Control D

Highly customizable DNS from the Windscribe team.

controld.com
Visit website
Price
FreemiumFree public resolvers plus a free plan; paid tiers run about $2–3/month billed annually.
Works on
Windows, macOS, Linux, Android, iOS, Web
Based in
Canada
Source code
Closed source
Encryption
End-to-end encrypted

Control D is a configurable resolver from the Windscribe team that lets you block ads and malware, redirect or unblock specific services, and set per-device profiles from a web dashboard. There are free no-log public resolvers you can use without an account, plus a free personal plan; paid tiers run roughly $2–3/month (Some Control and Full Control) for custom rules and analytics. It is one of the most protocol-complete options here, supporting DoH, DoH3, DoT, DoQ, and plain DNS. The company is based in Toronto, Canada and its ctrld forwarding client is open source even though the service itself is not. As with any hosted resolver, its redirect features mean trusting Windscribe's infrastructure with more of your traffic.

Strengths

  • Deep customization and per-device profiles
  • Free no-log public resolvers available
  • Supports DoH, DoH3, DoT, DoQ, and plain DNS

Considerations

  • Core service is closed source
  • Advanced control needs a paid plan
  • Redirect features route more trust to Windscribe
Listed inDNS

Control D alternatives

NextDNSConfigurable DNS-level blocking for every device on your network.AdGuard DNSSet-in-minutes public DNS resolver that blocks ads and trackers.Quad9Nonprofit Swiss resolver that blocks malicious domains by default.dnscrypt-proxyLocal proxy that encrypts your DNS and lets you pick any resolver.