DNS Firewall vs DNSimple

Please note, an active Enterprise DNS Firewall account subscription is required - https://dnsfirewall.oryxlabs.com/ DNS Firewall roaming client is a DNS based security solution that protects your iOS device from malicious, unauthorized, or inappropriate web content by analyzing DNS queries and blocking malicious domains in real-time. The roaming client is a standalone application and secures your DNS traffic whether you are connected to your corporate network, public Wi-Fi or any other network globally. For company-owned devices in supervised mode, administrators can perform bulk deployment using any MDM solution. Alternatively for BYOD devices, administrators can share a one-time authentication code for devices to start using DNS Firewall.

DNSimple gives you control over DNS on iPhone and iPad through a local DNS tunnel. Use encrypted DNS-over-HTTPS by default, choose from Cloudflare, Google, Quad9 and AdGuard presets, or enter your own resolver. The dashboard shows the active configuration, resolver health and the last responding resolver. PRIVATE HISTORY, YOUR CHOICE Recording is optional and off by default. Keep records on your device with iOS file protection and backup exclusion, or choose memory-only history that disappears when recording stops or the tunnel ends. Choose a retention period of 1 hour, 24 hours, 7 days or 30 days. Expired records are removed while running or when you next open the app. Switching storage clears existing history. UNDERSTAND YOUR DNS Search and filter requests by domain, resolver, query type, errors, local overrides or unencrypted transport. Inspect DNS response codes, response times and the actual responding resolver. Statistics show the retained history window, with up to 20,000 on-device records or 2,000 memory-only records. CONTROL YOUR RESOLVER - DNS-over-HTTPS with HTTPS certificate validation - Standard DNS with UDP and TCP support - Custom IPv4 and IPv6 DNS servers - Custom hosts overrides - Live recording controls and resolver health checks - Plaintext fallback disabled unless you explicitly enable it DNSimple does not require an account and has no advertising or analytics. DNS history stays on your device. Selected bootstrap servers resolve the DoH endpoint hostname; website DNS queries use HTTPS unless you enable plaintext fallback. Your selected resolver can see the queries it handles. DNSimple changes system DNS. It does not hide your IP address or encrypt other app traffic. Apps using their own DNS can bypass the tunnel and will not appear in history. When disconnected, iOS uses its normal DNS settings.