unbound config

server:

 

        verbosity: 1

        statistics-interval: 0

        statistics-cumulative: no

        extended-statistics: yes

        num-threads: 2

        interface: 0.0.0.0

        interface-automatic: no

       so-rcvbuf: 4m

         so-sndbuf: 4m

         msg-cache-size: 64m

         rrset-cache-size: 64m

         cache-max-ttl: 600

         do-ip4: yes

         do-ip6: no

         access-control: 10.0.0.0/8 allow

        chroot: ""

        username: "unbound"

        directory: "/etc/unbound"

       log-time-ascii: yes

        pidfile: "/var/run/unbound/unbound.pid"

         hide-identity: yes

        harden-glue: yes

        harden-dnssec-stripped: yes

        harden-below-nxdomain: yes

        harden-referral-path: yes

        use-caps-for-id: no

        unwanted-reply-threshold: 10000000

        do-not-query-localhost: no

        prefetch: yes

        prefetch-key: yes

        rrset-roundrobin: yes

        minimal-responses: yes

         module-config: "iterator"

        trusted-keys-file: /etc/unbound/keys.d/*.key

        auto-trust-anchor-file: "/var/lib/unbound/root.key"

        val-clean-additional: yes

        val-permissive-mode: no

        val-log-level: 1

        local-zone: "google.com" redirect

        local-data: "google.com IN A 10.8.128.235"

        local-zone: "google.com.hk" redirect

        local-data: "google.com.hk IN A 10.8.128.235"

        include: /etc/unbound/local.d/*.conf

remote-control:

        control-enable: yes

        server-key-file: "/etc/unbound/unbound_server.key"

 

        server-cert-file: "/etc/unbound/unbound_server.pem"

 

        control-key-file: "/etc/unbound/unbound_control.key"

 

        control-cert-file: "/etc/unbound/unbound_control.pem"

 

include: /etc/unbound/conf.d/*.conf

forward-zone:

        name:"."

        forward-addr:10.8.2.55

转载于:https://www.cnblogs.com/psggz/p/8393783.html