berbyte/sinkzone: Block everything. Allow only what matters. A DNS tool for productivity, focus, and child safety. Allowlist-only internet for distraction-free work.

The internet is infinite. Your focus isn’t.

Sinkzone helps you reclaim control by flipping the default: everything is blocked, unless you explicitly allow it.

No feeds. No pings. No surprise connections.

Just a quiet, intentional internet.

Learn More »
·
Quick Start
·
Report a Bug
·
Usage Guide

Sinkzone is a local DNS resolver that helps you eliminate distractions and get deep work done. It blocks all domains by default — only the ones you explicitly allow can get through. This means notifications, social media, news, and other time-sinks are unreachable at the network level — not just in your browser.

It features a modern HTTP API, wildcard pattern support, and a beautiful terminal UI for real-time monitoring and control.

It’s lightweight, cross-platform, and built for hackers, makers, and anyone serious about focus.

Most tools make you list what you want to block. But the internet is infinite — that list never ends. It’s much easier to list the few things you actually want to allow.

Sinkzone was born from that insight. I was tired of coding sessions interrupted by Slack pings and email alerts. I needed something stronger than a browser plugin — a system-level kill switch for distractions.

Now I can code for hours uninterrupted. Even my son uses Sinkzone during chess practice to stay focused.

Sinkzone exists because I needed it. Maybe you do too.

• Avoid distraction without browser extensions or hacks
• Run locally on macOS, Linux and Windows — no cloud, no telemetry
• Perfect for deep work sessions, writing, coding, or child safety
• Terminal UI included — toggle modes, view logs, edit allowlist

• DNS-level blocking: Stops distractions before they reach your apps
• Focus Mode: Block all but allowlisted domains for a set duration
• Wildcard Support: Use patterns like *github* or *.google.com for flexible domain matching
• HTTP API: RESTful API for monitoring and control
• Terminal UI: Real-time DNS traffic viewer with tabbed interface
• Memory-backed rules: Focus mode expires automatically
• Cross-platform: Works on macOS and Linux

The TUI provides real-time DNS monitoring and allowlist management:

Real-time DNS traffic monitoring, allowlist management, and focus mode control

The CLI offers powerful command-line tools for system management:

Command-line allowlist management, focus mode control, and system status monitoring

brew tap berbyte/ber
brew install sinkzone

# 1. Start the DNS Resolver (default port 53, requires admin privileges)
sudo sinkzone resolver

# 2. Launch the UI (in another terminal)
sinkzone tui

# 3. Enable Focus Mode
sinkzone focus start

sudo networksetup -setdnsservers "Wi-Fi" 127.0.0.1

# Apple Silicon (M1/M2)
curl -L -o sinkzone 
chmod +x sinkzone
sudo mv sinkzone /usr/local/bin/

# Intel Mac
curl -L -o sinkzone 
chmod +x sinkzone
sudo mv sinkzone /usr/local/bin/

# Download and install the .deb package
curl -L -O 
sudo dpkg -i sinkzone-linux-amd64.deb

# Download and install the .rpm package
curl -L -O 
sudo rpm -i sinkzone-linux-amd64.rpm

# Download and install the .apk package
curl -L -O 
sudo apk add --allow-untrusted sinkzone-linux-amd64.apk

# Download and install the .pkg.tar.zst package
curl -L -O 
sudo pacman -U sinkzone-linux-amd64.pkg.tar.zst

# AMD64
curl -L -o sinkzone 
chmod +x sinkzone
sudo mv sinkzone /usr/local/bin/

# ARM64
curl -L -o sinkzone 
chmod +x sinkzone
sudo mv sinkzone /usr/local/bin/

# 1. Start the DNS Resolver (default port 53, requires admin privileges)
sudo sinkzone resolver

# 2. Launch the UI (in another terminal)
sinkzone tui

# 3. Enable Focus Mode
sinkzone focus start

echo "nameserver 127.0.0.1" | sudo tee /etc/resolv.conf

# AMD64
Invoke-WebRequest -Uri "https://github.com/berbyte/sinkzone/releases/latest/download/sinkzone-windows-amd64.exe" -OutFile "sinkzone.exe"
# Move to a directory in your PATH (e.g., C:\Windows\System32 or create a custom directory)
Move-Item sinkzone.exe C:\Windows\System32\sinkzone.exe

