Ad blocker question. Diversion or pi-hole? Or both?

[chewy74]

So I currently only have diversion running on my RT-AX86U Pro and wondering if I can run pi-hole also at the same time. Or is that overkill? Will it slow speed down?

If only 1 should be used, which one would you recommend keeping?
Thanks for the info

 

[Treadler]

So I currently only have diversion running on my RT-AX86U Pro and wondering if I can run pi-hole also at the same time. Or is that overkill? Will it slow speed down?

If only 1 should be used, which one would you recommend keeping?
Thanks for the info

IMHO, Diversion.

 

[visortgw]

Personal preference, but they both perform similar functions. Diversion is probably easier for a novice. Running both at the same time is not a good idea...

Personally, I transitioned to pi-hole on Raspberry Pi hardware.

 

[Ripshod]

Running both at the same time is not a good idea...

...... though I've never experienced any problems running both. In the last 24hrs Diversion blocked over 20000 domains, and my pihole mopped up an additional 2400. What issues should I be seeing?
If I had to make a choice I would likely keep pihole.

 

[visortgw]

...... though I've never experienced any problems running both. In the last 24hrs Diversion blocked over 20000 domains, and my pihole mopped up an additional 2400. What issues should I be seeing?
If I had to make a choice I would likely keep pihole.

Just configure blocklists of one or the other to cover everything that you want to block.

 

[Ripshod]

Just configure blocklists of one or the other to cover everything that you want to block.

Disabled Diversion to see how it goes. Thanks!

 

[bennor]

So I currently only have diversion running on my RT-AX86U Pro and wondering if I can run pi-hole also at the same time. Or is that overkill? Will it slow speed down?

If only 1 should be used, which one would you recommend keeping?
Thanks for the info

Would you be running Pi-Hole on the router, same router as Diversion is run from, or would you be using separate Pi-Hole supported device? No idea what happens if you try to run Diversion and Pi-Hole from the router itself at the same time.

Otherwise, its personal preference. Some say run only Diversion, others may say run only Pi-Hole.

Personally I run dual Pi-Hole(s) plus Unbound on separate Raspberry Pi's and leave the router to do router things. Generally, other than occasionally running Raspberry Pi OS updates and Pi-Hole program updates, there is nothing to actively maintain on the Pi-Hole. I use Jack Lul's Pi-Hole Update Lists script to pull curated lists from Firebog.net.

In the end, run what works best for your use case and what you're most comfortable with.

 

[chewy74]

I've never used pi-hole before. So I wasn't sure if it was more effective.

Looking at pi-hole it doesn't look much different than what diversion does... Other than pi-hole has a webui

 

[aru]

I think Diversion's reports are very comprehensive, allowing you to see the domain usage and blocking status for each device directly. I haven't used Pi-hole myself, so I'm not sure if it can provide similar functionality.

 

[bennor]

I think Diversion's reports are very comprehensive, allowing you to see the domain usage and blocking status for each device directly. I haven't used Pi-hole myself, so I'm not sure if it can provide similar functionality.

Pi-Hole has fairly similar reporting. It reports, in graphical format, on its home screen:
Total queries
Queries Blocked
Percentage Blocked
Domains on Lists
Client Activity
Query Types
Upstream servers
Top Permitted Domains
Top Blocked Domains
Top Clients (total)
Top Clients (blocked only)

PS: One can dig through the Query Log graphical page to see all the requests.

 

[bbunge]

I've never used pi-hole before. So I wasn't sure if it was more effective.

Looking at pi-hole it doesn't look much different than what diversion does... Other than pi-hole has a webui

While Pi-Hole has a nice GUI it can be confusing to new users. The recent upgrade has also made it more complicated in my opinion. Pi-Hole can be set up to use DoH, DoT or Unbound. With Pi-Hole on an RPI you will have to manage and keep the RPI OS, Debian, up to date.
Save yourself a lot of trouble and use Diversion. It just works!

