Encrypted DNS Proxy Isolated PiHole ยฎ
-
Pi-Hole ยฎ As a Managed Instance For Personal Use
Unlike shared databases , your query data lives inside your own server node
-
Eliminates ISP & Snooping
Your ISP and public networks see only an encrypted DNS connection.
-
Network-Wide Ad & Telemetry Blocking
Block unwanted trackers across mobile apps, and home devices.
-
Bypasses Third-Party Resolvers
Prevent Public resolvers and DNS services from harvesting your dns traffic.
Does this block 100% of ads?
How DNS Blocking Works
What it blocks: Third-party ads, tracking domains, web telemetry, and background app scripts network-wide.
Does not block First-party video ads (YouTube/Twitch): Because video streams and ads are served from the exact same domains, DNS-level filtering alone cannot isolate them without breaking playback.
Pair your encrypted DNS connection with a browser-based content blocker for total coverage.
Pi-holeยฎ is a registered trademark of Pi-Hole, LLC.
NxValue Stack is an independent service provider, not affiliated with Pi-Hole LLC in any way.
What can NxValue Stack do for me?
Instant DoT/DoH network privacy . Encrypts all DNS queries away from local ISPs, relaying requests straight to fast global resolvers with zero logs. Cloudflare , Quad9 or any custom DNS server of your choice. Update anytime.
Provisions your own private instance with isolated Pi-Hole and Unbound. Full access without touching the terminal.
Built Around Complete Transparency
NxValue Stack Node gives you full visibility into DNS activity of your connected devices.
Filtering at Your Node
Your devices send DNS requests to your isolated NxValue Stack Node. Pi-hole evaluates requests against configured filtering rules before resolution.
Recursive Unbound Resolution
Unbound performs recursive DNS resolution directly from your Node, completely eliminating reliance on centralized public DNS resolvers.
Full DNS Activity Visibility
Access private query logs to see which domain names are requested, which threats were blocked, and track network traffic per device.
LITE
One-click DNS privacy setup across multiple devices.
-
โ Stops ISP , Provider Shadow DNS Snooping, Profiling
Encrypts domain lookups so providers and public Wi-Fi can't track your queries.
-
โ Works Anywhere Online (Android, iOS, Web Browsers)
Paste into Android Private DNS or load iOS profile, no extra apps needed. Web Browsers work with this too.
-
โ Fast In-Memory Query Processing
Powered by our custom engine routing directly to low-latency Secure DNS upstream providers. Zero logs to disk.
-
โ Custom DNS Routing and Instant tracking
Point your endpoint to any DNS provider upstream and see all your queries as live telemetry on dashboard.
BASE-N
Ideal for small personal networks & custom ad-blocking
-
โ Private Node running opensource isolated Pi-Holeโโ Secure runtime and isolated resources for running your services.
-
โ Integrated Unbound Recursive Resolverโโ Deeply validating DNSSEC, recursive DNS resolver for directly querying authoritative root servers, bypassing public resolvers.
-
โ Seamless Encrypted DNS Endpointsโโ Supports DoH and DoT to encrypt your query traffic against DNS snooping.
-
โ Custom Subdomain & Automated SSLโโ Includes secure access over auto-renewing HTTPS certificates.
-
โ Web Dashboard, Logs & Exportsโโ Monitor queries, view metrics, and export full database and logs anytime.
Frequently Asked Questions
How does NxValue protect my DNS privacy?
- On-the-Wire Encryption (DoT / DoH): Both LITE and BASE-N plans encrypt requests leaving your device using DNS-over-TLS or DNS-over-HTTPS. Local networks and ISPs see only secure, unreadable traffic.
- LITE Plan (Encrypted Upstream Relay): Decouples your queries in volatile RAM at the edge proxy layer and relays them straight to trusted global resolvers like Cloudflare (1.1.1.1) and Quad9 (9.9.9.9) with zero activity logging. You can also use your preferred DNS resolvers.
- BASE-N Plan (Root DNS Resolution): Bypasses upstream providers entirely. Your isolated container runs Unbound to query ICANN root DNS servers directly, ensuring no single central provider builds a profile on your browsing habits.
Why use NxValue Stack instead of Chrome or Firefox's DoH?
Browser DoH only protects browsing inside that single app. NxValue Stack can operate at the system level to secure your entire digital footprint:
- Device-Wide & System Coverage: Encrypts background OS telemetry, mobile apps, desktop clients, and IoT devices that browsers ignore.
- Native DoT Support: Supports native system-level DNS-over-TLS for iOS, Android, macOS, Linux, and modern home routers.
- Network-Wide Ad & Tracker Blocking (BASE-N): Blocks ad networks, tracking scripts, and telemetry before they reach your network, saving bandwidth across all connected devices.
- Zero Third-Party Profiling (BASE-N): Resolves DNS directly through ICANN root servers via Unbound rather than funneling all your browsing history into public corporate resolvers.
Is NxValue Stack a public DNS provider?
No. We provide isolated private nodes running open-source software configured exclusively for your personal use.
With our DNS service, instead of sharing resources or logging pipelines on a public resolver, you get your own dedicated cloud server with complete control over your traffic.
How do I connect my phone or laptop?
Every LITE plan and provisioned node generates custom encrypted DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH) links. Copy your unique endpoints into the native "Private DNS" setting on Android, iOS, macOS, or modern browsers to start device DNS traffic protection and monitoring in under 60 seconds.
Are there limits on queries or connected devices?
No query caps. Because you run an isolated compute node rather than a shared service, we do not artificially restrict your request volume or connected device count. Connect your mobile devices, home routers, and laptops up to your node's capacity. LITE Plan has fair-use policy.
What is your acceptable use and abuse policy?
We enforce a strict fair-use policy. Nodes and endpoints abusing plans and violating guidelines will be terminated to safeguard network integrity and maintain clean IP reputations for all nodes.