Rethink DNS + Firewall
A WireGuard client, an OpenSnitch-inspired firewall and network monitor + a pi-hole-inspired DNS over HTTPS, DNS over TLS, DNSCrypt client with blocklists.
Firestack
Firestack is a userspace TCP/UDP monitor, firewall, DNS resolver, and WireGuard client for Android. gVisor/netstack provides a SOCKS-like interface for TCP and UDP over a TUN device. Firestack supports DNS-over-HTTPS, DNS-over-TLS, Oblivious DNS-over-HTTPS, DNS over WireGuard / SOCKS5 / Tor, DNSCrypt, and plain old DNS upstreams.
Serverless DNS
Serverless DNS is a Pi-Hole esque content-blocking, serverless, stub DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT) resolver. Runs out-of-the-box on Cloudflare Workers, Deno Deploy, Fastly Compute@Edge, and Fly.io. Free tiers of all these services should be enough to cover 10 to 20 devices worth of DNS traffic per month.
How to support
If you're a developer, I welcome security-focused commits: Integrating Indicators of Compromise or improving supply chain security or app/component security or implementing new user facing network security features or writing fuzzers or integrating runtime hardware attestations... that kind of stuff.
If you're good with content and multimedia, then I'd really like your help with audio/video/text docs, guides, and tutorials for the Rethink DNS + Firewall app.
If you are too busy to spend all that time, but still want to contribute, please consider sponsoring: https://svc.rethinkdns.com/r/sponsor
A small brief about your project
Anti-censorship & anti-surveillance tools for 3 billion Android users.
One FOSS maintainer lesson for your younger self
Buy the best laptop AI you can afford.
Why do you do it? Why do you bother maintaining a FOSS project?
I wanted the software for myself. It needed to exist. Thanks to God Copilot, now it does.
If your repo had a theme song, what would it be?
- Azadi, Dub Sharma, https://youtu.be/TCRHm1pmzCI
Which file in your project would you most like to set on fire?
- Costs a lot of money:
server-node.js. - Causes a lot of pain:
alg.go. - Unconditionally, every single YAML & TOML file! God dammit.
What's your open-source villain origin story?
- Be me.
- Be jobless.
- Make grand plans.
- Realize you can't build it all.
- But (like a famous Syrian Arab once said) start poking at it, anyway.
If you had to use one emoji to convey what it's like to be a FOSS maintainer, what would it be?
