RethinkDNS is a free, open-source Android app that combines an encrypted DNS client with a per-app firewall and connection tracker in one interface. You can route queries to any DoH, DoT, ODoH, or DNSCrypt resolver, apply blocklists, and cut off individual apps’ internet access based on rules you set. Query logging stays on-device and no backend account is required. The Android app is Apache-2.0 licensed and its serverless resolver is MPL-2.0 so the whole stack is open. Worth knowing: it is built by Celzero Pvt Ltd in India and registered there as a VPN app, which places it under Indian data rules.

RethinkDNS
Open-source Android app pairing encrypted DNS with a per-app firewall.
rethinkdns.com
FreeOpen SourceE2E EncryptedAndroidIndia
Pricing Free and open source; an optional paid RPN VPN is a separate product.
Strengths
- Encrypted DNS plus a per-app firewall
- Fully open source (Apache-2.0 / MPL-2.0)
- On-device logging, no account needed
Considerations
- Android only
- Indian VPN registration and data rules apply
Listed in DNS




