Pi-hole releases FTL & Web v6.4 and Core v6.3 for network-wide ad and tracker blocking

Pi-hole has released a coordinated update, delivering FTL v6.4, Web v6.4, and Core v6.3. This set of updates introduces critical improvements and new features for users managing network-wide ad and tracker blocking.

With this release, the FTL engine benefits from optimizations in string processing and memory management, alongside the activation of new compiler flags like -march=native and -funroll-loops. These enhancements are aimed at delivering increased performance. In addition, DNS resolver locking during database operations has been reduced, leading to more efficient DNS processing under load.

Following the backend optimizations, the web interface now streamlines the two-factor authentication process. The TOTP (Time-based One-Time Password) input field supports autocomplete, allowing browsers and password managers to suggest codes directly. TOTP validation is also now rate-limited to one attempt per second, providing more robust protection against brute-force attacks.

For easier long-term monitoring, the “All Time” query log range now accurately reflects your database's earliest timestamp. On the API side, the Gravity API defaults to plain text output, only using ANSI codes when explicitly requested, addressing compatibility issues with some API consumers.

Expanding hardware support, the API now recognizes hardware addresses longer than 48 bits, such as those used by InfiniBand. Lastly, the search API introduces simple partial regex matching, making it easier to find domains within blocklists.