Compare Control D vs. Shadowrocket

Control D is a customizable DNS filtering and traffic redirection platform that leverages Secure DNS protocols like DNS-over-HTTPS, DNS-over-TLS and DNS-over-QUIC, with support for Legacy DNS. With Control D you can: block malicious threats, block unwanted types of content network wide (ads & trackers, IoT telemetry, adult content, socials, and more), redirect traffic using transparent proxies and gain visibility on network events and usage patterns, with client level granularity. Think of it as your personal Authoritative DNS resolver for the entire Internet that gives you granular control over what domains get resolved, redirected or blocked.

Shadowrocket is a proxy tool that operates on rule-based principles to capture and redirect all types of traffic—HTTP, HTTPS, DNS, and TCP—from any application to a designated proxy server, enabling users to analyze each request in detail. Users can establish rules based on various criteria such as domain matches, suffixes, keywords, CIDR IP ranges, or GeoIP lookups, and they have the option to import configurations through URLs or iCloud Drive while also tracking usage and speed across different types of connections like Wi-Fi, cellular, direct, and proxy. Additionally, it is capable of blocking ads based on domain or user-agent rules, facilitating local DNS mapping, decrypting HTTPS traffic, rewriting URLs, and offering complete support for IPv6. The application is further enhanced by advanced script filters, multi-level forward proxying, and compatibility with plugins like kcptun, cloak, gost, and v2ray, which increase its adaptability. To ensure secure name resolution, it incorporates features like DNS-over-HTTPS, DNS-over-TLS, and DNS-over-QUIC. Shadowrocket also functions effectively on cellular networks and includes SSH tunneling with UDP gateway support, solidifying its role as a robust solution for network traffic monitoring, filtering, and optimization while enhancing user experience through its comprehensive features.