Add content blocking proxy settings

[ameshkov]

We're going to add the proxy module in v0.102: https://github.com/AdguardTeam/AdGuardHome/issues/391

Here's the necessary minimum that should be configurable:

• Enable/disable
• Filter lists (consider extending /#filters)
• Certificate (we should generate it by ourselves, we should allow users to download this cert)
• Port, network interface
• Proxy authentication
• Proxy types: HTTP, HTTP over TLS

[Eyeborgs]

Proxy types: HTTP, HTTP over TLS

socks5 will not? or will this be for the future?

[rufengsuixing]

Transparent Proxy for routers with iptables？just need to listen the port，i will do the iptables config in my luci project

[ameshkov]

socks5 will not? or will this be for the future? Transparent Proxy for routers with iptables？just need to listen the port，i will do the iptables config in my luci project

Not at first. But in the future -- of course, we'll add both of these options.

[ghost]

@ameshkov is this issue include about add separate pages for place cosmetic filtering rules lists? #155 #677 #639 #903 #920 #1045 #1132 #1319 #1397 #1455 #1480 #639

[ameshkov]

@ArchiveBase yeah, I guess we can use either this one or #391

[JACK-THINK]

@ameshkov

Support for socks5 proxy is very important. Thanks a lot.

[temporallyaccount]

Issues' i thought to mention

1. Related logs https://github.com/AdguardTeam/AdGuardHome/issues/391#issuecomment-546719880

@R9980 so will we able to have another 'usage log' (hosts - both domains/ip) additional to 'query log' for web user interface with inbound/outbound bandwidth for each hosts?

yes, the proxy server will have a different log

2. Usage bandwidth https://github.com/AdguardTeam/AdGuardHome/issues/1572
3. Decentraleyes/LocalCDN https://github.com/AdguardTeam/AdGuardHome/issues/2148

[91ajames]

Would this work with a proxy of http://wl.is/ .js file provided by https://www.weblockapp.com by any chance? Blocks ads with'n apps and including the youtube app that I used several yrs ago.

[mrbluecoat]

+1

[mrbluecoat]

I'm a bit confused. #391 was closed because it appears tracking of the issue transitioned to this one. One of the posts indicates you had to create https://github.com/AdguardTeam/gomitmproxy and people can try an early release via https://github.com/AdguardTeam/urlfilter/tree/master/cmd Is there an up-to-date quickstart guide that explains how to use AdGuardHome with custom CA proxy?

[ameshkov]

@mrbluecoat it's not yet integrated into AGH so the only way to experiment with the proxy is to follow the instruction there: https://github.com/AdguardTeam/urlfilter/tree/master/cmd

I.e. you'd need to build it yourself.

[thirdbyte]

Is it feasible to add a VPN server to which all local devices would connect to and that's how HTTPS filtering would work? Just as it happens in AdGuard applications. I guess that would be more sorted than configuring proxy on each device. Moreover, VPN would enable AdGuard Home to deal with IP addresses (for devices connected through VPN) and hence support for firewall rules are also possible.

[hplee0120]

Looking forward to the feature going live, two years have passed. .

[jm33-m0]

Hi, in https://github.com/AdguardTeam/AdGuardHome/wiki/Configuration#configuration-file, is http_proxy supposed to proxy AdGuard's DNS over HTTPS requests?

I have tested and it won't work reliably

[savely-krasovsky]

@jm33-m0 http_proxy is only used for HTTP-client. For example your AGH setup has internet access only through proxy.

[jm33-m0]

@L11R

For example your AGH setup has internet access only through proxy

So it means all upstream DNS (over HTTPS) requests will go through the proxy configured in http_proxy field, but in my test it just ignores my http_proxy and connects to DoH server directly.

I turned to used other solutions in the end, two AGH servers, one of which is used as upstream for the other, both in the same VPN so not affected by DNS poisoning.

[Dominik-1980]

Hello.

I just saw this thread. I am not so familiar with adguard. Is it now possible to block youtube and other adds with the current version of adguard home over proxy?

[erdoukki]

Héllo, is it still not integrated in AGH ? Is there any advice to help testing ?

[ameshkov]

Nope, not yet integrated. I'll be really-really happy if we do that until the end of the year.

[Karmylr]

When to integrate this feature?It was postponed many times and I cant wait.

[cirfis]

+1

[ihuaer]

good job can not wait any more

[savely-krasovsky]

If you cannot wait -- do it yourself.

[erdoukki]

@mrbluecoat it's not yet integrated into AGH so the only way to experiment with the proxy is to follow the instruction there: https://github.com/AdguardTeam/urlfilter/tree/master/cmd

I.e. you'd need to build it yourself.

Thanks... I will have get some tests on this...

[Dominik-1980]

Any progress on this?

[kurokawaikki]

Is this feature going to implement soon? Thanks!

[Karmylr]

Is this feature going to implement soon? Thanks!

This plan keeps being postponed

[smaktacular]

ACME support for people running step-ca would make certificate handling signifcantly easier imho.

See https://smallstep.com/docs/step-ca for further reference.

[SaschaM-Dev]

Is there any ETA for this feature? DNS blocking keeps getting worse, as - obviously - marketers / ad companies know about that.

[ainar-g]

No ETA, unfortunately. Any work on this feature will have to wait until we fix a number of issues that have long been plaguing AGH in the v0.108 cycle.