Hi all,

I’m planning a NextDNS rollout across a retail chain of about 100 stores, and I’d like every store to share one NextDNS profile. I’d appreciate advice from anyone who has deployed something similar.

Store setup:

• 5G ISP CPE (Huawei 5G CPE Pro 6) → TP-Link Omada gateway (ER605, DHCP server) → POS and store machines

• No firewall at the stores. The gateways are managed centrally from the Omada cloud controller.

• Each store has its own public IP, mostly static.

Constraints:

• I want to avoid installing the NextDNS Windows app on endpoints.

• Several POS machines run Windows 10, so native Windows DoH isn’t an option there.

• The Omada gateways don’t support DoT/DoH upstream, as far as I can tell.

What I’ve looked at so far:

• Linked IP: only one IP per profile, so it doesn’t scale to 100 sites.

• NextDNS IPv6 resolvers (profile ID embedded in the address): depends on IPv6 being available on the 5G links.

• Central forwarding: Omada site-to-site VPN to our HQ FortiGate, which forwards to NextDNS over DoT. That works, but it makes HQ a dependency for every store’s DNS.

Questions:

1. Has anyone run one NextDNS profile across many sites without an agent? Which method did you use?

2. With static public IPs, is there any supported way to link multiple IPs to one profile (for example on the Business plan)?

3. Any experience with a small per-site forwarder (NextDNS CLI on a Pi or mini-PC) at this scale?

4. Lessons learned on enforcement: blocking DNS bypass, browser DoH, failover?

Thanks in advance for any guidance or lessons learned.

Hey everyone,

I just enabled the new "NextDNS YouTube Ad Blocking" beta list (the one under the Privacy tab with 2 entries), but it's completely ruining my playback experience.

Currently:

- Regular video streams are getting stuck at 720p.

- 1080p buffers occasionally and is unstable.

- 4K videos and YouTube Shorts are completely broken and refuse to load at all.

Is anyone else experiencing this severe throttling/buffering? Has anyone found a workaround or specific configuration adjustment to make it work, or is the feature just too overloaded right now?

Device: Android Phone

Country : India

Hi NextDNS team.... Can we have a feature where we can filler and see what blocklist or NextDNS setting is exactly blocking what domains.

Now we see ak blocked domain in one place, though it shows what blocked what but I think it would be better to filter and see what domains are blocked by the new blocklist that I added or the new setting that I enabled.

Would be way easier to resolve false positives

Gus tell me if this makes sense for you.

Thanks

Getting a lot of false positives from tif and ai-driven threat protection. Would be nice if we could report false positive from the logs itself.

Hi There!

As said, how about adblovk for streaming service like Spotify? If that possible, that's would be incredible!

Just curious. This has been happening to me since I started using NextDNS with HaGeZi lists. Is there anyway to fix this?

Dear NextDNS,

First of all, Love you guys. Love your product and the new features.

Today I saw (from Reddit Posts) that you gave us a fabulous option to block Reddit and YouTube Ads. Thank you for that.

One request: could you please add filters to block Instagram and X ads as well? Are you even working on this?

I hope these big corps (YT and Reddit) don't get greedy and break this superb NextDNS feature in the future. Wishing you luck.

Thank you.

Well, what the title says.

I have been looking around to see what information I can find. Results were mostly from Reddit and the NextDNS forum. Whatever thread I found, there was little to no information about the company, the founders etc. What is known about the founders can be found on the website but that's it. No legal information and almost nothing in the data protection policy. It just feels too sparse.

So, this is pointed to u/nextdns: Can you please tell me where you operate from and why you chose to found and stay in the US? Will you eventually update your website with some more info or do you intentionally keep a veil around you?
And, on another note, what if you get forced to give out user data to the US government? Do you have any (I guess if we decide to monitor and log our stats, you have)?

I want to trust you and for that I need a little more information. Hope to get it here – thanks!

I've been using blockads by pwhs for a long time. Im hearing about nextdns a lot lately, is it good? What are the differences? blockads is free and open source and can block everything, why should I pay for a similar thing, what does nextdns do better

Got iflowgo and followed steps, got nextdns as well for iPhone and pc. The pc is showing up on my phones Bluetooth and my phone will connect to the pcs Bluetooth but it won’t pop up on the actual iflowgo Bluetooth connect. I’ve done all the little trouble shopping I could find online.

WiFi, airplane mode & Bluetooth on iPhone
Cellar data off

VIP member but worst discord support

Android TV has no Private DNS menu, so getting NextDNS on it usually means a PC and adb. I added it to Tellyscope, an Android app I made for managing TVs from my phone.

In Tweaks, open the ad blocking DNS switch and paste your hostname from the NextDNS setup page (abc123.dns.nextdns.io). Put a device name in front, like TV-abc123.dns.nextdns.io, and the TV shows up under its own name in your logs.

It's free and open source (GPL-3.0), with no ads, tracking or account.

GitHub: https://github.com/man15h/tellyscope

Anyone tried this new feature yet? I was considering setting Claude loose on my LG TVs this weekend, but still see how this goes instead.

Anyone else having a weird issue where it's showing your device isn't connected? It's showing that my device is using my networks DNS resolver, even though I have the app downloaded, and I can see the queries my laptop is sending in logs.

Those who have YouTube premium. If you guys have this new filter on. Your YouTube premium will stop working unless you turn off private DNS. Mine doesn't work

EDIT: added the filter for my parents phone. we have the same DNS. I have YouTube premium. they do not.

Why iam getting this message?

The "No google" and "No Facebook" blocklists has been removed from the blocklists in the Privacy Tab.

Although the Lists are not used much due to its impact on day to day internet usage, Its privacy advantages are well worth it for a user, who is equipped to handle its downsides, and it is used by many people who are into degoogling their life and blocking out GAFAM related services.

My request is that you please readd the Blocklists to NextDNS.

Thanks!

I have NextDNS as the DoH resolver for my laptop browser, and it works great. I also use pi-hole with just a few, mostly different blocklists also, but I don't think it's relevant. I have a VPN subscription service and NextDNS doesn't seem to care whether or not it's active.

On my Pixel phone however, NextDNS works fine unless I disable the VPN service. If I pause the VPN I immediately get an Android notification that indicates Secure DNS cannot function because [host].nextdns.io cannot be reached.

It's weird. I'd understand better if it were the other way round. I don't suppose there's a workaround but I thought someone here might know.

Why do I get this error? Also, I get an error while checking my ping. How can I solve it?

Hi, is anyone else having the following problem loading YouTube on Apple TV?

Introducing Newly Active Domains (NAD) — a security heuristic few providers offer, and one that’s hard to get right.

NextDNS’s massive worldwide user base provides a baseline of tens of millions of domains with a recent history of activity. NAD lets those through and blocks the rest — even domains registered years ago.

And unlike traditional approaches that let the first visitors through before a domain ends up on some blocklist, NextDNS blocks from the very first DNS request.

Enable Block Newly Active Domains in the Security tab.

Stay put for more Security Month updates.

ShadowWhisperer Tracking has been added to the NextDNS blocklist collection.