unbound config

server:

 

         verbosity: 1

         statistics-interval: 0

         statistics-cumulative: no

         extended-statistics: yes

         num-threads: 2

         interface: 0.0.0.0

         interface-automatic: no

        so-rcvbuf: 4m

          so-sndbuf: 4m

          msg-cache-size: 64m

          rrset-cache-size: 64m

          cache-max-ttl: 600

          do -ip4: yes

          do -ip6: no

          access-control: 10.0.0.0 /8 allow

         chroot: ""

         username: "unbound"

         directory: "/etc/unbound"

        log- time -ascii: yes

         pidfile: "/var/run/unbound/unbound.pid"

          hide-identity: yes

         harden-glue: yes

         harden-dnssec-stripped: yes

         harden-below-nxdomain: yes

         harden-referral-path: yes

         use-caps- for - id : no

         unwanted-reply-threshold: 10000000

         do -not-query-localhost: no

         prefetch: yes

         prefetch-key: yes

         rrset-roundrobin: yes

         minimal-responses: yes

          module-config: "iterator"

         trusted-keys- file : /etc/unbound/keys .d/*.key

         auto-trust-anchor- file : "/var/lib/unbound/root.key"

         val-clean-additional: yes

         val-permissive-mode: no

         val-log-level: 1

         local -zone: "google.com" redirect

         local -data: "google.com IN A 10.8.128.235"

         local -zone: "google.com.hk" redirect

         local -data: "google.com.hk IN A 10.8.128.235"

         include: /etc/unbound/local .d/*.conf

remote-control:

         control- enable : yes

         server-key- file : "/etc/unbound/unbound_server.key"

 

         server-cert- file : "/etc/unbound/unbound_server.pem"

 

         control-key- file : "/etc/unbound/unbound_control.key"

 

         control-cert- file : "/etc/unbound/unbound_control.pem"

 

include: /etc/unbound/conf .d/*.conf

forward-zone:

         name: "."

         forward-addr:10.8.2.55

转载于:https://www.cnblogs.com/psggz/p/8393783.html