## Authoritative, validating, recursive caching DNS
## unbound.conf -- https://calomel.org
#
server:
  # log verbosity
    verbosity: 1

logfile: "/etc/unbound/unbound.log"

    interface: 127.0.0.1

    port: 53

    do-ip4: yes

    do-ip6: no

    do-udp: yes

    do-tcp: yes

    access-control: 127.0.0.0/8 allow
    access-control: 10.0.0.0/24 allow

    hide-identity: yes

    hide-version: yes

    harden-glue: yes

    harden-dnssec-stripped: yes

    use-caps-for-id: yes

    cache-min-ttl: 3600

    cache-max-ttl: 86400

    prefetch: yes

  # number of threads to create. 1 disables threading. This should equal the number
  # of CPU cores in the machine. Our example machine has 4 CPU cores.
    num-threads: 2
#    num-threads: 1

    msg-cache-slabs: 4
    rrset-cache-slabs: 4
    infra-cache-slabs: 4
    key-cache-slabs: 4

    rrset-cache-size: 4m
    msg-cache-size: 4m

    so-rcvbuf: 4m

    unwanted-reply-threshold: 10000

    do-not-query-localhost: no

    val-clean-additional: yes

local-zone: "localhost." static
local-data: "localhost. 10800 IN NS localhost."
local-data: "localhost. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800"
local-data: "localhost. 10800 IN A 127.0.0.1"
local-zone: "127.in-addr.arpa." static
local-data: "127.in-addr.arpa. 10800 IN NS localhost."
local-data: "127.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 2 3600 1200 604800 10800"
local-data: "1.0.0.127.in-addr.arpa. 10800 IN PTR localhost."

#local-zone: "10.in-addr.arpa." nodefault
#local-zone: "10.in-addr.arpa." transparent

forward-zone:
name: "."
forward-addr: 8.8.8.8
forward-addr: 8.8.4.4

#
## Authoritative, validating, recursive caching DNS
## unbound.conf -- https://calomel.org