256 MB RAMamd64 / arm64 / armv7TypeScript / GoMediumGPL-3.0-onlyVersion v0.107.79
Instead of a subscription
Self-hosted alternatives to Cloudflare Gateway
Cloudflare Gateway filters DNS and web traffic for an organisation's devices from Cloudflare's edge, with policies and logs in a dashboard. A local filtering resolver covers the DNS half for a home network and keeps the query log on it.
Cloudflare's free plan covers exactly this case, so there is no price to compare: a resolver of your own changes whose logs the queries end up in, not what they cost.
Requirements
Side by side
| Application | Minimum RAM | Disk estimate | Database | Installation difficulty | Backup | Recipe verification | License |
|---|---|---|---|---|---|---|---|
| AdGuard Home | 256 MB RAM | 2 GB | No database | Medium | Yes · Restore tested | Fully verifiedRecheck overdue · 0 dCheck is current | GPL-3.0-only |
| Pi-hole | 512 MB RAM | 2 GB | SQLite | Medium | Yes · Restore tested | Fully verifiedRecheck overdue · 0 dCheck is current | EUPL-1.2 |
Migration
What changes when you host it yourself
The data stops leaving your network, and so does the responsibility for it: backups, the restore you have actually tested, and the disk it all sits on.
Feature parity is never exact. Read what each recipe states about limitations and the smoke test before planning a migration.
The bill turns into work: updates, certificates and an eye on the release notes. The catalog shows how much of that each recipe asks for.
Categories
Guides with these applications
- A home server that earns its keepA modular home-server starter set: passwords, DNS, sync, monitoring, notifications, media and household recipes. Choose the services you need and add them gradually.
- Applications with a minimum of 1 GB RAM or lessSmall declared resource requirements for a VPS or thin client, with new metrics, notifications, notes and utility recipes. The limit applies to each application separately.
- What a Raspberry Pi can actually runA shortlist for 32-bit ARM systems, plus the newer options a 64-bit Pi can consider. Check the actual architecture test result before choosing a recipe.
- Services that never need a public addressKeep household services behind loopback, a private network or a VPN. Private access still needs application authentication, safe initialization and backups.