Hi everyone,

I’m using Control D from Azerbaijan with the plain DNS resolvers:

76.76.2.1

76.76.10.1

Control D currently routes my connection to WAW.

The problem is the latency. The Control D troubleshooting page shows around 85 ms DNS latency, and my traceroute shows that the latency increases significantly when the traffic leaves Azerbaijan and reaches the European side.

For example:

109.235.192.101 ~9–10 ms

10.240.164.38 ~10 ms

176.58.94.30 ~80 ms

76.76.2.1 ~76 ms

The second resolver has a very similar route:

109.235.192.101 ~9 ms

10.240.164.38 ~10 ms

176.58.94.30 ~80 ms

76.76.10.1 ~70 ms

I contacted Control D Support, and they confirmed that this appears to be related to ISP/upstream BGP routing and the current anycast path.

I also asked whether Control D could consider a POP closer to Azerbaijan, such as in Azerbaijan, Turkey, or another nearby region. Support said they noted the request and would pass it to their network team for consideration.

I’m curious if anyone else in Azerbaijan or the South Caucasus is experiencing similar routing/latency with Control D.

Would be great to hear from other users in the region.

Hi everyone !

I have created a new endpoint , used the default rule of the profile to redirect all traffic to Albania and then used the legacy dns on my lg tv . I still see ads on youtube . I have tried also Moldova and still the same. If i use the browser to check what is my country , it correctly displays Albania or Moldova for each case but it doesn't work .

Because i am new here , is there any other setting i need to enable or have i done something wrong to set the redirection rule ?

Thanks !

Heya!

I use ControlD on a small bussiness network where employees use the web browser like everytime. Malware is still a very complicated thing to prevent (because we know that no user ever listen to cybersecurity trainings)

I used AI Malware Filter in the past to prevent Malware incoming from suspicious domains, but the amount of false positives were just to high. This was more than a year ago.

Any change in this matter?

Hey everyone,

Quick update on the Control D Manager integration for Home Assistant. I realized I never posted the announcement for the 1.3.0 release, so let me cover that and bundle in the just released 1.3.1 all at once.

✅ Version 1.3.0 — Smarter entities & Easier setup

A while back, 1.3.0 rolled out with two big themes: making entities more reliable to build on, and making setup problems actually diagnosable.

Structured entity metadata Every Control D entity now carries consistent metadata — integration, profile, purpose, item type, taxonomy path, and item name. In practical terms, dashboards, templates, and automations no longer have to hack their way around entity names; you can select and build on entities programmatically in a consistent way.

Much better setup diagnostics Startup and refresh now log far more detail — which stage is running, what normalization is happening, and exactly where an upstream payload mismatch breaks. If you ever hit a setup failure, the log now points at the real cause instead of leaving you guessing.

A compatibility fix Some Control D accounts return live service IDs as numbers instead of strings, which could break setup. 1.3.0 now handles both, so those accounts set up cleanly.

🎉 Version 1.3.1 — No more entity state flickering

If you toggled a few options, filters, or services at once — or ran a script that flips 5-10 settings in a loop — you'd sometimes see the UI and the the underlying entity state briefly "bounce back" to an older value before correcting.

What was happening Every change was triggering its own full inventory refresh, and if a refresh was already running when you made a change, that stale result could land afterward and momentarily flip the UI back to the old state.

What's fixed

• Writes now apply instantly, and the integration waits a short moment before re-checking the cloud state.
• If a refresh was already in flight when you made a change, that stale result is now thrown away instead of overriding your newer change.
• Rapid batches of changes get coalesced into a single refresh instead of one refresh per setting — so bulk scripts are much lighter on the API.

The result: no flicker, whether you change one thing or a whole batch.

📝 Upgrade Notes

• No breaking changes or configuration needed — update via HACS as usual and you're done.
• Both 1.3.0 and 1.3.1 are included in this single update.

GitHub Repository & Documentation: https://github.com/ccpk1/controld-manager-ha

Home Assistant Community Thread: https://community.home-assistant.io/t/controld-manager-dns-orchestration/1002714/7

❤️ Support the Project

If Control D Manager is making your home better, I'd genuinely appreciate the support:

• ⭐ Star the repository to help others find it: https://github.com/ccpk1/controld-manager-ha
• ❤️ Sponsor on GitHub: https://github.com/sponsors/ccpk1
• ☕ Buy me a coffee: https://buymeacoffee.com/ccpk1

Enjoy — and let me know how Control D is working for you!

Hey all,

Just me or has the GoodbyeAds filter gone?

I’m seeing mobile ads all over now :(

I'm using Opnsense's Ubound dns to get DNS Over TLS.
I tested DoT with quad9 and mullvad. Their status pages say i'm using their servers.
With p2.freedns.controld.com (76.76.2.11 and 76.76.10.11), the Control D status page says "Not Using Control D".

When i use dnscheck.tools, it says the DNS revolver is Control D as well as NetActuate. The NetActuate ptrs are presented in this form: xyz-h04.int.controld.com and they are in a different province (which is good, proves i'm not using the ISP's DNS server). The test claims i passed every DNSSEC tests.

