Unbound Configuration for Windows (7, 8, and 10)

service.conf

# Unbound configuration file on windows.

server:

# logging
verbosity: 1
logfile: "C:\unbound.log"

# unbound security
cache-max-ttl: 86400
cache-min-ttl: 3600
hide-identity: yes
hide-version: yes
minimal-responses: yes
prefetch: yes
use-caps-for-id: yes
harden-glue: yes
harden-dnssec-stripped: yes

# use forwarders with TLS
tls-win-cert: yes

# unbound optimisation
num-threads: 2
msg-cache-slabs: 16
rrset-cache-slabs: 16
infra-cache-slabs: 16
key-cache-slabs: 16
outgoing-range: 206
so-rcvbuf: 4m
so-sndbuf: 4m
so-reuseport: yes
rrset-cache-size: 100m
msg-cache-size: 50m

# forward zone settings
forward-zone:
name: "."
forward-tls-upstream: yes
forward-addr: 2001:4860:4860::8888@853#dns.google
forward-addr: 8.8.8.8@853#dns.google
forward-addr: 2001:4860:4860::8888@853#dns.google
forward-addr: 8.8.4.4@853#dns.google
forward-addr: 2606:4700:4700::1111@853#cloudflare-dns.com
forward-addr: 1.1.1.1@853#cloudflare-dns.com
forward-addr: 2606:4700:4700::1001@853#cloudflare-dns.com
forward-addr: 1.0.0.1@853#cloudflare-dns.com