Nebulo

Encrypt your DNS traffic with Nebulo for safer browsing

Nebulo is a lightweight yet powerful DNS changer focused on one thing: making your DNS traffic private and tamper‑resistant. Instead of reinventing your whole network stack, it concentrates on encrypting the key piece most systems still send in plain text—your DNS queries.

The app works by using the system’s VpnService, but it does not establish a real VPN tunnel or route your data through third‑party servers. Only DNS requests are intercepted locally and then forwarded to your chosen provider using secure protocols like DNS‑over‑HTTPS (DoH), DNS‑over‑TLS (DoT), and DoH3. This means attackers on the same Wi‑Fi network, or intermediaries such as ISPs, have a much harder time seeing or altering the sites you are trying to reach.

Configuration is straightforward: you pick one of the built‑in secure DNS providers or define a custom server if you prefer a specific resolver. Once set, Nebulo quietly runs in the background, applying your encrypted DNS across all networks, including Wi‑Fi and mobile data, without constant user interaction.

Performance is another strong point. Because it only handles DNS traffic and not your entire connection, battery and data overhead remain low. In day‑to‑day use, page load times feel normal, and the persistent notification is a small price to pay for the added security.

The absence of ads and tracking, combined with the app’s open‑source nature, makes Nebulo especially appealing to privacy‑conscious users who want transparency and control.

Pros:

- Strong focus on DNS encryption (DoH, DoT, DoH3)

- Works on all networks via VpnService without being a full VPN

- No ads, no tracking, and open source

- Supports custom DNS servers with low battery impact

Cons:

- Does not provide the IP masking benefits of a real VPN

- Persistent VPN icon may bother some users