 

[Tech9]

I personally would prefer AdGuard Home on a separate device.

Home

Network-wide ads & trackers blocking DNS server. Contribute to AdguardTeam/AdGuardHome development by creating an account on GitHub.

github.com

Perhaps the best looking GUI with the most user-friendly options.

It can run on the router as well, available in AMTM.

AdGuardHome - [RELEASE] Asuswrt-Merlin-AdGuardHome-Installer (AMAGHI)

Asuswrt-Merlin-AdGuardHome-Installer The Official Installer of AdGuardHome for Asuswrt-Merlin Requirements: ARM based ASUS routers (not bridges or access points) that use Asuswrt-Merlin Firmware JFFS support and enabled REQUIRES ENTWARE(!) for package management, and a separate USB drive for...

www.snbforums.com

 

[Untried3868]

Personally I run dual Pi-Hole(s) plus Unbound on separate Raspberry Pi's and leave the router to do router things. Generally, other than occasionally running Raspberry Pi OS updates and Pi-Hole program updates, there is nothing to actively maintain on the Pi-Hole. I use Jack Lul's Pi-Hole Update Lists script to pull curated lists from Firebog.net.

I'm doing the same with the exception of the Jack Lul update script (I use cron to update lists daily) and Firebog. I found Firebog lists (only green checked) was blocking sites I frequently use.

Been using Steven Black, OSID Big, HeGaZi (Ultimate, TIF, Most Abused TLDs), Phishing Army, and Samsung TV lists without issue. Overkill? Perhaps. But it works for me.

 

[Gary_Dexter]

I'm doing the same with the exception of the Jack Lul update script (I use cron to update lists daily) and Firebog. I found Firebog lists (only green checked) was blocking sites I frequently use.

Been using Steven Black, OSID Big, HeGaZi (Ultimate, TIF, Most Abused TLDs), Phishing Army, and Samsung TV lists without issue. Overkill? Perhaps. But it works for me.

If you’re using Hagezi Ultimate you don’t need the Steven Black, OISD, Phishing Army or the Samsung TV lists.

 

[Untried3868]

If you’re using Hagezi Ultimate you don’t need the Steven Black, OISD, Phishing Army or the Samsung TV lists.

Is this true? OISD is so much bigger of a list than Hagezi ultimate.

 

[chewy74]

Is this true? OISD is so much bigger of a list than Hagezi ultimate.

If you’re using Hagezi Ultimate you don’t need the Steven Black, OISD, Phishing Army or the Samsung TV lists.

I have Steve black and hagezi ultimate on diversion. Should I get rid of Steve black?

 

[Treadler]

I have Steve black and hagezi ultimate on diversion. Should I get rid of Steve black?

Use whatever lists you want, cleverly, Diversion de-duplicates what you have, so a ‘bad site’ on each of (say) 4 different lists, is only referenced once by Diversion.

 

[bennor]

Use whatever lists you want, cleverly, Diversion de-duplicates what you have, so a ‘bad site’ on each of (say) 4 different lists, is only referenced once by Diversion.

Generally Pi-Hole does something similar. Generally Pi-Hole Gravity, when it updates, will have a total number of domains and then a unique number of domains and it may ignore invalid domains. Pi-Hole Gravity update output example: Number of gravity domains: 971852 (786641 unique domains)

 

[Untried3868]

Gravity update output example: Number of gravity domains: 971852 (786641 unique domains)

You're right, and I never noticed this before:
Number of gravity domains: 1243231 (1054220 unique domains)

After removing Steven Black, OISD, Phishing Army and SamsungTV lists:
Number of gravity domains: 780564 (695275 unique domains)

 

[Untried3868]

I noticed Samsung telemetry sites were now being allowed rather than blocked after the above changes. Enabling the Samsung block list added 28 domains in total, which translated to an exact increase in unique domains after gravity update. Clearly there is no overlap between this list and the remaining three Hagezi lists.

I'm going to have to experiment with the others. Will report back with findings as time allows.