Created
October 29, 2021 08:00
-
-
Save gagan0123/f2f99a712d4c52f5ddc60d517409fd74 to your computer and use it in GitHub Desktop.
PiHole Unbound Config with Caching
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| server: | |
| # If no logfile is specified, syslog is used | |
| # logfile: "/var/log/unbound/unbound.log" | |
| verbosity: 0 | |
| interface: 127.0.0.1 | |
| port: 5335 | |
| do-ip4: yes | |
| do-udp: yes | |
| do-tcp: yes | |
| # May be set to yes if you have IPv6 connectivity | |
| do-ip6: no | |
| # You want to leave this to no unless you have *native* IPv6. With 6to4 and | |
| # Terredo tunnels your web browser should favor IPv4 for the same reasons | |
| prefer-ip6: no | |
| # Use this only when you downloaded the list of primary root servers! | |
| # If you use the default dns-root-data package, unbound will find it automatically | |
| #root-hints: "/var/lib/unbound/root.hints" | |
| # Trust glue only if it is within the server's authority | |
| harden-glue: yes | |
| # Require DNSSEC data for trust-anchored zones, if such data is absent, the zone becomes BOGUS | |
| harden-dnssec-stripped: yes | |
| # Don't use Capitalization randomization as it known to cause DNSSEC issues sometimes | |
| # see https://discourse.pi-hole.net/t/unbound-stubby-or-dnscrypt-proxy/9378 for further details | |
| use-caps-for-id: no | |
| # Reduce EDNS reassembly buffer size. | |
| # Suggested by the unbound man page to reduce fragmentation reassembly problems | |
| edns-buffer-size: 1472 | |
| # Ensure kernel buffer is large enough to not lose messages in traffic spikes | |
| so-rcvbuf: 1m | |
| # Ensure privacy of local IP ranges | |
| private-address: 192.168.0.0/16 | |
| private-address: 169.254.0.0/16 | |
| private-address: 172.16.0.0/12 | |
| private-address: 10.0.0.0/8 | |
| private-address: fd00::/8 | |
| private-address: fe80::/10 | |
| # Caching | |
| msg-cache-size: 128m | |
| cache-min-ttl: 300 | |
| cache-max-ttl: 86400 | |
| neg-cache-size: 4M | |
| infra-cache-slabs: 4 | |
| key-cache-slabs: 4 | |
| msg-cache-slabs: 4 | |
| num-threads: 3 | |
| rrset-cache-size: 256m | |
| rrset-cache-slabs: 4 | |
| minimal-responses: yes | |
| prefetch: yes | |
| prefetch-key: yes | |
| serve-expired: yes |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment