GateSentry

What it does

Additional features

It includes keyword and content filters, optional AI image filtering, timed exceptions and pauses, logs, statistics, device inventory, and backup and restore features.checked 11 Oct 2026

AI image filtering

Optional AI image filtering is disabled by default and supports xAI, OpenAI, or an operator-configured Ollama endpoint.checked 5 Oct 2026

AI integrations

Optional AI image filtering supports xAI, OpenAI, or a configured Ollama endpoint.checked 11 Oct 2026

Audience

The project describes GateSentry as useful for network-wide content filtering, privacy guarding, parental controls, and blocking known-bad domains.checked 5 Oct 2026

Data handling

Proxy logs can include requested URLs and client identity, DNS logs include queried domains, and log database entries expire after a hard-coded seven-day TTL.checked 11 Oct 2026

Deployment

The project provides Docker images for linux/amd64 and linux/arm64 and binary downloads for Linux, macOS, and Windows.checked 11 Oct 2026

DNS filtering

It filters network DNS using downloadable blocklist categories and per-device or proxy-user policies.checked 11 Oct 2026

Filtering

It supports DNS blocklists, per-device or per-user policies, scheduled rules, safe search, keyword filters, and content filters.checked 5 Oct 2026

Filtering limit

DNS filtering operates on domains only; URL, keyword, and content rules require traffic to pass through the proxy.checked 11 Oct 2026

Filtering limits

DNS filtering works on domains only; VPNs, encrypted DNS, QUIC/HTTP/3, and other traffic paths may bypass or fall outside content inspection.checked 5 Oct 2026

HTTPS and malware limits

The maker states GateSentry does not provide universal HTTPS or malware coverage, and certificate-pinned clients may reject interception.checked 5 Oct 2026

HTTPS inspection

Optional HTTPS inspection can match URL paths and response content types when traffic is routed through the proxy and clients trust its CA certificate.checked 5 Oct 2026

Integrations

An optional read-only Tailscale integration can read peer status from a tailscaled process on the same Linux host.checked 5 Oct 2026

License

The repository identifies GateSentry as open source under the Apache-2.0 license.checked 5 Oct 2026

Policy rules

Rules can target all traffic, specific domains, or categories, and can include schedules and user restrictions.checked 11 Oct 2026

Proxy filtering

The HTTP/HTTPS proxy can match URL paths and response content types when HTTPS inspection is enabled and clients trust its installed CA certificate.checked 11 Oct 2026

Purpose

GateSentry is a filtering proxy and DNS server for home and small networks, with a web dashboard.checked 11 Oct 2026

Safe search

DNS-enforced safe search is supported for Google, Bing, DuckDuckGo, and YouTube restricted mode.checked 11 Oct 2026

Security defaults

The security policy says the defaults are intended for a trusted local network, the admin UI uses plain HTTP, and HTTPS MITM is disabled by default.checked 11 Oct 2026

Security support

The latest published release receives best-effort security support, older releases are unsupported, and the project has no long-term-support release line.checked 5 Oct 2026

Support policy

The latest published release receives best-effort security support, older releases are unsupported, and there is no long-term-support release line.checked 11 Oct 2026

Visibility and recovery

The dashboard provides logs, statistics, device inventory, and backup and restore functions.checked 5 Oct 2026

Who it is for

The README describes GateSentry as intended for home and small networks.checked 11 Oct 2026