adblock-recovery-sink

adblock-recovery-sink serves a harmless replacement for a supported anti-adblock loader resource. It lets a page remain usable when a network-level blocker causes that loader to fail.

The request flow is DNS rewrite, TLS connection to the sink, then a small stub loader response. The sink uses a certificate chain from a CA you create, constrained to the intercepted name.

It does not block advertisements, manage DNS, or provide block lists or feeds. You choose and maintain the DNS rewrite separately.

Only run an instance you control and only install a root CA that you generated. A trusted root can impersonate websites within its allowed scope, and this service sends JavaScript that executes in visited pages.

Documentation

• How it works
• Quick start
• Configuration
• PKI and enrollment
• Kubernetes and Helm
• DNS setup
• Chrome Local Network Access
• Operations
• Troubleshooting
• Compatibility
• Validation
• Contributing
• Prior art