Unbound Configuration

Configuration Locations

Unbound knows the following configurations locations:

  • System: /etc/unbound/unbound.conf
  • System: /etc/unbound/unbound.conf.d/*

Local Resolver (without DNSSEC)

# /etc/unbound/unbound.conf.d/server.conf

server:
     verbosity: 1
     num-threads: 2
     interface: 127.0.0.1
     do-daemonize: yes
     access-control: 127.0.0.1/8 allow
     logfile: /var/log/unbound.log
     log-time-ascii: yes
     log-queries: no
     hide-identity: yes
     hide-version: yes

     module-config: "iterator"

# *.noc.bfh.ch is intern only
stub-zone:
     name: noc.bfh.ch
     stub-addr: 147.87.224.20
     stub-addr: 147.87.96.20

Local Resolver (with DNSSEC)

# /etc/unbound/unbound.conf.d/server.conf

server:
     verbosity: 1
     num-threads: 2
     interface: 127.0.0.1
     do-daemonize: yes
     access-control: 127.0.0.1/8 allow
     logfile: /var/log/unbound.log
     log-time-ascii: yes
     log-queries: no
     hide-identity: yes
     hide-version: yes

     module-config: "validator iterator"

# *.noc.bfh.ch is intern only
stub-zone:
     name: noc.bfh.ch
     stub-addr: 147.87.224.20
     stub-addr: 147.87.96.20