RethinkDNS is a free, open-source Android app that combines an encrypted DNS proxy with a per-app firewall in a single interface. It supports DoH, DoT, DNSCrypt, and DNS Proxy, along with over 190 pre-built blocklists and on-device query logging. The firewall uses Android’s VPN slot to intercept and selectively block network traffic per app.
Having encrypted DNS and a proper per-app firewall in one open-source Android app with no account is genuinely unusual. The depth of the blocklist library and on-device logging make it appealing for users who want to audit what their apps are actually doing. The catch is the interface takes time to learn, and running both DNS and firewall through the VPN slot means you cannot use it alongside a real VPN simultaneously without workarounds. The right tool for privacy-minded Android users willing to invest setup time.
Listed in
RethinkDNS alternatives
Permissive like MIT, with an explicit patent grant and a requirement to flag any changes you make.
Permits
- Commercial use
- Modification
- Distribution
- Patent use
- Private use
Requires
- License and copyright notice
- State changes
Does not provide
- Trademark use
- Liability cover
- Warranty
Why it matters: Permissive licensing lets anyone reuse this, including inside closed products. That is freedom to build on, but no guarantee that downstream copies stay open.
Plain-language summary of the project's license, not legal advice. Read the full text for the exact terms.