Unbound DNS configuration

resolv.conf

# /etc/resolv.conf

nameserver 127.5.3.53

root-auto-trust-anchor-file.conf

# /etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.conf 

server:
    # The following line will configure unbound to perform cryptographic
    # DNSSEC validation using the root trust anchor.
    auto-trust-anchor-file: "/var/lib/unbound/root.key"

unbound.conf

# /etc/unbound/unbound.conf

# See /usr/share/doc/unbound/examples/unbound.conf for a commented
# reference config file.
include: "/etc/unbound/unbound.conf.d/*.conf"

# feel free to update /etc/unbound/root.hints to http://ftp.internic.net/domain/named.cache every 6 months

server:
  verbosity: 1
  statistics-interval: 1800
  statistics-cumulative: yes
  extended-statistics: no
  num-threads: 4
  interface: 127.5.3.53
  do-ip6: no
  val-log-level: 2
  so-rcvbuf: 266240
  so-sndbuf: 266240
  outgoing-range: 950
  msg-cache-size: 50m
  rrset-cache-size: 128m
  num-queries-per-thread: 4096
  cache-min-ttl: 1800
  cache-max-ttl: 86400
  prefetch: yes
  msg-cache-slabs: 4
  rrset-cache-slabs: 4
  infra-cache-slabs: 4
  key-cache-slabs: 4
  chroot: ""
  use-syslog: yes
  log-time-ascii: no
  root-hints: "/etc/unbound/root.hints"
  hide-identity: yes
  hide-version: yes

remote-control:
  control-enable: no

Vl7778

Vl7778