SinkDNS is an MIT-licensed, Windows-based tool that interfaces with the DNSCrypt-Proxy service to provide encrypted DNS traffic filtering that has auto-updating blocklists. This is possible with individual user defined domains and user defined, community mantained blocklists.
Traditional Windows host files, when filled with hundreds or even millions of entries, slow DNS lookups dramatically, causing delays across the entire system.
Instead of relying on the Windows host file, SinkDNS is a program that integrates directly with DNSCrypt‑Proxy, allowing you to use massive blocklists. And with SinkDNS, your hostlists are updated in the background to ensure you get the latest entries. This makes SinkDNS ideal for:
- Users who want Pi‑hole‑level filtering without needing a dedicated device
- Students or people in restricted networks (e.g., university dorms) who cannot modify router settings
- Anyone who wants encrypted DNS + powerful filtering without running a full DNS server
- People who want a lightweight, Windows-native solution that “just works”
- Handles millions of blocked domains without badly degrading DNS performance
- Uses DNSCrypt‑Proxy’s high‑performance filtering instead of the Windows host file
- Auto‑updates blocklists and whitelists on a schedule
- Uses HostlistDirectory, another open source project, giving users a curated list of:
- Adblock lists
- Telemetry blockers
- Malware/security lists
- Tracking and analytics blockers
- Merge multiple lists into a single configuration and deletes duplicate entries.
- Add custom block or allow entries easily
- Auto‑updates blocklists, whitelists, and checks for DNSCrypt‑Proxy updates.
- When configured, blocklist and whitelist updates occur in the background without restarting DNSCrypt‑Proxy (Changes will be made upon restart)
- Non‑intrusive: no admin prompts unless absolutely necessary (e.g. updating DNSCrypt-Proxy)
- View blocked and allowed DNS queries
- Helps diagnose issues or identify domains to whitelist
- Instantly disable filtering if a website or app breaks
- Restore previous DNS settings automatically
- Add problematic domains to the whitelist with one click
- Automatically backs up existing host files
- Keeps user-defined host entries safe
- Only DNS settings are changed. So SinkDNS is easy to uninstall.
- Clean, lightweight tray icon
- Notifications for updates, errors, and status changes
- 100% free
- SinkDNS is MIT licensed
- No telemetry, no ads, no data collection, no nonsense
- Windows 10/11 operating system
- .NET Core runtime
- Administrative privileges for DNS configuration changes
- DNSCrypt service (will be installed with SinkDNS setup)
- Important: Do not run another DNSCrypt‑Proxy instance — it will conflict. If you have another instance, please uninstall DNSCrypt-Proxy first.
Currently, this is an early development project without a formal installation process. In the future, the tool will automatically download and configure DNSCrypt if it is not already present on the system.
Contributions to SinkDNS are welcome. Please submit pull requests or issues through the GitHub repository.
This project is licensed under the MIT License - see the LICENSE file for details.
This project uses other projects and assets that are under different licenses, for example DNSCrypt-Proxy. For the list of credits, visit SinkDNS/Credits.txt or click the "About SinkDNS" button on the system tray icon.