Adguard for Windows, Android, iOS

[harlan4096]

AdGuard 7.13 released:

As spring arrives, AdGuard for Windows unveils its latest release, complete with numerous new features and improvements.

Experimental Encrypted ClientHello support
Notably, the addition of experimental support for Encrypted ClientHello (ECH) is worth mentioning. This new technology fully encrypts HTTPS connections, concealing server names you are connecting to from ISPs and ensuring complete privacy.

So that you can benefit from it, we’ve added the Use Encrypted ClientHello feature to the Advanced settings section and enabled DNS protection by default for all users.

New Advanced settings
We’ve also added 16 more features to the Advanced settings section. A detailed description of each feature can be found in our Knowledge base.

All new advanced features can be divided into six groups:

• Anti DPI options allow to modify packets at a low level during filtering to prevent tracking via deep packet inspection
  • Adjust size of fragmentation of initial TLS packet
    
  • Add an extra space to the plain HTTP request
    
  • Plain HTTP request fragment size
    
• Keepalive settings allow to configure settings to work with keepalive connections
  • Enable TCP keepalive
    
  • TCP keepalive interval
    
  • TCP keepalive timeout
    
• Filtering exclusion settings allow to exclude both Wi-Fi networks and particular subnets (specified in the CIDR notation) from DNS filtering
  • Exclude specified IP ranges from filtering
    
  • IP ranges excluded from filtering
    
  • Exclude specified Wi-Fi network names (SSID) from DNS filtering
    
• DNS-related options allow to fine-tune DNS settings
  • Use fallback DNS upstreams
    
  • Use HTTP/3 for DNS-over-HTTPS
    
  • Query DNS upstreams in parallel
    
  • Always respond to failed DNS queries
    
• Certificate security options allow to check certificates of websites and web services
  • Check websites' certificate transparency
    
  • Enable asynchronous OCSP SSL/TLS certificate revocation checks
    
• Enable filtering at system start-up. Now by default, AdGuard for Windows does not filter traffic after OS startup if the option Launch AdGuard at system start-up is disabled. If you want filtering to be performed even if AdGuard is not launched, you should enable this option.
  

Note that before v7.12 the AdGuard's service started in filtering mode by default (even if the [i]Launch AdGuard at system start-up was disabled). If you were satisfied with the old behavior, enable this option.[/i]

What else? Aside from the regular CoreLibs and DnsLibs updates, we’ve updated WFP and TDI drivers and ExtendedCSS. We’ve also allowed to disable the Filter localhost advanced feature. But be aware that disabling this feature will prevent AdGuard Ad Blocker and AdGuard VPN from working simultaneously.

Download