36 lines
1.7 KiB
Plaintext
36 lines
1.7 KiB
Plaintext
|
# Unbound configuration file for Debian.
|
||
|
|
#
|
||
|
|
# See the unbound.conf(5) man page.
|
||
|
|
#
|
||
|
|
# See /usr/share/doc/unbound/examples/unbound.conf for a commented
|
||
|
|
# reference config file.
|
||
|
|
#
|
||
|
|
# The following line includes additional configuration files from the
|
||
|
|
# /etc/unbound/unbound.conf.d directory.
|
||
|
|
|
||
|
|
server:
|
||
|
|
interface: 0.0.0.0 # Listen on all interfaces
|
||
|
|
access-control: 0.0.0.0/0 allow # Allow access from all networks
|
||
|
|
verbosity: 1 # Set verbosity for easier troubleshooting (optional)
|
||
|
|
|
||
|
|
# Enable caching
|
||
|
|
msg-cache-size: 50m # Message cache size (adjust as needed)
|
||
|
|
rrset-cache-size: 100m # Resource record set cache size (adjust as needed)
|
||
|
|
cache-max-ttl: 86400 # Max time-to-live for cache (1 day)
|
||
|
|
cache-min-ttl: 3600 # Min time-to-live for cache (1 hour)
|
||
|
|
|
||
|
|
# Timeout settings for faster fallback if cache/local records fail
|
||
|
|
infra-host-ttl: 60 # Cache infrastructure hosts for 1 minute
|
||
|
|
infra-lame-ttl: 600 # Cache lame delegations for 10 minutes
|
||
|
|
do-ip4: yes # Only use IPv4 if your ISP DNS does not support IPv6
|
||
|
|
do-ip6: no # Disable IPv6 if not needed
|
||
|
|
do-udp: yes # Enable UDP for DNS
|
||
|
|
do-tcp: yes # Enable TCP for DNS
|
||
|
|
|
||
|
|
forward-zone:
|
||
|
|
name: "." # Forward all other queries
|
||
|
|
forward-addr: 8.8.8.8 # Primary ISP DNS server
|
||
|
|
forward-addr: 1.1.1.1 # Secondary ISP DNS server
|
||
|
|
|
||
|
|
include-toplevel: "/etc/unbound/unbound.conf.d/*.conf"
|