2 access-control: 0.0.0.0/0 deny
3 access-control: 127.0.0.0/8 allow_snoop
4 #access-control: ::0/0 refuse
5 #access-control: ::1 allow
6 #access-control: ::ffff:127.0.0.1 allow
7 #add-holddown: 2592000 # 30 days
8 auto-trust-anchor-file: "/var/lib/unbound/root.key"
12 #del-holddown: 2592000 # 30 days
13 directory: "/etc/unbound"
14 #dlv-anchor-file: "dlv.isc.org.key"
18 #do-not-query-address: 127.0.0.1/8
19 #do-not-query-address: ::1
20 #do-not-query-localhost: yes
24 #edns-buffer-size: 4096
25 #extended-statistics: no
26 #harden-dnssec-stripped: yes
28 #harden-large-queries: no
29 #harden-referral-path: no
30 #harden-short-bufsize: no
35 #infra-cache-lame-size: 10k
36 infra-cache-numhosts: 10000
40 #interface-automatic: no
43 #keep-missing: 31622400 # 366 days
48 module-config: "iterator"
49 #msg-buffer-size: 65552
53 #num-queries-per-thread: 1024
55 outgoing-interface: OUTGOING_INTERFACE
57 outgoing-port-avoid: "3200-3208"
58 #outgoing-port-permit: 32768
60 #pidfile: "/run/unbound.pid"
64 #private-address: 10.0.0.0/8
65 #private-address: 172.16.0.0/12
66 #private-address: 192.168.0.0/16
67 #private-address: 192.254.0.0/16
68 #private-address: fd00::/8
69 #private-address: fe80::/10
70 #private-domain: "example.com"
71 root-hints: "named.cache"
75 #statistics-cumulative: no
76 #statistics-interval: 0
77 #target-fetch-policy: "3 2 1 0 0"
78 #trust-anchor-file: ""
79 #trust-anchor: "jelte.nlnetlabs.nl. DS 42860 5 1 14D739EB566D2B1A5E216A0BA4D17FA9B038BE4A"
80 #trust-anchor: "nlnetlabs.nl. DNSKEY 257 3 5 AQPzzTWMz8qSWIQlfRnPckx2BiVmkVN6LPupO3mbz7FhLSnm26n6iG9N Lby97Ji453aWZY3M5/xJBSOS2vWtco2t8C0+xeO1bc/d6ZTy32DHchpW 6rDH1vp86Ll+ha0tmwyy9QP7y2bVw5zSbFCrefk8qCUBgfHm9bHzMG1U BYtEIQ=="
81 #trusted-keys-file: ""
82 #unwanted-reply-threshold: 10000000
87 #val-clean-additional: yes
89 #val-nsec3-keysize-iterations: "1024 150 2048 500 4096 2500"
90 #val-override-date: ""
91 #val-permissive-mode: no
92 #val-sig-skew-max: 86400
93 #val-sig-skew-min: 3600
97 #python-script: "/etc/unbound/ubmodule-tst.py"
99 control-cert-file: "/etc/unbound/unbound_control.pem"
101 control-interface: 127.0.0.1
102 #control-interface: ::1
103 control-key-file: "/etc/unbound/unbound_control.key"
105 server-cert-file: "/etc/unbound/unbound_server.pem"
106 server-key-file: "/etc/unbound/unbound_server.key"