AWAGAM blocks access to top-level domains and domains at the DNS level, using blocklists you configure yourself.

It runs a local VPN that intercepts DNS queries. Blocked lookups resolve to 0.0.0.0; everything else is forwarded to the DNS-over-HTTPS resolver of your choice. Your ordinary Internet traffic is never routed through the VPN.

The app ships with no blocking rules of its own. What gets blocked is entirely up to you.

Features:

* Block TLDs and domains at the DNS level
* DNS-over-HTTPS upstream (DNS4EU, Cloudflare, Google, Quad9, OpenDNS, AdGuard)
* Add, edit, and manage as many blocklist URLs as you like
* Compatible with the AWAGAM browser extension blocklist format, including bundles
* Temporarily disable protection (5 minutes, 15 minutes, 1 hour) with automatic restart
* DNS query statistics: queries, blocked requests, cache performance
* Export your configuration to Pi-hole, AdGuard Home, or hosts format
* Background blocklist updates every 6 hours
* Watchdog that restarts filtering if the system stops it
* Auto-start on boot

Privacy:

AWAGAM collects no personal data. All processing happens on your device. There is no analytics, no telemetry, no crash reporting, and no DNS query logging. The only network connections are DNS queries to the upstream resolver you select and blocklist fetches from URLs you configure.

The app opts out of Android backup and device-to-device transfer, so your blocklist subscriptions are never copied into your Google account. Use the export function to move your configuration yourself.

Limitations:

* DNS sees domain names, not full URLs, so URL-level blocking is not possible. Use the browser extension for that.
* Android permits one VPN at a time, so AWAGAM cannot run alongside another VPN app.
* Apps that use their own DNS-over-HTTPS resolver bypass system DNS filtering.