
Aegis
Network-wide DNS sinkhole that doubles as a productivity tool. Blocks ads, trackers, and whole services like social media at the resolver, with per-client policy, schedules, and a node graph of live network traffic.
Outcome: Runs the whole network's DNS from a single binary: about 6% of live queries blocked as ads, trackers, and telemetry, while everything else still resolves normally.



