prefetch: yes
prefetch-key: yes
- # Randomise any cached responses
- rrset-roundrobin: yes
-
# Privacy Options
hide-identity: yes
hide-version: yes
# TLS
tls-cert-bundle: /etc/ssl/certs/ca-bundle.crt
- # EDNS Buffer Size (#12240)
- edns-buffer-size: 1232
-
# Harden against DNS cache poisoning
unwanted-reply-threshold: 1000000
# Allow access from everywhere
access-control: 0.0.0.0/0 allow
+ # Timeout behaviour
+ infra-keep-probing: yes
+
# Bootstrap root servers
root-hints: "/etc/unbound/root.hints"