WireHole UI combines WireGuard, Pi-hole, and Unbound in a Docker Compose project for deploying a managed VPN with ad blocking and DNS caching.
WireHole
WireHole combines WireGuard, Pi-hole, and Unbound in a Docker Compose project for a managed VPN with ad blocking and DNS caching.
About WireHole
WireHole is a Docker Compose project that combines WireGuard, Pi-hole, and Unbound to enable deployment of a personally managed full or split-tunnel VPN. It offers ad and tracker blocking for all connected devices via Pi-hole, private DNS resolution and caching via Unbound, and DNSSEC validation for DNS responses. The stack must be hosted on an always-on Linux machine; macOS, Windows, and WSL2 on Windows cannot serve as hosts, though they can function as VPN clients.
Key features
- Full or split-tunnel WireGuard VPN deployment
- Ad and tracker blocking for all connected devices
- Private DNS resolution via Unbound
- DNS caching for query responses
- DNSSEC validation for DNS answer authenticity
- Self-hosted, no traffic routed through public VPN providers
Best for: It is best for users with access to an always-on Linux server who want to self-host a private VPN with integrated ad blocking and private DNS capabilities.
Good for
- Integrates three tools in a single Docker Compose project for simplified deployment
- Resolves DNS queries directly to authoritative servers, avoiding public DNS providers
- Supports both full and split-tunnel VPN configurations for flexible use
Watch out for
- Only Linux machines can host the stack; macOS, Windows, and WSL2 on Windows are not supported as hosts
- The host server must remain powered on continuously, or VPN-connected devices lose internet access
- Initial setup requires four prerequisites and takes approximately 20 minutes to complete
WireHole at a glance
- Website
- github.com/IAmStoxe/wirehole
- Category
- Privacy & Security › VPNs
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
WireHole alternatives
Tools and sites you could use instead, ranked by how closely they match.
This guide sets up Pi-hole and WireGuard on Ubuntu 24.04 using Google Cloud's free tier, with full-tunnel and split-tunnel configurations.
FreeOpen source
24 alternatives
Gluetun runs a VPN client in a Docker container with multiple providers, OpenVPN or WireGuard, DNS over TLS, and built-in proxy servers.
Open source
24 alternatives
Create a VPN between a client and server across untrusted or restricted networks with DSVPN.
Open source
24 alternatives
Use OpenVPN for secure business access and remote work, with self-hosted or cloud-managed options.
WireGuard Easy provides a web-based admin interface for installing and managing WireGuard on a Linux host.
Open source
24 alternativesPopular in VPNs
Well-known listings from the same topic.
Cloudflare Tunnelsdevelopers.cloudflare.com/cloudflare-one/conne…WireGuardwireguard.comAmneziaamnezia.orgVPN Jantitvpnjantit.comNetBirdnetbird.ioMullvad VPNmullvad.net
WireHole FAQ
Can I host WireHole on a Windows or Mac computer?
No, only Linux machines can host the WireHole stack; Windows and Mac devices can only function as VPN clients.
What happens to my internet if the WireHole server is turned off?
Devices with the VPN enabled will have no internet access until the VPN is switched off.
Does WireHole route my DNS queries to public providers like Google or Cloudflare?
No, Unbound contacts authoritative name servers directly, so DNS queries do not go to public DNS providers.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.