some apps I can't do without like ReThink DNS, NewPipe and other open source apps which I use regularly. All would get blocked under Googles new regime.", "context": "", "use_case": "DNS/firewall on Android", "switched_from": "", "story": "GrapheneOS has been ported to Android 17 and official releases are coming soon"}]}], "who": [{"by": "subscribed", "context": "GrapheneOS user", "url": "https://news.ycombinator.com/item?id=49199520", "date": "2026-08-06"}, {"by": "createful", "context": "Android user", "url": "https://news.ycombinator.com/item?id=49196053", "date": "2026-08-06"}], "tags": ["for Android users", "for GrapheneOS users", "blocking OEM telemetry", "open source"], "use_cases": ["android ad blocking", "local dns ad blocking", "android dns blocking", "blocking connections on android", "blocking telemetry and ads on android", "dns on android"], "compared": [{"slug": "grapheneos", "name": "GrapheneOS", "co": 3, "switched_from": 0, "switched_to": 0}, {"slug": "pi-hole", "name": "Pi-hole", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49983647", "title": "System-level ad-blocking in Android", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=49193173", "title": "On non-rooted Android 17, ADB uninstall of system apps fails", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=48561654", "title": "GrapheneOS has been ported to Android 17 and official releases are coming soon", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=49776729", "title": "ChatGPT now knows what you do on other websites via ad collector", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47241551", "title": "Motorola GrapheneOS devices will be bootloader unlockable/relockable", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {"recommend": 1}, "2026-04": {}, "2026-05": {}, "2026-06": {"recommend": 1}, "2026-07": {}, "2026-08": {"recommend": 2}, "2026-09": {"recommend": 1}, "2026-10": {"neutral": 1, "recommend": 1}}, "quotes": [{"id": 799761552, "item_id": 49985097, "url": "https://news.ycombinator.com/item?id=49985097", "by": "jurakovic", "date": "2026-10-06", "stance": "recommend", "quote": "Just use Rethink app", "excerpt": "Just use Rethink app https://github.com/celzero/rethink-app", "context": "", "use_case": "Android ad blocking", "switched_from": "", "story": "System-level ad-blocking in Android"}, {"id": 799744563, "item_id": 49984035, "url": "https://news.ycombinator.com/item?id=49984035", "by": "Onavo", "date": "2026-10-06", "stance": "neutral", "quote": "There are local device-only resolver apps like", "excerpt": "Sigh, that's a lot of words to describe DNS based adblocking. In Android you can either set your DNS server in the system settings or via the VPN API. Sample code here https://github.com/t895/DNSNet/blob/a-couple-updates/service/src/main/kotlin/dev/clombardo/dnsnet/service/vpn/DnsNetVpnService.kt They both do the same thing. There are local device-only resolver apps like https://rethinkdns.com/ https://github.com/m66", "context": "", "use_case": "local DNS ad blocking", "switched_from": "", "story": "System-level ad-blocking in Android"}, {"id": 796471171, "item_id": 49779448, "url": "https://news.ycombinator.com/item?id=49779448", "by": "anygivnthursday", "date": "2026-09-20", "stance": "recommend", "quote": "For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data", "excerpt": "For a home network network pihole or unbound also supports blocklists (bundled with opnsense for example if you also want a firewall). For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data (it is vpn based).", "context": "", "use_case": "Android DNS blocking", "switched_from": "", "story": "ChatGPT now knows what you do on other websites via ad collector"}, {"id": 787192320, "item_id": 49199520, "url": "https://news.ycombinator.com/item?id=49199520", "by": "subscribed", "date": "2026-08-06", "stance": "recommend", "quote": "all in all it's a fantastic software, just doesn't work very stable for me.", "excerpt": "I love rethink but stopped using it on my up-to-date GOS. It randomly stops and no app can reach the internet (or me), randomly it doesn't obey the split tunneling rules or doesn't forward the connections to the tunnel at all (thus blocking all internet if wg proxy is enabled), and couple of other things. I'll check Rethink again because all in all it's a fantastic software, just doesn't work very stable for me.", "context": "GrapheneOS user", "use_case": "blocking connections on Android", "switched_from": "", "story": "On non-rooted Android 17, ADB uninstall of system apps fails"}, {"id": 787136848, "item_id": 49196053, "url": "https://news.ycombinator.com/item?id=49196053", "by": "createful", "date": "2026-08-06", "stance": "recommend", "quote": "I use it to block all manufacturer and OEM related apps that I cannot uninstall through adb or disable.", "excerpt": "I use Rethink DNS for this, see (https://github.com/celzero/rethink-app). Despite it's name it can also block IPs and specific apps from connecting to specific servers. I use it to block all manufacturer and OEM related apps that I cannot uninstall through adb or disable. Very handy for blocking constant Chinese phone telemetry pings, as well as additional network level blocklists for ads (Pi-hole like), completely l", "context": "Android user", "use_case": "blocking telemetry and ads on Android", "switched_from": "", "story": "On non-rooted Android 17, ADB uninstall of system apps fails"}, {"id": 777259488, "item_id": 48578718, "url": "https://news.ycombinator.com/item?id=48578718", "by": "aussieguy1234", "date": "2026-06-17", "stance": "recommend", "quote": "Before rethink I used DNS66 which is similar.", "excerpt": "Its there. Before rethink I used DNS66 which is similar. Only available on F-Droid. Occasionally, these play store versions of apps are heavily watered down. Termux is an example. Always get that from F-Droid, not the play store version.", "context": "", "use_case": "DNS on Android", "switched_from": "DNS66", "story": "GrapheneOS has been ported to Android 17 and official releases are coming soon"}, {"id": 777043729, "item_id": 48565233, "url": "https://news.ycombinator.com/item?id=48565233", "by": "aussieguy1234", "date": "2026-06-16", "stance": "recommend", "quote": "There are some apps I can't do without like ReThink DNS, NewPipe and other open source apps which I use regularly.", "excerpt": "With Google making side loading extremely difficult soon, there's never been a better time to switch to a more secure OS for your phone. There are some apps I can't do without like ReThink DNS, NewPipe and other open source apps which I use regularly. All would get blocked under Googles new regime.", "context": "", "use_case": "DNS/firewall on Android", "switched_from": "", "story": "GrapheneOS has been ported to Android 17 and official releases are coming soon"}, {"id": 756054146, "item_id": 47253384, "url": "https://news.ycombinator.com/item?id=47253384", "by": "Andromxda", "date": "2026-03-04", "stance": "recommend", "quote": "The RethinkDNS app also lets you use DNS-level adblocking and a VPN at the same time.", "excerpt": "Rooting is a very bad idea. https://madaidans-insecurities.github.io/android.html#rooting But GrapheneOS is fully open source and provides great build instructions, so you can always make your own build and add whatever features or privileged apps you like within the standard AOSP frameworks for privileged apps with system integration. > Backing up all app data via Neo Backup GrapheneOS includes Seedvault by default.", "context": "", "use_case": "DNS ad blocking with VPN", "switched_from": "", "story": "Motorola GrapheneOS devices will be bootloader unlockable/relockable"}]}