AdGuard for Windows v7.22.4: Meet SockFilter, our new experimental network driver

This patch is not just another “small fixes and improvements” kind of update.
With AdGuard for Windows v7.22.4, we’re introducing something big: a new network driver called SockFilter. While still experimental and far from perfect (you will probably find a few bugs here and there), we’re confident in its potential to make AdGuard better in the future. And yes, this is one of those moments where a patch deserves the same attention as a full release.

So… what is SockFilter?

SockFilter is a lightweight network driver that works directly with socket operations at the transport level (TCP/UDP). Instead of dealing with packets at the lowest possible level, SockFilter works at a higher, more stable layer, right where applications actually interact with the network.

And that difference matters a lot.

Why introduce a new driver at all?

Until now, AdGuard for Windows relied mostly on a WFP driver. WFP is powerful, but it also comes with complexity, compatibility challenges, and stability issues.

The TDI driver used to be an alternative, and while it is still available, it’s an outdated solution and may lead to filtering issues in some versions of Google Chrome. A temporary workaround exists, but it’s not a reliable long-term solution.

The conclusion was simple: it was time for a change. That’s why we’re introducing SockFilter — it brings a different approach that works especially well for ad blocking, plus it’s the solution we’ve been waiting for to finally put these problems behind us.

The advantages of SockFilter

When fully tested and implemented, SockFilter has the potential to bring several advantages over other drivers. Right now, it’s still experimental and unstable, so you might not see all the benefits yet. But here’s a look at what’s possible in the future:

• Better interaction with other network apps: SockFilter is designed to cooperate smoothly with VPNs, firewalls, and antivirus software. By avoiding clashes over network control, it can help prevent connection issues and make everything work together more reliably.

• Lower risk of system crashes: SockFilter works in a safer part of Windows networking, which can help it avoid deep system errors that can sometimes cause sudden blue-screen crashes. In practice, this can result in better stability and fewer chances of your system unexpectedly crashing while AdGuard is running.

• On track for better stability: SockFilter works closer to how apps normally use the Internet, instead of dealing with low-level network data, resulting in the potential to reduce complexity behind the scenes and making AdGuard more reliable in everyday use.

Known issues

So far, a small number of users have reported an issue with SockFilter: the new driver appears to interfere with voice and video calls on Discord. Two users have described the problem on GitHub.

Our QA team has successfully reproduced the issue and is actively working on a fix. If you notice any related problems or have additional details to share, please let us know.

Experimental, and that’s where you come in

Experimental mode means SockFilter is ready for testing, there may be bugs, and we’d love your help finding them.

To test it, go to Settings → Network → Traffic filtering, enable traffic filtering, and select SockFilter (Experimental) from the list of available options. If you notice anything unusual, unexpected, or just plain broken, you can switch back to TDI or WFP at any time. In that case, please report the issue on GitHub — your feedback directly helps shape the future of AdGuard for Windows.