Control D is a customizable encrypted DNS service by Windscribe that supports DoH/3, DoT, DoQ, and plain DNS. The free tier provides preconfigured no-log resolvers. Paid plans add a web dashboard, custom blocklists, per-device profiles, and optional traffic redirection across 100+ locations.
Control D
controld.com
Our take
Control D stands out for flexibility: you can combine multiple blocklists, set per-device rules, and optionally route traffic through exit nodes, which no basic resolver offers. The free tier is genuinely useful for ad and malware blocking with no logging. The catch is the full feature set requires a paid plan, and the traffic-redirection option means you are trusting Windscribe’s infrastructure. A strong pick for users who outgrow plain resolvers but do not want a full VPN.
Listed in
Control D alternatives
NextDNS The major advantage of NextDNS over AdGuard DNS is to be able to configure the service to your needs via parental controls, website restrictions or block whole categories of…
AdGuard DNS Easy to setup within minutes. Comes with setup guides for all systems. You only need to enter two IP adresses.
Pi-hole You can run Pi-hole in a container, or deploy it directly to a supported operating system via installer.
dnscrypt-proxy (Desktop) A flexible DNS proxy, with support for modern encrypted DNS protocols including DNSCrypt V2, DNS-over-HTTPS and Anonymized DNSCrypt . Also allows for advanced…
Unbound (Desktop) Validating, recursive, caching DNS resolve with support for DNS-over-TLS. Designed to be fast, lean, and secure Unbound incorporates modern features based on open…
RethinkDNS Open-source Android app combining encrypted DNS (DoH, DoT, DNSCrypt) with a per-app firewall. Supports 190+ blocklists and on-device query logging, all without a backend account.