New Feature: Easily pause your ad blocker with a new toggle in the main app and large widget. This lets you access sites with anti-adblock walls while keeping your other ADFastDNS privacy protections active. Bug Fixes and Performance Improvements.

A few exciting new features: - Who said that a complex security tool like ADFastDNS requires an expert user? Choose your protection level in one tap: Minimum, Medium, or Max right from the Home screen. Minimum enables DNS filtering with curated blocklists. Medium adds Anti-DPI to defeat deep packet inspection. Max adds full on-device intrusion detection (HIDS) for JA4 fingerprinting and threat scoring. No manual configuration required. Prefer full control? Every individual setting is still there for advanced users in the DNS/AD Blocking, Anti DPI, and HIDS tabs. - Adaptive traffic shaping. ADFastDNS now learns and mimics the natural timing patterns of each connection, making proxy traffic statistically harder to detect and throttle. Fully on-device, private by design. No toggle to enable, it is enabled by default. - We have fixed an issue in the TCP/IP state machine that could corrupt packet's retransmission - We have fixed an issue in the stateless TCP/IP 3WH that could have caused the first packet to be lost causing the connection to be corrupted - We have fixed an issue that may required a manual restart of ADFastDNS after reboot as the network could be unreachable. - We have made significant optimisation for performance and energy efficiency.

We are quite excited to unveil a new Anti DPI feature: Adaptive Connection Tuning. ADFastDNS can learn, per connection, whether splitting the connection's initial TLS Hello Packet helps or hurts reliability and adjust automatically over time. This learning happens entirely on your device; nothing is sent anywhere. - [Anti DPI fix] We have fixed a bug that could compromise the reliability of ECH (Encrypted Client Hello) connections - [Anti DPI fix] We have fixed a bug that in some edge cases could corrupt the splitting of the TLS Hello Packet

Minor Ux bug fixing

We have worked deep in the Transparent Proxy implementation to make ADFastDNS more fast, more secure, less resource eager and more RFC compliant. This is the most optimised version since the first release. More Features Added: - We have added support for QUIC protocol, particularly the Transparent Proxy is now fully supporting QUIC Connection Migration (RFC 9000 §9). This feature guarantee continuos connectivity in case of connection lost avoiding restarting expensive TLS Handshakes. - We have added a new toggle in the Anti-DPI section to completely disable QUIC. This may be required to force your device using HTTP2/TCP over TLS to guarantee speed and reliability on restricted networks. - We have added QUIC statistics

You request, we hear, and we implement! Socks 5 Server in the main app - Extend ADFastDNS filtering to any device on your network by directing its SOCKS5 proxy to your ADFastDNS device HIDS: - The intrusion detection system now includes DNS Exfiltration protection, detecting any connections attempting to smuggle data through malformed DNS queries, bypassing HTTP tracking detection Statistics: - We’ve added location statistics for all transparent proxy connections, featuring a stunning world globe animation. Bug fixes and performance enhancements.

You ask we execute! - Statistics are now persistent across sessions with a retention time of 1 week. We have added a button to clear them all - We have completed the process of exposing the Proxy's Data in the statistics, included in this release statistics details related to direct IP connections blocked via firewall / non DNS resolved IP. - We have included a new IP whitelist view where the user can whitelist specific IPs - We have improved the reliability of the transparent proxy with IPv6 - We have improved the performance after the device reboot. Bug Fixes and performance improvements.

We have improved our intrusion detection with brand new features that all run on-device. Beacon Guard Beacon Guard monitors how frequently your device connects to remote servers over time, building a persistent memory of connection patterns across sessions. Malware and spyware often communicate with remote command-and-control servers at regular intervals a technique known as beaconing to receive instructions or exfiltrate data. Unlike standard traffic filters that only inspect individual connections, Beacon Guard detects suspicious periodicity patterns that persist across network changes, IP address rotations, and app restarts, flagging destinations that exhibit metronomic regularity consistent with automated malicious software rather than normal human-driven app usage. TLS Anomaly Detection TLS Anomaly Detection analyses the cryptographic handshake metadata of encrypted connections without inspecting or decrypting any private content. Every encrypted HTTPS connection begins with a negotiation phase that reveals characteristics about the software initiating it the cipher suites it supports, the TLS version it prefers, and the protocol extensions it advertises. Legitimate apps running on iOS produce consistent, well-formed handshakes. Malware, spyware implants, and network intrusion tools frequently produce handshakes with anomalous characteristics missing standard extensions, unusual cipher selections, or cryptographic fingerprints that don't match the software they claim to be. TLS Anomaly Detection scores each connection across fifteen independent indicators, correlating the initial connection request with the server's response to identify suspicious negotiation patterns in real time. Hello Packet Anomaly Detection Hello Packet Anomaly Detection performs deep inspection of TLS ClientHello packets the opening message of every encrypted connection to identify connections that deviate from the patterns produced by Apple's native networking stack. Each TLS implementation leaves a distinct fingerprint in the structure and ordering of its handshake fields. ADFastDNS uses JA4 fingerprinting, a cryptographic identification technique, to classify the TLS stack initiating each connection and cross-reference it against a continuously updated database of known malicious fingerprints. Connections that impersonate legitimate browsers or operating system components, advertise outdated or deliberately weakened cryptographic parameters, or originate from TLS stacks associated with known malware frameworks are flagged and blocked before any data is transmitted. Bug fixes and performance improvements

