Análisis de NextDNS (configurable DoH/DoT DNS filtering)

Análisis

Borrador de Qwen3, verificado por la redacción de serviciovpn · Versión del análisis 2 · Texto actualizado 2026-11-03 · Hechos a fecha de 2026-11-03 · cómo verificamos

Overview

NextDNS is a configurable cloud DNS filtering tool (DoH/DoT/DoQ), not a VPN. It blocks ads, trackers, malware domains and enables parental controls at the network level by securing and filtering DNS queries. Run by NextDNS Inc. (founded 2019 by ex-Dailymotion engineers), it offers granular control, analytics, and user-managed logging. The core caveat: it does not hide your IP, encrypt traffic beyond DNS, or replace a browser ad blocker - this is one layer, not a full privacy stack.

Logging & privacy

NextDNS claims no logging unless explicitly enabled by the user, under a “What You See Is What We Have” policy: when logging is off, request data is discarded immediately. However, this claim rests solely on the operator’s privacy policy - classified as policy-only evidence, with no third-party audit or transparency report. Logging is user-controlled (retention from 1 hour to 2 years) and storage location can be set to the US, EU, UK, or Switzerland. QNAME minimisation and anonymized EDNS Client Subnet are enforced. Crucially, Privacy Guides notes that account creation enables insights and logging by default, meaning the “no logs” stance is a manual setting, not the out-of-box state. Jurisdiction is reported as the United States, with no warrant canary.

Pricing & the renewal trap

There is no renewal trap: the price is flat at $1.99/month or $19.90/year for the Pro plan (personal and family use). The renewal ratio is 1, meaning no price jump after the first term. The Free tier offers 300,000 queries/month - enough for light use but exhausted in days by a household - after which filtering stops silently while DNS resolution continues. Payment methods include cards, PayPal, and cryptocurrencies via BitPay. No refund window is published, and the billing cycle is monthly by default, though annual payment saves 17%. The three_year_cash_total is null in derived_pricing, so the exact three-year cost cannot be verified from available data.

Features & performance

NextDNS supports DNS-over-HTTPS (DoH), DNS-over-TLS (DoT), and DNS-over-QUIC (DoQ), with user-selectable blocklists, security filters (e.g., cryptojacking, typosquatting), parental controls, and real-time analytics. It works on all devices via router, OS, or app-level configuration, including IoT and smart TVs. The service is open-source (CLI tools on GitHub) and scales to 132 server locations. However, it lacks a kill switch, split tunneling, multihop, or dedicated IP features - expected, as it’s not a tunneling service. P2P and streaming are unaffected since IP masking isn’t provided. Performance claims (e.g., latency) are not independently tested here, but user reports cite occasional resolution delays and outages, with no public status page to verify uptime.

Ownership & track record

NextDNS Inc. is described as founder-owned and independent, with no corporate parent or affiliate ties disclosed. Founders are Romain Cointepas and Olivier Poitrey, both with engineering backgrounds at Dailymotion and Netflix. Data quality is verified via operator pages, independent reviews, and community archives. Red flags include the absence of audits or transparency reports despite handling sensitive DNS data, a 2020 incident where signup emails were sent to Intercom (a GDPR complaint, though not involving DNS logs), and recurring user complaints about poor support and development stagnation. Reliability anecdotes from 2026 on r/nextdns and HN report outages and latency issues, with no status page to confirm or address them.

Censorship resistance

NextDNS does not offer obfuscation methods like domain fronting or traffic masking, and its protocols (DoH, DoT, DoQ) are detectable and blockable by sophisticated censors. It is not designed for use in highly censored environments like China, Iran, or Russia. While it can bypass basic network-level filtering (e.g., school or ISP blocklists), it will fail under active DPI or state-level blocking. The service does not position itself as a censorship circumvention tool, and user reports confirm it has been blocked in parts of Russia due to Cloudflare infrastructure dependencies.

Verdict

NextDNS is a powerful, cost-effective DNS filtering layer for households and home offices wanting network-wide ad, tracker, and malware blocking with full control over logs. It’s not a privacy replacement for a VPN and does not hide your IP. Given the lack of audits and default logging with accounts, treat it as a convenience and control tool, not a trustless privacy guarantee. The flat renewal pricing and strong feature set make it safe to recommend for personal use - especially the free tier to test. There is no evidence this provider pays review sites; affiliate links exist but are disclosed.

On the website

Captured by our screenshot bot from the live site (or its public archive). A capture is evidence of what the page showed at capture time - not an endorsement.

FAQ de NextDNS