Blocky is a lightweight DNS proxy and local DNS server designed for network-wide blocking of ads, trackers, and malicious domains. It runs as a single binary and focuses on predictable DNS behavior, performance, and simple configuration.

Key Features

DNS proxy with local filtering (blocklists/allowlists) for ads, trackers, and malware domains
Supports multiple upstream DNS resolvers with configurable selection and fallback behavior
Local DNS features: custom records and conditional forwarding (e.g., split DNS per domain zone)
DNS caching to reduce latency and upstream queries
Optional upstream encryption support (DNS-over-HTTPS / DNS-over-TLS) depending on configuration
Built-in Prometheus metrics endpoint for monitoring and alerting integration
Designed to run well in containers and small environments (single static Go binary)

Use Cases

Network-wide ad/tracker blocking for a home network without browser plugins
Secure and observable DNS for homelabs (metrics + encrypted upstream resolvers)
Split-horizon DNS for internal services (custom records + zone-based forwarding)

Blocky is a solid choice when you want a small, configurable DNS layer with filtering, caching, and monitoring. It fits well as a Pi-hole-style component in a homelab, especially when you also want flexible upstream routing and Prometheus-friendly telemetry.