starred/unbound-docker
1
0
Fork 0
mirror of https://github.com/klutchell/unbound-docker.git synced 2026-10-16 08:02:48 +00:00
Code Issues Packages Projects Releases Wiki Activity
632 Commits 13 Branches 43 Tags
5a9b46acca1fd6c7124f60a4f3441237107a2ebf
Commit Graph
25 Commits
Author SHA1 Message Date
churchofnoise 07c67ab658 Update unbound.conf.example 2024-03-07 12:33:25 +01:00
Kyle Harding 80d3818647 Remove hardcoded port from default interface 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-03-01 19:44:55 -05:00
Kyle Harding 83577cb114 Update Unbound to 1.19.1 
This security release fixes two DNSSEC validation vulnerabilities:
CVE-2023-50387 (referred here as the KeyTrap vulnerability) and
CVE-2023-50868 (referred here as the NSEC3 vulnerability).

See: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.1
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-02-13 08:38:50 -05:00
Kyle Harding 91be0e3f0e Update root.hints and root.key 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-15 09:11:00 -05:00
Kyle Harding 2a791bd918 BREAKING: Move runtime chroot directory to /var/unbound 
This will make it easier to override configuration files in /etc/unbound
without having to provide custom root hints.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-14 19:10:40 -05:00
Kyle Harding 6d515c5190 Remove port setting and specify the interface with port 
The port setting is a default and cannot be overridden
with custom configurations, instead we should append to the
list of listen interfaces while specifying the port.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-14 15:00:44 -05:00
Kyle Harding 8e92b4cf7e Update Unbound to 1.19.0 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-08 09:25:32 -05:00
Kyle Harding 39b4f6c02b Commit example configuration file for reference 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-08-30 10:04:36 -04:00
Kyle Harding 9f8a8a5ac7 Add example send-client-subnet config 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-08-29 08:39:36 -04:00
Kyle Harding 27b9f63262 Add nip.io to private domains 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-03-17 11:25:27 -04:00
Gerd aafe70122d Add performance settings to unbound.conf 
The added settings increase the performance. I have tried a lot and these settings offer a significant improvement.

Update unbound.conf

Reduce cache size
 2022-08-09 18:38:58 +02:00
churchofnoise 579fc8206c Update unbound.conf 
Remove do-ip6 to avoid limitations of Unbound functionality.
Can be configured as 'no' in custom conf file.
 2022-07-29 12:42:32 -04:00
Kyle Harding edcf1b5a39 Add tls-cert-bundle to default configuration 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-07-25 12:15:33 -04:00
Kyle Harding e74287d9a1 unbound.conf: Include toplevel for custom configuration 
This allows custom files to override any default values.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-07-04 16:01:38 -04:00
Kyle Harding 821844d38b Allow custom configuration clauses beyond just server 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-06-27 16:07:59 -04:00
Kyle Harding f288608749 Add plex to private-domains.conf 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-06-27 16:07:59 -04:00
Kyle Harding bc6d25e99d Include custom config directory in unbound conf 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-06-27 16:07:59 -04:00
Kyle Harding d30056d514 Create custom config include directory 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-06-27 16:07:59 -04:00
Kyle Harding 23ce95b039 unbound: update root hints 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-06-05 06:13:38 -04:00
Kyle Harding e448fe9f2e defaults: Increase number of ports and queries per thread 
As per performance recommendations with libevent:
https://unbound.docs.nlnetlabs.nl/en/latest/topics/performance.html?highlight=libevent#using-libevent

Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-03-17 11:56:27 -04:00
churchofnoise c0bc475944 Update unbound.conf 
In line with DNS Flag Day 2020, change edns-buffer-size default to 1232
 2022-03-15 15:40:46 +01:00
Kyle Harding e854baefbe Update root hints 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2021-12-15 09:26:19 -05:00
Kyle Harding 95380d76de Update root trust anchor 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2021-12-13 19:18:34 -05:00
Kyle Harding 117a2c220b root-hints: include external root.hints file 
Avoid cases where the default root hints may be out-of-date
by inluding our own copy in the overlay. This can be updated
more easily at build time, or at runtime.

eg. wget https://www.internic.net/domain/named.root -O root.hints

Change-type: patch
Signed-off-by: Kyle Harding <kyle@balena.io>
 2021-01-12 13:17:51 -05:00
Kyle Harding a711a1231a unbound-dnscrypt: initial commit 
Initial commit of buildroot-based image containing unbound w/ dnscrypt
and bind tools like dig and nslookup.

package/unbound files are based on the upstream buildroot repo.

https://github.com/buildroot/buildroot/tree/eb4ff9f11fe3585ca5f0e0b7bfd31b93dafd2dd1/package/unbound

Change-type: major
Signed-off-by: Kyle Harding <kyle@balena.io>
 2020-12-08 15:40:01 -05:00