DNS On The Go

What you can do

Profiles. Turn filters on and off, set services to block, bypass or redirect, write custom rules and folders, and change profile options like the Default Rule and Default Location. The profile this phone uses is highlighted.

Endpoints. See every device with its last activity, profile, analytics level and ctrld version. Create, edit and delete endpoints, check resolvers, and manage clients and known IPs.

Statistics. Blocked, bypassed and redirected totals, a security overview, query charts, traffic categories, trends and top lists, for any time range, profile or endpoint.

Activity log. DNS queries with filters for endpoint, client, action, protocol and more, live as they happen if you like. Open any query for details, including what Control D's Dragonfly knows about the domain, or turn it into a rule with one tap.

Domain Test. Check how any endpoint answers a domain (blocked, bypassed or redirected, and by which filter, service or rule).

Widgets (beta). Your blocked share, counts and an activity chart on the home screen, for any period, profile or endpoint.

Account. Billing and receipts, account settings, Control D's changelog, and the same check as controld.com/config.

Install

1. Download the latest DNS-OTG-x.y.z.apk from Releases on your phone.
2. Open it. If Android asks, allow installing apps from your browser or file manager.
3. Sign in.

Updates install over the previous version and keep you signed in. Requires Android 8.0 or newer.

Help test on Google Play

DNS On The Go is in closed testing on Google Play and needs testers before it can go public. To join:

1. Join the Google Group groups.google.com/g/dns-otg with the Google account you use on your phone.
2. Open play.google.com/apps/testing/app.dnsotg and tap Become a tester.
3. Install the app from Google Play and keep it installed for at least 14 days.

You don't need a Control D account to help: installing and keeping the app is enough. If you already have the GitHub version, uninstall it first, because the two are signed differently.

Signing in

• Tap Open Control D. The dashboard's API page opens in your browser, where you sign in as usual (email and password, Google or SSO, with 2FA or passkeys).
• Tap + to create a token, choose Write, and copy it.
• Back in the app, tap Use on the copied token, or paste it into the token box.

The app never sees your password: it only keeps the token you made.

Already have a token? Tap Paste an API token. If one is on your clipboard when you open the app, it offers to use it.

Privacy

• Your token is encrypted with the Android Keystore and never leaves your phone except to authenticate with Control D.
• The app talks only to Control D's own servers. No analytics, no ads, no tracking, no servers of its own.
• The GitHub version also checks GitHub Releases for updates and shows a download link when a new version is out. The Google Play version leaves updates to Play.
• Full details in the privacy policy.

Build

Open the project in Android Studio, or run:

./gradlew assembleDebug

Debug builds install next to the release app (app.dnsotg.debug). Release builds are signed with the key in a keystore.properties file (storeFile, storePassword, keyAlias, keyPassword) whose path is set with the DNSOTG_KEYSTORE_PROPS environment variable; without one they fall back to the debug key. The Draft release GitHub workflow builds a signed APK into a draft release from repository secrets.

Credits

• Icons: Solar by 480 Design, CC BY 4.0
• Brand logos: Simple Icons (CC0). Each logo is a trademark of its owner.
• Protocol badge lettering: Nunito, SIL Open Font License

License

MIT. The icons and logos listed under Credits keep their own licenses.

Disclaimer

DNS On The Go is an independent project. It is not made by, affiliated with or endorsed by Control D. Control D is a trademark of its owner.