I want to set up an ad blocker in the following environment:
Work profile provided by Shelter
The main profile always has a VPN connected. The work profile has apps installed that cannot be accessed via the VPN and require direct access.
It is possible to keep the main profile constantly connected to a VPN while applying ad blocking only to apps in the work profile. I believe that ad-blocking apps utilizing a VPN are better suited for this than Android’s built-in DoT (DNS over TLS) feature. Android allows different VPNs to be enabled separately and simultaneously on the main profile and the work profile.
Given these conditions, what are some recommended ad-block apps?
I am a bit hesitant about AdGuard because it has features I don’t need, such as a built-in web browser and the ability to install TLS certificates to perform a man-in-the-middle (MITM) attack, so I’m looking for an app with the bare minimum.
Is Nebulo still a good choice? I’m concerned that its development has stopped.
Do you mean the work profile apps really need to be in your regular network?
You can run a second VPN inside the work profile, which can be the same app as your main profile.
I even used Proton Free with the same account simultaneously on both profiles before, while Proton Free only allows one device. It is one device, but I would have assumed they meant simultaneous connections.
So yeah, if running a second VPN is an option, just run a second VPN. It creates a second VPN in Android’s system settings, like this:
I see. I asked if they needed the regular network, because i was not sure if you meant that these apps just can’t connect to the main VPN or of they really required a residential connection.
Then probably local VPN filter apps like the above or similar ones. These act as dummy VPNs that only run on your device and filter connections, while still using your regular residential connection.
I have also used TrackerControl years ago for its per-URL filter, but I don’t know the current best choice. (Rethink is also mentioned often, but I don’t know if it does the same for its local VPN function.)
Adguard has ad filter with MITM, meaning its much more precise and powerful than DNS/hosts-based filters. But it is closed-source, and allowing a closed-source app decrypt all your traffic is terrifying.
AFAIK there is no decent open source android MITM-based ad blocker so far.