Control D is a customizable encrypted DNS service by Windscribe that supports DoH/3, DoT, DoQ, and plain DNS. The free tier provides preconfigured no-log resolvers. Paid plans add a web dashboard, custom blocklists, per-device profiles, and optional traffic redirection across 100+ locations.
Official website controld.com
Our take
Control D stands out for flexibility: you can combine multiple blocklists, set per-device rules, and optionally route traffic through exit nodes, which no basic resolver offers. The free tier is genuinely useful for ad and malware blocking with no logging. The catch is the full feature set requires a paid plan, and the traffic-redirection option means you are trusting Windscribe’s infrastructure. A strong pick for users who outgrow plain resolvers but do not want a full VPN.
Listed in
Control D alternatives
NextDNS The major advantage of NextDNS over AdGuard DNS is to be able to configure the service to your needs via parental controls, website restrictions or block whole categories of…
AdGuard DNS Easy to setup within minutes. Comes with setup guides for all systems. You only need to enter two IP adresses.
Mullvad DNS Free public encrypted DNS resolver from Mullvad VPN, supporting DoH and DoT. Available in six filtering variants including ad-blocking, malware, and family-safe options. No account required.
Quad9 Based in Switzerland. Supports: DNS-over-TLS (DoT), DNS-over-HTTPS (DoH) and DNSCrypt.
Cloudflare Based in United States. Supports: DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH).
Pi-hole You can run Pi-hole in a container, or deploy it directly to a supported operating system via installer.