Skip to content

Instantly share code, notes, and snippets.

@Blackdixxa
Last active September 20, 2021 09:05
Show Gist options
  • Select an option

  • Save Blackdixxa/88eac9f0594c2322ee4c7decee188270 to your computer and use it in GitHub Desktop.

Select an option

Save Blackdixxa/88eac9f0594c2322ee4c7decee188270 to your computer and use it in GitHub Desktop.
Fichier de conf a placer dans /etc/unbound
# See the unbound.conf(5) man page.
#
# See /usr/share/doc/unbound/examples/unbound.conf for a commented
# reference config file.
server:
auto-trust-anchor-file: "/var/lib/unbound/root.key"
verbosity: 1
interface: 0.0.0.0
interface: ::0
port: 53
do-ip4: yes
do-ip6: no
do-udp: yes
do-tcp: yes
access-control: 192.168.0.0/16 allow
access-control: 127.0.0.0/8 allow
access-control: 10.0.0.0/8 allow
root-hints: "/var/lib/unbound/root.hints"
include: "/etc/unbound/unbound_ad_servers"
hide-identity: yes
hide-version: yes
harden-glue: yes
harden-dnssec-stripped: yes
cache-min-ttl: 3600
cache-max-ttl: 86400
prefetch: yes
# Buffer size for UDP port 53
so-rcvbuf: 1m
## Unbound Optimization and Speed Tweaks
msg-cache-slabs: 8
rrset-cache-slabs: 8
infra-cache-slabs: 8
key-cache-slabs: 8
# Increase Memory of the cache
rrset-cache-size: 128m
msg-cache-size: 64m
# Private Network
private-address: 192.168.0.0/16
private-address: 172.16.0.0/12
private-address: 10.0.0.0/8
## Logging
logfile: "/var/lib/unbound/unbound.log"
verbosity: 0
val-log-level: 3
#Ces options ne sont pas activées par défaut pour profiter à 100% de unbound.
#forward-zone:
# name: "."
# ssl-upstream: yes
# forward-addr: 1.1.1.1@853 # Cloudflare primary
# forward-addr: 1.0.0.1@853 # Cloudflare secondary
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment