| b.liu | e958203 | 2025-04-17 19:18:16 +0800 | [diff] [blame] | 1 | config unbound 'ub_main' |
| 2 | option add_extra_dns '0' |
| 3 | option add_local_fqdn '1' |
| 4 | option add_wan_fqdn '0' |
| 5 | option dhcp_link 'none' |
| 6 | option dhcp4_slaac6 '0' |
| 7 | option dns64 '0' |
| 8 | option dns64_prefix '64:ff9b::/96' |
| 9 | option domain 'lan' |
| 10 | option domain_type 'static' |
| 11 | option edns_size '1232' |
| 12 | option extended_stats '0' |
| 13 | option hide_binddata '1' |
| 14 | option interface_auto '1' |
| 15 | option listen_port '53' |
| 16 | option localservice '1' |
| 17 | option manual_conf '0' |
| 18 | option num_threads '1' |
| 19 | option protocol 'default' |
| 20 | option query_minimize '0' |
| 21 | option query_min_strict '0' |
| 22 | option rate_limit '0' |
| 23 | option rebind_localhost '0' |
| 24 | option rebind_protection '1' |
| 25 | option recursion 'default' |
| 26 | option resource 'default' |
| 27 | option root_age '9' |
| 28 | option ttl_min '120' |
| 29 | option ttl_neg_max '1000' |
| 30 | option unbound_control '0' |
| 31 | option validator '0' |
| 32 | option validator_ntp '1' |
| 33 | option verbosity '1' |
| 34 | list iface_trig 'lan' |
| 35 | list iface_trig 'wan' |
| 36 | list iface_wan 'wan' |
| 37 | #list domain_insecure 'ntp.example.com' |
| 38 | |
| 39 | config zone 'auth_icann' |
| 40 | # cache the root zone all at once to speed up recursion |
| 41 | option enabled '0' |
| 42 | option fallback '1' |
| 43 | option url_dir 'https://www.internic.net/domain/' |
| 44 | option zone_type 'auth_zone' |
| 45 | list server 'lax.xfr.dns.icann.org' |
| 46 | list server 'iad.xfr.dns.icann.org' |
| 47 | list zone_name '.' |
| 48 | list zone_name 'arpa.' |
| 49 | list zone_name 'in-addr.arpa.' |
| 50 | list zone_name 'ip6.arpa.' |
| 51 | |
| 52 | config zone 'fwd_isp' |
| 53 | # forward ISP account management to DHCP announced DNS servers |
| 54 | option enabled '0' |
| 55 | option fallback '1' |
| 56 | option resolv_conf '1' |
| 57 | option zone_type 'forward_zone' |
| 58 | list zone_name 'isp-bill.example.com.' |
| 59 | list zone_name 'isp-mail.example.net.' |
| 60 | |
| 61 | config zone 'fwd_google' |
| 62 | option enabled '0' |
| 63 | option fallback '1' |
| 64 | option tls_index 'dns.google' |
| 65 | option tls_upstream '1' |
| 66 | option zone_type 'forward_zone' |
| 67 | list server '8.8.4.4' |
| 68 | list server '8.8.8.8' |
| 69 | list server '2001:4860:4860::8844' |
| 70 | list server '2001:4860:4860::8888' |
| 71 | list zone_name '.' |
| 72 | |
| 73 | config zone 'fwd_cloudflare' |
| 74 | option enabled '0' |
| 75 | option fallback '1' |
| 76 | option tls_index 'cloudflare-dns.com' |
| 77 | option tls_upstream '1' |
| 78 | option zone_type 'forward_zone' |
| 79 | list server '1.1.1.1' |
| 80 | list server '1.0.0.1' |
| 81 | list server '2606:4700:4700::1111' |
| 82 | list server '2606:4700:4700::1001' |
| 83 | list zone_name '.' |
| 84 | |