etc/unbound/unbound.conf

   1 server:
   2         access-control: 0.0.0.0/0 deny
   3         access-control: 127.0.0.0/8 allow_snoop
   4         #access-control: ::0/0 refuse
   5         #access-control: ::1 allow
   6         #access-control: ::ffff:127.0.0.1 allow
   7         #add-holddown: 2592000 # 30 days
   8         auto-trust-anchor-file: "/var/lib/unbound/root.key"
   9         #cache-max-ttl: 86400
  10         #cache-min-ttl: 0
  11         chroot: ""
  12         #del-holddown: 2592000 # 30 days
  13         directory: "/etc/unbound"
  14         #dlv-anchor-file: "dlv.isc.org.key"
  15         #do-daemonize: yes
  16         do-ip4: yes
  17         do-ip6: no
  18         #do-not-query-address: 127.0.0.1/8
  19         #do-not-query-address: ::1
  20         #do-not-query-localhost: yes
  21         do-tcp: yes
  22         do-udp: yes
  23         #domain-insecure: ""
  24         #edns-buffer-size: 4096
  25         #extended-statistics: no
  26         #harden-dnssec-stripped: yes
  27         #harden-glue: yes
  28         #harden-large-queries: no
  29         #harden-referral-path: no
  30         #harden-short-bufsize: no
  31         hide-identity: yes
  32         hide-version: yes
  33         identity: ""
  34         #incoming-num-tcp: 10
  35         #infra-cache-lame-size: 10k
  36         infra-cache-numhosts: 10000
  37         #infra-cache-slabs: 4
  38         #infra-host-ttl: 900
  39         #infra-lame-ttl: 900
  40         #interface-automatic: no
  41         interface: 127.0.0.1
  42         #jostle-timeout: 200
  43         #keep-missing: 31622400 # 366 days
  44         #key-cache-size: 4m
  45         #key-cache-slabs: 4
  46         #log-time-ascii: no
  47         #logfile: ""
  48         module-config: "iterator"
  49         #msg-buffer-size: 65552
  50         msg-cache-size: 4m
  51         #msg-cache-slabs: 4
  52         #neg-cache-size: 1m
  53         #num-queries-per-thread: 1024
  54         #num-threads: 1
  55         outgoing-interface: OUTGOING_INTERFACE
  56         #outgoing-num-tcp: 10
  57         outgoing-port-avoid: "3200-3208"
  58         #outgoing-port-permit: 32768
  59         #outgoing-range: 4096
  60         #pidfile: "/run/unbound.pid"
  61         port: 53
  62         #prefetch-key: no
  63         #prefetch: no
  64         #private-address: 10.0.0.0/8
  65         #private-address: 172.16.0.0/12
  66         #private-address: 192.168.0.0/16
  67         #private-address: 192.254.0.0/16
  68         #private-address: fd00::/8
  69         #private-address: fe80::/10
  70         #private-domain: "example.com"
  71         root-hints: "named.cache"
  72         rrset-cache-size: 4m
  73         #rrset-cache-slabs: 4
  74         #so-rcvbuf: 0
  75         #statistics-cumulative: no
  76         #statistics-interval: 0
  77         #target-fetch-policy: "3 2 1 0 0"
  78         #trust-anchor-file: ""
  79         #trust-anchor: "jelte.nlnetlabs.nl. DS 42860 5 1 14D739EB566D2B1A5E216A0BA4D17FA9B038BE4A"
  80         #trust-anchor: "nlnetlabs.nl. DNSKEY 257 3 5 AQPzzTWMz8qSWIQlfRnPckx2BiVmkVN6LPupO3mbz7FhLSnm26n6iG9N Lby97Ji453aWZY3M5/xJBSOS2vWtco2t8C0+xeO1bc/d6ZTy32DHchpW 6rDH1vp86Ll+ha0tmwyy9QP7y2bVw5zSbFCrefk8qCUBgfHm9bHzMG1U BYtEIQ=="
  81         #trusted-keys-file: ""
  82         #unwanted-reply-threshold: 10000000
  83         #use-caps-for-id: no
  84         use-syslog: yes
  85         username: "unbound"
  86         val-bogus-ttl: 60
  87         #val-clean-additional: yes
  88         #val-log-level: 1
  89         #val-nsec3-keysize-iterations: "1024 150 2048 500 4096 2500"
  90         #val-override-date: ""
  91         #val-permissive-mode: no
  92         #val-sig-skew-max: 86400
  93         #val-sig-skew-min: 3600
  94         verbosity: 1
  95         version: ""
  96 python:
  97         #python-script: "/etc/unbound/ubmodule-tst.py"
  98 remote-control:
  99         control-cert-file: "/etc/unbound/unbound_control.pem"
 100         control-enable: yes
 101         control-interface: 127.0.0.1
 102         #control-interface: ::1
 103         control-key-file:  "/etc/unbound/unbound_control.key"
 104         control-port: 9953
 105         server-cert-file:  "/etc/unbound/unbound_server.pem"
 106         server-key-file:   "/etc/unbound/unbound_server.key"