Unbound DNS resolver is restarting constantly

I have Unbound 1.13.1 installed on Debian 11.0 (bullseye) but it’s restarting frequently due unknown reasons, below are log entries between restarts: Feb 28 13:54:56 raspberrypi systemd[1]: Stopping Unbound DNS server… Feb 28 13:54:56 raspberrypi unbound[20793]: [20793:0] info: server stats for thread 0: requestlist max 1 avg 0.5 exceeded 0 jostled 0 Feb 28 13:54:56 … Read more

Restrict DNS usage to some clients

I firstly asked the question here: https://networkengineering.stackexchange.com/questions/33948/restrict-dns-usage-to-some-clients I would like to create a unbound DNS server. I don’t have the IP addresses of the users. What are some other easy options to consider in order to restrict DNS usage to some clients ? I am using Openwrt routers behind a nat and my server runs … Read more

unbound.conf server option “private-domain” – domain name ending in a dot nor not?

unbound.conf is used to configure Unbound, a caching DNS resolver. The documentation of version 1.6.8 says: Server Options private-domain: <domain name> Allow this domain, and all its subdomains to contain private addresses. Give multiple times to allow multiple domain names to contain private addresses. Default is none. We run unbound Version 1.6.0 with Debian Stretch … Read more

Dig +trace not working, while +notrace works

I am trying to troubleshoot some DNS issues and I am starting by trying to trace my DNS lookups using dig +trace. Im getting some weird results. If do a normal dig to my unbound resolver. dig @192.168.20.1 +notrace pfsense.org I get a normal result. doubleh2admin@doubleh2:~$ dig @192.168.20.1 +notrace pfsense.org ; <<>> DiG 9.11.4-3ubuntu5.1-Ubuntu <<>> … Read more

Measuring/monitoring Unbound Resolver Performance

I am running Unbound resolver on FreeBSD, and i am looking for a solution to measure its performance.sometimes there are some delays in regard of resolving domain names,and my customers are complaining. Also using Zabbix monitoring system to monitor QPS.But is there any solution to monitor the performance of unbound itself? i have come-up to … Read more

Unbound doesn’t accept answer from non-DNSSEC forward rule

Unbound gets the right answer (see below) from a forward-zone, but proceeds to ignore it and try to query other DNS servers. I’m running unbound (1.10.0) on a docker image when behind a public hotspot. I’ve added forward-rules to allow communication when detecting that a login is required. Important note: At this moment I don’t … Read more

Can’t get unbound to work in docker container

It seems pretty simple to set up but I can’t actually get it working.. Setup: $ docker run -it -p 53:5300/udp alpine /bin/sh $ apk add bash nano wget ca-certificates bind-tools unbound $ mkdir -p /var/log/unbound $ touch /var/log/unbound/unbound.log $ chown unbound /var/log/unbound/unbound.log /etc/unbound/unbound.conf: server: verbosity: 2 interface: 0.0.0.0 port: 5300 logfile: “/var/log/unbound/unbound.log” root-hints: /usr/share/dns-root-hints/named.root … Read more

Unbound not returning A records over IPv6

I recently replaced my pfSense installation with OPNsense and have been struggling a bit with the Unbound installation. In short, it’s IPv6 enabled and everything works well (both IPv6 and IPv4) in general. However, it seems to struggle with DNS look-ups for A Records over IPv6. Here’s an example: > $ dig +short -6 switch0.my.tld … Read more