Executive Summary

I implemented a network-wide DNS-based ad blocker using Pi-hole on a Raspberry Pi Zero W. This project enhances my home network privacy and security by preventing tracking and malicious domains from loading at the DNS level, while simultaneously improving network performance by reducing bandwidth consumption from unwanted content. I figured it could also help my family when browsing ad-filled websites as well as some streaming services.

Tools & Technologies

• Hardware: Raspberry Pi Zero W, TP-Link Router
• OS: Raspberry Pi OS Lite (32-bit).
• Software: Pi-hole (FOSS).
• Protocols: DNS (Port 53), SSH (Port 22), DHCP, HTTP/S (Web Admin).
• Networking: Static IP Reservation, DNS Forwarding.

Methodology (The Action)

Phase 1: Environment Provisioning

The initial setup focused on creating a stable, headless Linux environment.

• Imaging the Raspberry Pi OS: I used the Raspberry Pi Imager (on Mac) to flash the PI OS onto a micro SD card, pre-configuring my Wi-Fi SSID and Password for immediate connectivity.

  

• Secure Remote Access: Established a secure SSH connection to the Pi via Mac command line. This allows for remote management without the need for a dedicated monitor/keyboard.

Phase 2: Deployment & Configuration

• Pi-hole Installation: Executed the automated installation script. During this phase, I selected upstream DNS providers (e.g., Cloudflare/OpenDNS) to handle external queries.

curl -sSL <https://install.pi-hole.net> | bash

• Network Persistence: Logged into the router’s gateway to assign a Static IP (DHCP Reservation) to the Pi. This ensures that the DNS server's address never changes, which would otherwise lead to a total loss of internet connectivity for the network.

Phase 3: Traffic Redirection