Skip to main content
DNS & DHCP

The plumbing every network needs, already built in

DNS turns names into addresses. DHCP hands those addresses out. Firecradle does both, so you do not need a separate server humming in a cupboard — and you get ad blocking and encrypted lookups for free.

Kea DHCP · Unbound DNS · DoH/DoT · blocklists

DNS that works for you, not against you

Most networks hand their lookups to whoever their internet provider is. Firecradle keeps them in-house, and lets you block the domains you never wanted anyway.

Full DNS resolver
Firecradle can look up names itself instead of asking your internet provider. Your browsing history stays on your own box.
Ad and malware blocking
Turn on blocklists and the bad domains never resolve. Ads, trackers, and known malware sites stop working across every device at once.
Encrypted lookups
Turn on encrypted DNS and nobody between you and the internet can read the list of sites you visit.
Your own names
Give internal machines real names. "printer.office" works on your network without registering a domain anywhere.
See what is being asked
A live view of which device looked up which site, and what got blocked. Handy when one machine starts behaving oddly.
Redirect or sink a domain
Paste a list of domains and choose what happens: block them outright or send them somewhere else of your choosing.
Firecradle DNS blocklists screen listing ad, tracker and malware blocklists with the number of domains in each and a toggle to enable them
Blocklists apply to every device on the network at once. Nothing to install on laptops or phones.

Two ways to run it

Pick whichever fits your network. You can change your mind later without breaking anything.

Resolver (the default)
Firecradle does the lookups itself, all the way to the source. Nobody else gets a copy of what you looked up.
Forwarder
Firecradle passes lookups to an upstream server you choose. Simpler, and useful when your provider or company requires it.
Encrypted upstream
Either mode can send its questions over an encrypted link, so the questions cannot be read or tampered with on the way.

Addresses handed out automatically

Every device needs an address to get online. Firecradle gives each one out, keeps track of who has what, and lets you pin the ones that matter.

Addresses handed out for you
New devices join and just work. You set the range once and Firecradle takes care of the rest.
Always the same address
Pin a printer or server to one address so it never moves. Pick it from a list of devices you already have — no typing numbers.
One range per network
Each VLAN gets its own address range. Guest Wi-Fi, cameras, and staff laptops stay in their own lanes.
Clocks that agree
Firecradle keeps accurate time and can serve it to your whole network, so logs from different machines line up.
Firecradle DHCP screen showing an address pool for the LAN with its range, lease time and a list of pinned device reservations
Set the range once. Pin the printer. Done.

The small helpers, too

A network needs a few quiet helpers to run smoothly. Firecradle has them built in, so there is nothing extra to set up.

Wake a sleeping computer
Turn a sleeping computer back on from the dashboard. Firecradle already lists your known devices, so you pick one by name.
Automatic port opening
Lets trusted apps like game consoles open the ports they need, on their own. It stays off by default, and every request is logged.
Printer & cast sharing
Makes printers and streaming devices show up across your separate networks, so a laptop on one VLAN can still find the office printer.

What it runs on

Kea
DHCP server, from the people who wrote the standard
Unbound
DNS resolver, with DNSSEC checking
DoH + DoT
Encrypted lookups, in and out
IPv4 + IPv6
Both address types, fully supported

How people actually use this

Ads and trackers gone on every device

The problem: A small office wants to cut ads and tracking, but nobody is going to install software on 40 laptops, phones, and tablets.

What Firecradle does:
Turn on blocklists once, on the firewall
Every device on the network is covered, including guests and smart TVs
Nothing to install and nothing for staff to configure
The dashboard shows exactly what was blocked and for whom

A printer that keeps moving

The problem: The office printer gets a new address every few weeks, so the saved printer settings on everyone’s laptop stop working.

What Firecradle does:
Pick the printer from the list of known devices
Pin it to one address permanently
Laptops keep working without anyone touching them
The same trick works for servers, cameras, and door controllers

Everything here is included

No add-on licence, no extra box

DNS resolver and forwarder, switchable at any time
Ad, tracker, and malware blocklists that update themselves
Encrypted DNS in both directions
Per-device reports of what was looked up and what was blocked
DHCP for IPv4 and IPv6, with one range per VLAN
Pinned addresses picked from a device list, not typed by hand
Names for your own internal machines
Accurate time served to your whole network
Dynamic DNS, so a changing home or branch address keeps a fixed name

Common questions

Do I still need a separate DNS or DHCP server?

No. Firecradle runs both. For most small and medium networks it replaces a Windows server or a separate Raspberry Pi doing ad blocking, and it is managed from the same screen as your firewall rules.

Is the ad blocking the same as Pi-hole?

It works the same way, by refusing to look up known ad and tracker domains. The difference is that it is built into the firewall, so there is no extra device to keep running and no separate screen to check.

What happens if the firewall reboots — do devices lose their addresses?

No. Address assignments survive a reboot, and pinned addresses are part of your saved configuration. Devices reconnect and get the same addresses they had before.

Can I keep using my company’s existing DNS servers?

Yes. Switch to forwarder mode and point Firecradle at the servers you already use. You keep the blocking and reporting features while your existing servers stay in charge of lookups.

One box, one screen, no cupboard server

DNS, DHCP, time, and ad blocking are part of every Firecradle appliance. Try it free for 30 days.

No credit card required · Cancel anytime · 30-day free trial