AdGuard Home vs Pi-hole Comparison — After 6 Months of Daily Use in My Austin Lab By Nolan Voss — 12yr enterprise IT security, 4yr penetration tester, independent security consultant — Austin, TX home lab The Short Answer After running both Pi-hole and AdGuard Home on dedicated Proxmox VMs for six months, Pi-hole delivered 18ms…

Recursive vs Forwarding DNS Privacy Trade-offs — Austin Lab Tested By Nolan Voss — 12yr enterprise IT security, 4yr penetration tester, independent security consultant — Austin, TX home lab The Short Answer After testing both recursive DNS (Unbound) and forwarding DNS (Quad9, Cloudflare) configurations on pfSense for 14 days with full packet capture, recursive resolution…

DNS over TLS Privacy Effectiveness — Tested with pfSense and Suricata By Nolan Voss — 12yr enterprise IT security, 4yr penetration tester, independent security consultant — Austin, TX home lab The Short Answer DNS over TLS (DoT) provides meaningful privacy against passive ISP logging, but falls short against nation-state adversaries. In my pfSense lab, I…

DNSCrypt vs DNS over HTTPS Performance — Austin Lab Tested by Nolan Voss By Nolan Voss — 12yr enterprise IT security, 4yr penetration tester, independent security consultant — Austin, TX home lab The Short Answer In my Austin home lab, DNSCrypt over port 443 delivered a consistent 45ms latency with a 0.1% packet loss rate…

Quad9 vs Cloudflare DNS Privacy Tested — Austin Lab Tested By Nolan Voss — 12yr enterprise IT security, 4yr penetration tester, independent security consultant — Austin, TX home lab The Short Answer Quad9 delivered a 12ms latency average on my pfSense WAN interface with a zero false positive rate during my 14-day stress test, while…

Local DNS for Privacy: Self-Hosted Setup — Honest 2026 Review Tested by Nolan Voss By Nolan Voss — 12yr enterprise IT security, 4yr penetration tester, independent security consultant — Austin, TX home lab The Short Answer Running a self-hosted DNS resolver on your local network is the most effective way to block ad networks and…

Nolan Voss Lab Report: Best Paid DNS Privacy Services Measured on Proxmox The short answer is that paid DNS privacy services are not about security guarantees, they are about performance optimization and feature completeness. In my Austin-based lab, running a Proxmox cluster with a pfSense firewall, I have measured the difference between free recursive resolvers…