In this article
This article outlines the operating systems supported by the DNSFilter Roaming Client and Relay, as well as web browsers for app dashboard navigation. For details on network-wide deployment, see the Network Deployment Options guide.
Both the Roaming Client and Relay support any DHCP Search Domain (including multiple domains) passed to the original DNS resolver before the agent/relay takes over. Local domains and predefined lists continue to resolve through the original DNS server unless otherwise configured.
Use the Roaming Client for supported endpoints, or the DNSFilter Relay for network-wide and Linux deployments.
We do not recommend installing the Roaming Client or Relay on a domain controller
Most domain controllers also act as DNS servers for the network, meaning they’re already handling name resolution. Adding a Relay or RC on top can create conflicts, since both services attempt to manage DNS traffic simultaneously.
Instead, use Network Deployments to forward DNS traffic — this works especially well in Active Directory environments.
Web Browsers
DNSFilter works in most modern browsers, but we officially support and regularly test:
- Google Chrome
- Microsoft Edge
- Mozilla Firefox
- Apple Safari
We support the latest release and one prior version of each. Other browsers may work but aren’t part of our testing cycle.
Windows Roaming Client
The DNSFilter Windows Roaming Client is a Microsoft Installer (MSI) package and can be installed via Active Directory.
The Windows agent supports Windows 10 or newer (x64) /w .NET Framework 4.8 or higher. Agent version 2.1.0 and higher supports x64 and ARM64 builds, and requires .NET Framework 4.8+ and .NET Desktop Runtime 8.0.
We do not support Windows' Server OS or shared desktop environments of any kind with our Roaming Client. We recommend utilizing DNS Forwarding for the network to keep it protected.
Windows agent support on AWS WorkSpaces/Azure/Cloud VMs
Only the Windows 10 OS (final version rollout update) 22H2 release would support Roaming Clients on Cloud VMs. The Windows 11 OS supports the Roaming Clients already, as it is originally included in the 22H2 update.
Environments operating non-persistent Virtual Desktop Infrastructures (VDIs) may encounter duplicate, offline agents listed in the DNSFilter dashboard as a result. Utilize the Clean Up Tool to maintain accurate licensing counts and user activity.
Windows 365 Cloud PC remains an unsupported environment for the Roaming Client
However, newer Windows agent versions (3.0.x and higher) introduce a Transparent Proxy connection mode that does not rely on DNS loopback. This may reduce some of the compatibility issues seen in earlier releases where Cloud PC blocked the checks required for loopback DNS filtering to function.
Even with Transparent Proxy, Cloud PC environments may apply network or virtualization controls that interfere with DNS interception, resolver routing, or outbound DNS traffic. Because of these restrictions, consistent filtering cannot be guaranteed, and Cloud PC is still not considered a supported platform.
Testing may be possible, but results will vary depending on Cloud PC configuration.
macOS Roaming Client
The DNSFilter macOS Roaming Client is downloaded as a Package Installer.
The macOS Roaming Client supports:
- Sonoma (14)
- Sequoia (15) If running agent 1.8.4 or older, update to the latest agent version before updating to OS 15.
- Tahoe (26)
Chromebook Roaming Client
The DNSFilter Chrome Extension Roaming Client allows you to protect Chrome devices like managed Chromebooks and Chrome browsers.
Android and iOS Roaming Client
The DNSFilter Android App and iOS App protect roaming mobile clients on and off the network.
The apps operate a special VPN which forwards DNS queries to DNSFilter but avoids forwarding the rest of your traffic to our servers–the privacy of your data is ensured.
DNS Relay
The Relay provides DNS protection at the network level and can run on a wide range of operating systems. It’s especially useful for environments where a Roaming Client is not available (such as Linux).
Supported Platforms
- Linux (recommended solution where no native client exists)
- Windows, macOS, or other OS that meet the minimum requirements
- Virtualized environments (e.g., VirtualBox, VMware, cloud VMs)
Minimum Requirements
- 64-bit, 2-core CPU
- 2 GB RAM
Notes
- On some Linux distributions (e.g., Ubuntu), a local DNS resolver may already use port 53. Disable this service before deployment
- The Relay can be deployed via Docker container or as a standalone binary
- If a Relay fails to start, check for conflicts with other local resolvers
Comments
3 comments
The .NET requirements needs some clarification or correction. There are 3 possible .NET runtime packages per https://dotnet.microsoft.com/en-us/download/dotnet/8.0 :
ASP.NET Core Runtime
.NET Desktop Runtime
.NET Runtime
The only package with “Core” in the name is the ASP.NET package, which is for servers and web hosting.
Also, it is called out that both .net Framework 4.8+ and .net Core Desktop 8.0 are required. Is this the case? Do we need to install both of these packages for agent 2.1.0?
Great catch, Charles Jones—and thanks for flagging this! 🙌 We’ve updated the article to clarify the .NET requirements.
To confirm:
Appreciate you helping us keep the documentation sharp!
Please sign in to leave a comment.