The DNS Problem
Every time you visit a website, your device sends a DNS query β essentially asking "what's the IP address of example.com?" Even with a VPN, these queries can leak to your ISP or a third-party DNS provider, exposing every site you visit.
Most VPNs claim to protect DNS, but many simply redirect queries to Google (8.8.8.8) or Cloudflare (1.1.1.1). You've moved trust from your ISP to a tech company β not eliminated it.
How DNS Guard Works
Astria VPN takes a different approach. Every VPN node runs its own recursive DNS resolver (unbound) that answers queries directly β no forwarding to third parties.
Here's what happens when you connect:
- DNS Guard activates automatically and redirects all DNS queries through the encrypted VPN tunnel.
- Queries reach unbound on the VPN node, which resolves them recursively β starting from root servers, not a third-party cache.
- Responses return through the same encrypted tunnel.
No query ever leaves the node unencrypted. No third-party DNS provider sees your browsing history.
Built-in Ad and Tracker Blocking
On top of DNS resolution, every node maintains a blocklist of 85,000+ domains associated with advertising, tracking, and malware. When a blocked domain is queried, the resolver returns NXDOMAIN β the domain simply doesn't exist.
This works at the network level, so it blocks ads and trackers in every app on your device β not just the browser.
You can configure which categories to block in the app settings: ads, trackers, and malicious sites are each toggleable independently.
Two Modes
AstriaVPN DNS (default) β all queries go through the encrypted tunnel to our resolver. Zero third-party involvement.
Manual β you specify your own DNS servers (for example, a Pi-hole on your home network or a corporate DNS). Queries still go through the VPN tunnel, but resolve at your chosen servers.
Why This Matters
Your DNS history is a complete record of every service, website, and API your device contacts. Protecting it isn't optional β it's fundamental to privacy.