# ARM64
Invoke-WebRequest -Uri "https://github.com/berbyte/sinkzone/releases/latest/download/sinkzone-windows-arm64.exe" -OutFile "sinkzone.exe"
# Move to a directory in your PATH (e.g., C:\Windows\System32 or create a custom directory)
Move-Item sinkzone.exe C:\Windows\System32\sinkzone.exe

# 1. Start the DNS Resolver (run as Administrator for port 53)
sinkzone resolver

# 2. Launch the UI (in another terminal)
sinkzone tui

# 3. Enable Focus Mode
sinkzone focus start

# Clone and build
git clone 
cd sinkzone
go build -o sinkzone .

# Follow the manual setup steps above for your platform

For detailed documentation, run:

Note: On Unix-like systems (macOS/Linux), you may need to run sudo sinkzone resolver for port 53. On Windows, run as Administrator or use an unprivileged port like 5353.

Sinkzone supports wildcard patterns for flexible domain matching:

Examples:

# Allow all GitHub-related domains
sinkzone allowlist add "*github*"

# Allow all Google subdomains
sinkzone allowlist add "*.google.com"

# Allow all API subdomains
sinkzone allowlist add "api.*.com"

# Allow exact domain
sinkzone allowlist add "stackoverflow.com"

Sinkzone is composed of three parts:

• Resolver: A local DNS server that intercepts queries and maintains real-time data via HTTP API.
• HTTP API Server: Provides REST endpoints for monitoring DNS queries and controlling focus mode.
• TUI/CLI: User interfaces that communicate with the resolver via HTTP API.
• TUI: A terminal UI for interacting with and monitoring the system via HTTP API.

The resolver exposes the following HTTP endpoints:

• GET /api/queries – Get the last 100 DNS queries
• GET /api/focus – Get current focus mode state
• POST /api/focus – Set focus mode (enabled/disabled, duration)
• GET /api/state – Get complete resolver state
• GET /health – Health check endpoint

API Usage Examples:

# Start resolver with custom API port
sinkzone resolver --port 53 --api-port 8080

# Use CLI with custom API URL
sinkzone monitor --api-url 
sinkzone focus --enable --api-url 
sinkzone tui --api-url 

# Direct API calls
curl /api/queries
curl /api/focus
curl -X POST /api/focus \
  -H "Content-Type: application/json" \
  -d '{"enabled": true, "duration": "1h"}'

• All DNS queries are forwarded to upstream resolvers
• You can view and manage DNS traffic and allowlist

• Only allowlisted domains resolve
• Everything else returns NXDOMAIN
• Automatically expires after specified duration
• Allowlist is reloaded when focus mode is enabled (changes take effect on new focus sessions)

Files are stored in ~/.sinkzone/:

• sinkzone.yaml: Main config
• allowlist.txt: Simple text file containing allowed domains (supports wildcard patterns)
• resolver.pid: Process ID file for the DNS resolver

Allowlist Format:

# Comments start with #
github.com
stackoverflow.com
*github*
*.google.com
api.*.com

# Build binary
go build -o sinkzone .

# Run tests
go test ./...

# Run resolver with custom ports
sinkzone resolver --port 5353 --api-port 8080

# Test API endpoints
curl /health
curl /api/queries

# Run TUI with custom API URL
sinkzone tui --api-url 

Architecture:

• DNS Server: Handles DNS resolution and blocking
• HTTP API Server: Provides REST endpoints for monitoring and control
• CLI/TUI: User interfaces that communicate via HTTP API

PRs and issues welcome. We love contributors.

MIT License. See the LICENSE file for full details.

(back to top)