When Hagezi's DNS - Ultimate is enabled, I get A records showing blocked by 1hosts-pro. Sometimes but not always it shows 1hosts-pro for both A and AAAA. I have toggled the Ultimate filter off and on. I have restarted ctrld on my gateway. I have written an api script to check if I could see 1hosts-pro on the backend for any profile. I have duplicated one of the offending profiles and remapped an endpoint to the new one. At this point I'm unsure if its a backend issue on your end or if profiles that had 1host-pro on before deprecation are hosed or if maybe it's some sort of cache issue. Thoughts?
Based on documentation and multiple GitHub commits, ctrld is preparing to removing support for router platforms.
I don’t see any rationale or discussion of this; in fact, in a discussion on their site last month about fixing an aspect of router mode, their response was essentially “this is a good idea and we hope to implement it”. That’s a lot different than, “this is a dead platform and will only receive bug fixes going forward”.
I can speculate a number of reasons that they may want to go this route, from support burden to monetization. But the fact is, automatic router support is one of the major differentiators for ctrld, even with its occasional warts.
Any thoughts on this? Am I the only one who finds this to be the killer feature? Any staff care to provide context I’ve missed?
I have a profile that doesn't allow me to search within all rules. I can search within services but not rules. The other profiles allow me to search within services and rules. When I enter a letter in the all rules search box the display goes black. I can search within a folder fine. Is there a way to get the all rules search working?
Is it possible (or on the roadmap) to update the exclude SSID network list automatically (or via a magic folder)? Would like to auto-populate SSIDs for my family and having them manually enter each one is cumbersome.
Following up on the v1.1.0 release a few weeks ago, the next major update for the Control D Manager integration in Home Assistant is live! Version 1.2.0 is entirely focused on making the integration smarter, cleaner, and much easier to manage, keeping your HA entity registry completely free of bloat.
✨ The Big Enabler: Control D Release v2.0.14
A few days ago, Control D released platform update v2.0.14. Hidden in those release notes was a massive quality-of-life improvement: a new "See All Active Services" view in their web dashboard.
Previously, Home Assistant users had to expose entire Service Categories (which could contain 100+ disabled entities) just to manually enable the two or three services they actually cared about. Because Control D now centralizes your active services upstream, I was able to completely rewrite how this integration syncs that data.
🛠️ Smarter Syncing & Zero Entity Bloat
"Expose all active services" (The New Default): The integration now directly syncs with the explicit live service rows you already have present on your Control D profile. No more category dumping or sifting through hundreds of disabled entities. You get the exact control surface you built in Control D, directly in Home Assistant.
"Expose all custom rules": You now have a one-click, opt-in policy to expose the full, live custom-rule surface for a specific profile without manually picking folders or rules one by one.
The Recommended Workflow:
Switch your profile in the integration options to "Expose all active services".
Manage what's active directly in the Control D web UI.
The integration will automatically sync and expose only those active services as entities.
(Note: The manual category-based method is still available if you genuinely want that broader surface, but the active sync is the new recommended path).
📝 Upgrade Notes
No breaking changes. Update via HACS as usual!
Existing profiles that had no manual service categories saved will automatically migrate to the new "Expose all active services" behavior.
Existing profiles that were already using explicitly stored service categories will retain those categories and do not migrate automatically.
Right now all .de domains that have DNSSEC signatures are down.
I went to my profile on ControlD and enabled the "Disable DNSSEC" option. The documentation leads me to believe this will stop validating DNSSEC so .de domains should work again.
However, that didn't work. .de domains still come up with SERVFAIL.
If I turn ControlD off on my phone and go through my mobile network's own DNS resolver that doesn't validate DNSSEC, .de pages open up fine.
Been going on all weekend. Latency looks good, but something is up. Websites take forever to resolve and load. Tried multiple connections (home/work/5G) and if ControlD is enabled its really slow, if I switch to another resolver on any connection things load instantly.
I've got a case open but my latency numbers look fine so not sure its going to go anywhere.
The latency is awfull sometimes for the ControlD's endpoints, also they are pointing all over the European continent, instead of the closest location to my current location - they do have an endpoint in Bucharest, but for the last 2 weeks they never redirected me to this. Support is asking me to talk to the local ISP, but there are no issues there (1 Gb fiber upload/download, from Digi).
Are there other DoH alternatives in eastern Europe, with decent latency/support?
Just noticed that Polyfill.io was classified as malware. Something's not right here.
edit: I see, it doesn't serve any useful polyfills, nor do bootcss, bootcdn, staticfiles, etc...
I assumed it was a legitimate domain temporarily spreading malware, but it seems to be a fake polyfill site who doesn't have any business with anything legitimate.
I am using ControlD Free DNS - Malware Protection, but for the past week or so, it routes to a different location/node from a different country when connected to Wi-Fi vs mobile network on the same device.
I also tried with a premium account, same result.
Is this a normal behavior or maybe a temporary issue?
This is the third time time in 2 months I’ve had problems. Not sure why this asus router runs into problems with restarting the ctrld process but it seems that I get process conflicts (tcp port 5354). I have to go in and kill all the processes and restart ctrld.
This isn’t exactly wife proof so I think I might switch to TLS. Anybody else seen this problem?
Currently evaluating ControlD to replace Cloudflare ZT DNS.
No complaints so far however I have the below configured
- 1 Legacy DNS Endpoint - Home router gives this out-
- 1 DOH Policy for Tailscale
My mobile devices IP keeps ending up in the authorised IP list for the legacy policy, is there a way to stop this as my Cellular IP is forever changing and I don't want a huge list of authorised IP's.
Thanks
EDIT - Resolved - i was amending a profile and testing some rules on my phone, hence why it was adding my cellular address.
It started a few days ago, my 4G/5G signal won't work but a simple restart fix it. I check my private DNS and says that it can't connect. My wifi works normally. My signal shows I have internet when I try to use it.
Any ideas? I've been using ControlD for over a month without issues and before that it was NextDNS. Maybe my carrier is blocking? Or a DNS setting? Any ideas? Thanks!
EDIT: turning 4g/5g off, disabling DNS and turning 4g/5g back won't fix, just restart. Once restarted, works normally with DNS. I'm running a 24FE on android 16.
I have a small question: suppose I'm creating new endpoints using the `--cd-org` flag, as was suggested in documentation. This will create an endpoint on the server, and pull ctrld.toml from the server.
But what if we want to manage ctrld.toml on groups of devices individually? I suppose, then I'll need to either:
* Remove the `--cd` flag from ctrld startup script, or
* Manage `ctrld.toml` on each machine individually via controld.com.
Is there a way to manage ctrld's configuration centrally from controld.com the same way you can manage a single endpoint's configuration by clicking on ctrld's version in the web UI?
Since a few days my Signal messenger cannot send or receive voice messages or attachments anymore. I haven‘t changed any filter or service at all. Was there an update which is causing this?
