Faro
Faro lighthouse logoA little clarity for your network.

Understand and protect
your network with
self-hosted DNS.

Faro shows which devices are requesting domains, what gets blocked, and why. Run it on your own hardware and manage DNS from one clean interface.

Get started View on GitHub

Open source Self-hosted No cloud account required

YOUR NETWORK, AT A GLANCEBuilt on CoreDNS
Faro dashboard showing DNS traffic, blocked requests, active devices, cache performance, and upstream resolver health.
The Faro dashboard. Real interface, example data.View full size

Understand your network

See DNS activity by device, domain, block reason, cache result, and upstream response.

Protect without losing control

Use blocklists, per-device protection profiles, schedules, and exceptions.

Keep it yours

Faro is self-hosted. DNS history and configuration stay on your hardware.

01 / Activity

See what every
device is doing.

Search live and historical DNS activity. See which device requested a domain, whether it was allowed or blocked, and why.

Explore activity
Faro Activity page showing a DNS request timeline, device and domain filters, and allowed, blocked, and cached requests.
Follow a request from device to answer.View full size

02 / Devices

Know your devices.

Give devices names that mean something. Review their activity and assigned protection in one place. Optionally connect a local UniFi controller to help identify them.

Meet your network
Faro Devices inventory with example device names, IP addresses, query counts, blocked requests, and protection assignments.
A clearer picture of the devices on your network.View full size

03 / DNS, made understandable

DNS without the
airplane cockpit.

CoreDNS does the DNS work. Faro makes the everyday tasks understandable, from naming a home server to keeping a second DNS server ready.

Read the documentation
Local DNS
Give services on your network their own names.
Encrypted upstreams
Choose DNS-over-HTTPS providers, with health checks and failover.
Protection
Set network-wide rules or tailor protection to a device.
Redundancy
Pair a primary server with read-only DNS replicas.

A simple path. Your choice.

Your network. Your DNS.

Faro uses CoreDNS to answer DNS requests and forwards requests it cannot answer locally to the upstream provider you choose.

Your DNS history and configuration remain local.

Choose how much history to keep. Create encrypted backups and restore them from the interface.

Get started

Running in a few minutes.

Bring an always-on machine with Docker Compose, a fixed local IP, and port 53 available for DNS.

Docker Compose / Linux & macOS
mkdir faro && cd faro
curl -LO https://raw.githubusercontent.com/derek-diaz/Faro/main/docker-compose.yml
docker compose up -d

  1. 01

    Open http://YOUR-FARO-IP:1787 and follow the guided setup.

  2. 02

    Point your router or one device’s DNS setting to Faro’s local IP address.

Installation guide Unraid guide Using Windows?

Apache 2.0 · Always inspectable

Built in the open.

Faro is open source under Apache 2.0. Issues, ideas, and contributions are welcome.

Built and maintained by Derek Diaz Correa in Puerto Rico.

View Faro on GitHub