We are continuing our journey to expose ADFastDNS data to the User: - Added statistics detail about Hello Packets fragmented - JA4 Now support a more detailed statistic view with detailed information about the blocked signature Further Improvements to highlight: -We have improved the heuristic algorithm to detect malware using JA4 which led to a reduction of the database list of 90% (please update the JA4 list to get the benefits of this) - Added SNI White List for Hello Fragmentation this to address servers that may not accept fragmented TLS packets in multiple TLS records - Added an option to enable ADFastDNS for hosts in your local WiFi network Bugs fix and performance improvements

ADFastDNS 4.0: Faster, Cleaner, and More Secure Than Ever. We are incredibly proud to pull back the curtain on ADFastDNS 4.0. This isn't just a minor patch we focused entirely of improving the user experience and the performance. A Reimagined Interface A powerful tool shouldn’t be a headache to use. We have forged a completely new user interface designed to be as intuitive as it is beautiful. The new dashboard provides a "glass box" view of your network, bringing our 3 Pillars of Protection directly to the forefront: DNS Security: Encrypted DNS and ADs blockers are the foundation of privacy, Real-time threat intelligence to block malicious domains before they even reach your device Anti-DPI: Stop your ISP to catalog your navigation and filter your traffic HIDS: On Device Intrusion detect system that protects your personal data to flight on a malicious server. We have also updated the onboarding section to reflect all the above. Want to dive deeper? Our Support Page contains technical breakdowns and a guide on how to get the most out of it.

- Completely revamped statistics section with new data. - Bugs fix and performance improvements

- Added strict domain validation in User's blocklist/whitelist - Added Toggle to enable/disable biometric authentication for statistics. Bug fixes and performance improvements

Bug fixes and performance improvements

Trial Duration is now 7 days. Bug Fixes and Performance Improvements

Bug Fixes and performance improvements

- Geo IP Firewall: You can now setting blocking rules per country - ASN (Autonomous System Numbers) IP List: Is now used to significantly reduce the false positives detected in TLS SNI/IP protection feature As always bug fixes and performance improvements for the best user experience.

Bug Fixes and Performance Improvements

Bug Fixes and Performance Improvements

1) You can set a second DNS/DoH URL for redundancy and privacy, the queries will be randomly resolved by one of the two. Using this strategy no single DNS server would be aware of your entire browsing history. 2) The Home and Statistics views got a major revamp Bug Fixes and Performance improvements

Version 3.1 introduces advanced new HIDS protections. These include: - Advanced tracker protections with cloak protection and deep analysis of all resolved chains.   - The Tunnelling Protector prevents DNS tunnelling, a technique used by attackers to bypass security measures like firewalls and exfiltrate data or establish command-and-control.  - The Rebinding Protector stops DNS rebinding attacks where malicious websites use your browser as a bridge to attack smart home devices or routers, preventing external websites from resolving to local IP addresses like 192.168.1.1. Statistic view data can now be manually updated by scrolling down past the boundary.   There are also bug fixes and under-the-hood performance improvements.

Bug Fixes and Performance Improvements

Bug Fixes and Performance Improvements

Added Biometric authentication to protect the statistics view Bug Fixes and Performance improvements.

Version 3.0 introducing a significant evolution in ADFastDNS enabling a third leg of protection for the user HIDS (Host Intrusion Detection System) monitors and analyses your device’s network traffic in real-time. It detects and eventually blocks potential malicious activity using heuristic models and signature-based detection. Importantly, no information is sent to an external server; everything is processed on the device. Anti Malware and Anti Spyware Protection: This anti-malware and anti-spyware protection offers a comprehensive blocking list to safeguard your device against even sophisticated spyware like Pegasus. IP Firewall: Similar to a standard industry firewall, you can blacklist any IP to protect your device from malicious hosts. HearthBit Detection: This feature detects and blocks bot activities. Blocking Direct IP Connections: You can block direct IP connections that don't belong to any hostname. TLS-SNI Lookup: This feature blocks connections that mismatch the TLS-SNI hostname and destination IPs. JA4 Fingerprint: It blocks malicious JA4 TLS signatures using standard industry blocking lists. Bug Fixes and performance improvements. As we always listen from your feedback we have improved the user experience in the statistics view.

Bug Fixes and performance improvements.