Unlocking Digital Privacy: Building a Network-Wide Ad-Blocking DNS Server with AdGuard Home on Oracle Cloud Free Tier

Introduction: The Quest for a Cleaner Internet

In the contemporary digital landscape, the average internet user is bombarded by a relentless stream of advertisements, telemetry scripts, and invasive trackers. These elements do more than just clutter your screen; they consume bandwidth, degrade device performance, and compromise personal privacy. While browser-based extensions offer a partial solution, they fail to protect mobile applications, smart TVs, or IoT devices. The definitive solution lies in Network-Wide DNS Filtering.

By utilizing AdGuard Home on an Oracle Cloud Infrastructure (OCI) Free Tier virtual private server (VPS), you can establish a robust, private DNS gateway that scrubs malicious content before it ever reaches your network. This guide details the professional implementation of this enterprise-grade privacy tool.

Why AdGuard Home and Oracle Cloud?

Choosing the right hardware and software stack is critical for a service as fundamental as DNS. AdGuard Home acts as a recursive DNS resolver that matches queries against blocklists. When a device requests an ad-serving domain, AdGuard Home returns a 'null' address, effectively making the ad disappear.

• Oracle Cloud Free Tier: Provides high-performance ARM-based Ampere instances with up to 24GB of RAM, which is significantly more than sufficient for a DNS server.
• AdGuard Home: Offers a user-friendly web interface, superior customizability compared to Pi-hole, and native support for modern encrypted protocols like DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT).
• Cost-Efficiency: This setup leverages 'Always Free' resources, providing a premium security layer for $0 per month.

Step 1: Provisioning Your Oracle VPS

The first step involves setting up your infrastructure. Log in to your Oracle Cloud Console and navigate to Compute Instances. When creating your instance, select Ubuntu 22.04 or Oracle Linux 8 as your Operating System. For the shape, the VM.Standard.A1.Flex (ARM Ampere) is highly recommended for its efficiency.

Note: Ensure you save your SSH private key during creation, as you will need it to access the server's terminal.

Once the instance is 'Running,' note your Public IP Address. This will serve as your primary DNS server address later in the process.

Step 2: Configuring the Network Security List

By default, Oracle Cloud blocks almost all incoming traffic. You must modify the Ingress Rules in your Virtual Cloud Network (VCN) to allow DNS traffic and access to the AdGuard dashboard. Open the following ports:

1. TCP/UDP 53: Standard DNS traffic.
2. TCP 3000: AdGuard Home initial setup wizard.
3. TCP 80/443: For the web dashboard and SSL certificates.
4. TCP/UDP 853: For DNS-over-TLS (optional but recommended).

Warning: Ensure you apply these rules to the correct Security List associated with your subnet to prevent connection timeouts.

Step 3: Server Preparation and OS-level Firewall

Connect to your VPS via SSH using the command: ssh -i your_key.key ubuntu@your_public_ip. Once connected, update your system packages to ensure all security patches are applied:

sudo apt update && sudo apt upgrade -y

Since Ubuntu's systemd-resolved service often occupies port 53, you must disable it to allow AdGuard Home to handle DNS queries:

sudo systemctl stop systemd-resolved
sudo systemctl disable systemd-resolved

Next, configure the internal OS firewall (IPtables or UFW) to match the Oracle VCN rules you set earlier, ensuring the traffic can pass through the OS layer to the application.

Step 4: Installing AdGuard Home

The installation of AdGuard Home is streamlined via an automated script. Execute the following command in your terminal:

curl -s -S -L [https://raw.githubusercontent.com/AdguardTeam/AdGuardHome/master/scripts/install.sh](https://raw.githubusercontent.com/AdguardTeam/AdGuardHome/master/scripts/install.sh) | sh -s -- -v

After the script completes, the service will be running in the background. Open your web browser and navigate to http://your_public_ip:3000 to begin the configuration wizard. Follow the on-screen prompts to set your admin username and password. Pro tip: Set the management interface to listen on all interfaces so you can access it remotely.

Step 5: Optimization and Blocklist Management

Once the dashboard is accessible, navigate to Filters > DNS Blocklists. While AdGuard includes several default lists, adding curated lists like OISD or HaGeZi's Multi-Pro can significantly improve blocking efficiency without breaking legitimate website functionality.

To enhance privacy, go to Settings > DNS Settings and configure your Upstream DNS servers. Instead of using your ISP's DNS, utilize encrypted providers such as:

• Cloudflare (1.1.1.1)
• Quad9 (9.9.9.9)
• Google (8.8.8.8)

Enabling DNSSEC validation is also highly recommended to prevent DNS spoofing attacks, ensuring that the responses you receive are authentic and haven't been tampered with in transit.

Step 6: Connecting Your Devices

With your server fully operational, you must point your devices to its Public IP address. There are several ways to implement this:

1. Router Level (Recommended)

Change the DNS settings in your home router's WAN or DHCP configuration. This ensures that every device connected to your Wi-Fi—from your smartphone to your smart fridge—automatically benefits from ad-blocking without individual configuration.

2. Device Level

For mobile devices frequently used on cellular data, configure a Private DNS provider (Android) or use an Apple configuration profile (iOS) pointing to your AdGuard Home instance using DNS-over-TLS. This maintains your privacy even when you are away from home.

Conclusion: A Faster, Safer Digital Experience

By deploying AdGuard Home on Oracle Cloud, you have effectively reclaimed control over your network traffic. You now possess a centralized, high-performance tool that filters out the 'noise' of the modern web, resulting in faster page load times, reduced data consumption, and a significantly smaller tracking footprint. This project exemplifies how professional-grade cloud infrastructure can be harnessed for personal digital sovereignty.

As a final reminder, remember to periodically check for AdGuard Home updates via the dashboard and monitor your Oracle Cloud usage to ensure you stay within the 'Always Free' constraints.