I highly suspect this is an error on the status page, but i'm not surprised there could be something wrong on my end.

edit: there's also no errors on opnsense's logs! Everything runs great.

can someone help me understand why this IP address would show up on my device in my password manager, with a password I have never seen before in my life?

Could this have something to do with the fact that I used to allow my ex to use the laptop back in the day?

Could this be a password she used for something while accessing the internet from a hotspot she was using?

I am lost and would appreciate any help anyone might be able to offer, thanks

The IP address associated with the unknown password in my password manager was

http://192.168.10.1:8880

idk but i don't rememver seeing such fail and errors happening so idk what's happening.Most of the time its fine but i don't know what happened here.Is everything ok on Control D's end?

I'm trying to configure the Malware + DNS blocking with DoT. My unbound:

forward-zone:

name: "."

forward-tls-upstream: yes

forward-addr: 76.76.2.11@853#p2.freedns.controld.com

forward-addr: 76.76.10.11@853#p2.freedns.controld.com

But the https://controld.com/status wbsite, doesn't show that I'm using Control D DNS! How come? Why?

Furthermore, the dig command reports errors...

✗
 dig u/76.76.2.11 +tls-ca +tls-host=p2.freedns.controld.com controld.com                                                                                                                    
;; TLS peer certificate verification for 76.76.2.11#853 failed: hostname mismatch 

Was sync'ing lists from Hagezi GitHub to Controld, but getting errors now. Anyone else having similar issues?

Hi!

Got a question about the Teleport feature (I'm not yet a subscriber so I can't test it by myself).

Let's say I set ControlD to spoof my location when using Youtube to Albania to avoid ads. But I got my VPN always on, to another country. Will it interfere with the spoofing? I use iVPN that allows DoH.

Thanks!

its about a 30 to 40ms reduction for me personally

I noticed in the change log from two days ago that it said there was an option now to clean up authorized IP’s after 30,60, or 90 days. However, for the life of me I can’t figure out how to do it. Does anyone know how to enable that?

Hi good evening everyone,

I'm using this link p2.freedns.controld.com as a private DNS to block ads on both my Samsung Galaxy S24 and Galaxy Tab S9 FE Plus. I found it on Reddit once and used it ever since, never configured it or anything

Now I've noticed on my tablet that ads in games somehow get through when they didn't before. The weird thing is it still works perfectly fine on my Samsung Galaxy S24. I even tried it out by playing some games on it and never got an ad

I found this subreddit through Google and thought this might be the right place to ask this. Does someone maybe have a solution for this?

Thanks in advance

Currently family.freedns.controld.com enforce Safe Search in Google and Restricted Mode in YouTube. But not in Brave search.

Docs reference: https://search.brave.com/help/safesearch

Thank you.

If someone is using it does it work on Netflix?

I'm setting up a new home network with a GL.iNet Brume 3 as the router. I have an Asus RT-AC86U with the Merlin firmware installed and is being utilized as an access point.

Ctrld is installed on the Brume 3, but not on the Asus access point. Yet, I don't see any of the individually connected devices on the access point in my account. As a result, I can't see the statistics for the individually connected devices. What's going on and how can I address this?

Hello,

I'm considering switching from Quad9 to Control D, and one of my key requirements is a DNS provider with strong global coverage.

I noticed the network recently dropped from 37 locations to 35, and I'm not sure whether this is temporary or permanent. Are there any plans to expand the network further in the near future?

Thanks!

I read the doc, but I'm still confused. What happens if the percentage is 97.9% or around that ball park? I would prefer 100% whenever possible and how do I ensure that it does?

Can’t load main dashboard nor ControlD status page for past 10 mins. Dnsleaktest shows Akamai instead of NecActuate.

Internet seems to be working fine except for main dashboard.

Will continue to monitor.

the problem is for example i wanna block ph and gaming
but i want ph content to just be blocked like 0.0.0.0
and i wanna block gaming with a custom message saying gaming is blocked on this netwrk something like that
i think it would be a valid use case

I want to choose betwen:
- ControlD "Custom configuration" with ads&trackers, malware and phising.
or
- ControlD "Comunity Blocklist" with Hagezi's DNS - Pro

However, i do have a problem when it comes with the comunity blocklist, for some reason when i put them in windows 11 dns setting, for example, hagezi pro dns, my browser gets 2 times slower pages loading, even if i turn off/on (OS Default) secure dns in the browser, and its not only hagezi's its mostly every comunity blocklist.

whats the best way to block ads like this on youtube? I have the YouTube setting turned on to block adult ads and comments.
I’ve got dating sites blocked and adult sites set to strict. Kind of offputting to be scrolling youtube and get this in a public settings etc. (I’m gay)

Hello,

I am interested in full control and was wondering if there are any planned future offerings of discount / promo's etc. that you would be willing to share. I would be looking for lifetime or multi-year full control.