unbound.conf

remote-control:
  #control-cert-file: "/etc/unbound/local/unbound_control.pem"
  control-enable: yes
  control-interface: 127.0.0.1
  #control-key-file: "/etc/unbound/local/unbound_control.key"
  control-port: 8953
  #server-cert-file: "/etc/unbound/local/unbound_server.pem"
  #server-key-file: "/etc/unbound/local/unbound_server.key"
  control-use-cert: no

server:
  qname-minimisation: no
  log-servfail: yes
  username: chantra
  do-not-query-localhost: no
  access-control: ::/0 allow
  chroot: ""
  directory: /home/chantra
  cache-min-ttl: 0
  extended-statistics: yes
  hide-identity: yes
  hide-version: yes
  infra-cache-numhosts: 1000000
  infra-cache-slabs: 16
  local-zone: "10.in-addr.arpa." nodefault
  local-zone: "16.172.in-addr.arpa." nodefault
  local-zone: "17.172.in-addr.arpa." nodefault
  local-zone: "18.172.in-addr.arpa." nodefault
  local-zone: "19.172.in-addr.arpa." nodefault
  local-zone: "20.172.in-addr.arpa." nodefault
  local-zone: "21.172.in-addr.arpa." nodefault
  local-zone: "22.172.in-addr.arpa." nodefault
  local-zone: "23.172.in-addr.arpa." nodefault
  local-zone: "24.172.in-addr.arpa." nodefault
  local-zone: "25.172.in-addr.arpa." nodefault
  local-zone: "26.172.in-addr.arpa." nodefault
  local-zone: "27.172.in-addr.arpa." nodefault
  local-zone: "28.172.in-addr.arpa." nodefault
  local-zone: "29.172.in-addr.arpa." nodefault
  local-zone: "30.172.in-addr.arpa." nodefault
  local-zone: "31.172.in-addr.arpa." nodefault
  local-zone: "168.192.in-addr.arpa." nodefault
  max-client-subnet-ipv4: 32
  max-client-subnet-ipv6: 128
  module-config: "subnetcache validator iterator"
  msg-cache-slabs: 16
  num-queries-per-thread: 8192
  outgoing-range: 8192
  #pidfile: "/var/run/unbound-local.pid"
  port: 1153
  prefetch: yes
  rrset-cache-slabs: 16
  send-client-subnet: 127.0.0.1
  send-client-subnet: ::1
  so-rcvbuf: 8m
  so-reuseport: yes
  so-sndbuf: 8m
  use-syslog: no
  val-permissive-mode: yes
  verbosity: 0
  num-threads: 28
  msg-cache-size: 13506754560
  neg-cache-size: 5402701824
  rrset-cache-size: 27013509120
  interface: ::1
  outgoing-interface: ::1
  outgoing-interface: 127.0.0.2

  stub-zone:
    name: "example.com."
    stub-addr: 127.0.0.1@8853
    stub-addr: ::1@8853