Unbound is a validating, recursive, and caching DNS resolver.
Go to file
Yorgos Thessalonikefs c6746499c1 Changelog entry for #1010:
- Merge #1010: Mention REFUSED has the TC bit set with unmatched
  allow_cookie acl in the manpage. It also fixes the code to match the
  documentation about clients with a valid cookie that bypass the
  ratelimit regardless of the allow_cookie acl.
2024-02-20 15:33:18 +01:00
.github For analysis workflow, clean up the script to use OpenSSL Configure 2024-01-17 16:23:18 +01:00
cachedb Merge branch 'master' into cachedb-no-store 2023-10-11 13:51:34 +02:00
compat - Fix ssl.h include brackets, instead of quotes. 2023-03-16 15:40:43 +01:00
contrib - For #889: use netcat-openbsd instead of netcat-traditional. 2023-07-21 21:04:40 +02:00
daemon Mention REFUSED has the TC bit set with unmatched allow_cookie acl in the manpage (#1010) 2024-02-20 15:29:34 +01:00
dns64 Fixes for dns64 fallback to plain AAAA when no A records: 2023-10-18 12:03:40 +02:00
dnscrypt Fix typos 2021-11-13 16:56:15 +02:00
dnstap - For #1006: fix logic error introduced by previous fix. 2024-02-07 10:49:28 +01:00
doc Changelog entry for #1010: 2024-02-20 15:33:18 +01:00
dynlibmod - Fix to remove two c99 notations. 2023-09-15 13:30:30 +02:00
edns-subnet - Fix edns subnet so that queries with a source prefix of zero cause 2023-10-09 12:21:22 +02:00
ipsecmod - Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699. 2022-08-01 13:24:40 +02:00
ipset fix ipset wrong behavior 2023-10-17 18:35:42 +03:00
iterator - Remove unneeded newlines and improve indentation in remote control 2024-01-04 17:06:15 +01:00
libunbound - Fix #949: "could not create control compt". 2023-10-11 11:59:26 +02:00
pythonmod - For multi Python module setups, clean previously parsed module 2023-10-16 16:03:11 +02:00
respip PROXYv2 downstream support (#760) 2022-10-03 15:29:47 +02:00
services Merge commit '92f2a1ca690a44880f4c4fa70a4b5a4b029aaf1c' 2024-02-13 13:58:09 +01:00
sldns - Fix that printout of EDNS options shows the EDNS cookie option by 2023-10-09 12:36:54 +02:00
smallapp - disable-edns-do, unbound-checkconf warns about disable-edns-do and DNSSEC 2023-10-04 15:28:52 +02:00
testcode Merge commit '92f2a1ca690a44880f4c4fa70a4b5a4b029aaf1c' 2024-02-13 13:58:09 +01:00
testdata Merge commit '92f2a1ca690a44880f4c4fa70a4b5a4b029aaf1c' 2024-02-13 13:58:09 +01:00
util Merge commit '92f2a1ca690a44880f4c4fa70a4b5a4b029aaf1c' 2024-02-13 13:58:09 +01:00
validator Merge commit '92f2a1ca690a44880f4c4fa70a4b5a4b029aaf1c' 2024-02-13 13:58:09 +01:00
winrc - Fix warning for windres on resource files due to redefinition. 2024-01-17 16:19:56 +01:00
.gitattributes - .gitattributes line for githubs code language display. 2016-11-03 08:29:29 +00:00
.gitignore - Fix to git ignore the library symbol file that configure can create. 2023-02-09 12:08:27 +01:00
.travis.yml - Travis, fix warning in ubsan compile. 2021-03-24 15:34:26 +01:00
ac_pkg_swig.m4 - Fix #1230: swig version 2.0.0 is required for pythonmod, with 2017-03-07 10:40:45 +00:00
aclocal.m4 - Fix for #570: regen aclocal.m4, fix configure.ac for spelling. 2021-11-29 11:41:45 +01:00
acx_nlnetlabs.m4 - Fix to link with libssp for libcrypto and getaddrinfo check for 2024-01-16 16:40:14 +01:00
acx_python.m4 - Fix python module install path detection. 2023-01-09 15:03:38 +01:00
ax_pthread.m4 - updated ax_pthread.m4 to version 21 with clang support, this 2015-12-11 12:19:12 +00:00
config.guess - Upgrade config.guess(2020-01-01) and config.sub(2020-01-01). 2020-03-03 18:29:11 +01:00
config.h.in - autoheader, autoconf. 2024-02-07 10:42:39 +01:00
config.sub - Upgrade config.guess(2020-01-01) and config.sub(2020-01-01). 2020-03-03 18:29:11 +01:00
configure - These fixes are part of the 1.19.1 release, that is a security 2024-02-13 14:03:30 +01:00
configure.ac - These fixes are part of the 1.19.1 release, that is a security 2024-02-13 14:03:30 +01:00
install-sh - Newer aclocal and libtoolize used for generating configure scripts, 2019-01-24 08:57:47 +00:00
LICENSE - Fix #551: License change "Regents" to "Copyright holder", matching 2014-02-07 12:43:43 +00:00
ltmain.sh - Newer aclocal and libtoolize used for generating configure scripts, 2019-01-24 08:57:47 +00:00
makedist.sh - Fix to link with libssp for libcrypto and getaddrinfo check for 2024-01-16 16:40:14 +01:00
Makefile.in - Fix #946: Forwarder returns servfail on upstream response noerror no 2023-10-04 18:16:22 +02:00
README gmake no longer needed. 2012-02-10 10:34:15 +00:00
README-Travis.md Fix typos 2021-11-13 16:56:15 +02:00
README.md - Mention flex and bison in README.md when building from repository 2023-11-01 13:57:06 +01:00
SECURITY.md add SECURITY.md, based on krill 2022-07-05 16:39:04 +02:00
systemd.m4 - Fix autoconf of systemd check for lack of pkg-config. 2017-02-13 10:15:01 +00:00

Unbound

Github Build Status Packaging status Fuzzing Status Documentation Status Mastodon Follow

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. If you have any feedback, we would love to hear from you. Dont hesitate to create an issue on Github or post a message on the Unbound mailing list. You can learn more about Unbound by reading our documentation.

Compiling

Make sure you have the C toolchain, OpenSSL and its include files, and libexpat installed. If building from the repository source you also need flex and bison installed. Unbound can be compiled and installed using:

./configure && make && make install

You can use libevent if you want. libevent is useful when using many (10000) outgoing ports. By default max 256 ports are opened at the same time and the builtin alternative is equally capable and a little faster.

Use the --with-libevent configure option to compile Unbound with libevent support.

Unbound configuration

All of Unbound's configuration options are described in the man pages, which will be installed and are available on the Unbound documentation page.

An example configuration file is located in doc/example.conf.