Harnessing the Power of DNS over HTTPS (DoH) for Internet Security and Pie-Hole Advertisement Blockers for Bandwidth Conservation

Abstract

This study presents a rigorous empirical evaluation of DNS over HTTPS (DoH) and Pi-hole integration as a dual solution for modern internet security and efficiency challenges. Through multi-phase testing encompassing controlled lab environments, real-world ISP partnerships, and large-scale simulations, the research demonstrates that DoH provides complete protection against DNS hijacking while introducing only marginal latency increases of 12 - 20 ms. Field deployments revealed a 15% latency rise in throttled ISP networks, underscoring the impact of regional infrastructure on performance. Pi-hole delivered consistent 35% - 38% bandwidth savings across lab and production environments by blocking 92% of ad traffic, though a 5% performance trade-off for CDN-dependent content was identified—a nuance previously underreported in literature. The study advances existing research through real-world validation using Mozilla Rally telemetry and ISP traffic logs, which confirm DoH’s privacy benefits while exposing implementation challenges such as ISP interference. A novel mitigation framework combining Firebog blocklists with AI-driven allowlists reduced over-blocking incidents from 15% to 3% without compromising security, maintaining 89% protection against malicious domains. Scalability testing via GNS3 simulations proved the solution’s efficacy for networks up to 5000 devices, though enterprise deployments require load balancing to sustain performance. Quantitative metrics revealed 34% faster page loads post-implementation, while qualitative interviews highlighted Docker configuration complexities affecting 60% of non-technical users. These findings translate into tailored deployment protocols: SMEs benefit from cost-effective Pi-hole clusters with dynamic filtering, while larger organisations require hybrid DoH resolvers to balance security and quality of service. For policymakers, the study provides evidence supporting standardised encrypted DNS adoption, particularly in bandwidth-constrained regions where solutions like Africa’s Control D resolver mitigate performance penalties. By bridging the gap between controlled experiments and real-world viability, this work advances internet infrastructure literature while exposing critical operational trade-offs, equipping stakeholders with evidence-based strategies for secure, efficient networks.