starred/unbound-docker
1
0
Fork 0
mirror of https://github.com/klutchell/unbound-docker.git synced 2026-10-17 16:02:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
805 Commits 13 Branches 43 Tags
684636d5cf2c1072417bf94de19486ae5aee19bd
Commit Graph
29 Commits
Author SHA1 Message Date
Kyle Harding f533951b54 Download root hints and generate root key at build time 
There is no need for these to be included with the
source and it just adds a manual step to be considered.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-06-26 08:49:18 -04:00
churchofnoise 09aa5d95ea Update unbound.conf.example 
Refresh with example config from https://github.com/NLnetLabs/unbound/blob/master/doc/example.conf.in
 2024-05-08 11:23:23 +02:00
hugochc 956cbf117d Added option to enable CacheDB Module with Redis backend. 
How to use:
The Cache DB module must be configured in the (unbound.conf) module-config: directive, e.g.: module-config: "validator cachedb iterator"

Additionally, must be created cachedb.conf file under custom.conf.d directory with Redis credentials.
 2024-03-15 09:19:21 -03:00
churchofnoise 91a07bd6bb Update unbound.conf.example 2024-03-14 15:04:17 +01:00
churchofnoise 07c67ab658 Update unbound.conf.example 2024-03-07 12:33:25 +01:00
Kyle Harding 80d3818647 Remove hardcoded port from default interface 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-03-01 19:44:55 -05:00
Kyle Harding 83577cb114 Update Unbound to 1.19.1 
This security release fixes two DNSSEC validation vulnerabilities:
CVE-2023-50387 (referred here as the KeyTrap vulnerability) and
CVE-2023-50868 (referred here as the NSEC3 vulnerability).

See: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.1
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-02-13 08:38:50 -05:00
Kyle Harding 91be0e3f0e Update root.hints and root.key 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-15 09:11:00 -05:00
Kyle Harding 2a791bd918 BREAKING: Move runtime chroot directory to /var/unbound 
This will make it easier to override configuration files in /etc/unbound
without having to provide custom root hints.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-14 19:10:40 -05:00
Kyle Harding 6d515c5190 Remove port setting and specify the interface with port 
The port setting is a default and cannot be overridden
with custom configurations, instead we should append to the
list of listen interfaces while specifying the port.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-14 15:00:44 -05:00
Kyle Harding 8e92b4cf7e Update Unbound to 1.19.0 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-08 09:25:32 -05:00
Kyle Harding 39b4f6c02b Commit example configuration file for reference 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-08-30 10:04:36 -04:00
Kyle Harding 9f8a8a5ac7 Add example send-client-subnet config 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-08-29 08:39:36 -04:00
Kyle Harding 27b9f63262 Add nip.io to private domains 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-03-17 11:25:27 -04:00
Gerd aafe70122d Add performance settings to unbound.conf 
The added settings increase the performance. I have tried a lot and these settings offer a significant improvement.

Update unbound.conf

Reduce cache size
 2022-08-09 18:38:58 +02:00
churchofnoise 579fc8206c Update unbound.conf 
Remove do-ip6 to avoid limitations of Unbound functionality.
Can be configured as 'no' in custom conf file.
 2022-07-29 12:42:32 -04:00
Kyle Harding edcf1b5a39 Add tls-cert-bundle to default configuration 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-07-25 12:15:33 -04:00
Kyle Harding e74287d9a1 unbound.conf: Include toplevel for custom configuration 
This allows custom files to override any default values.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-07-04 16:01:38 -04:00
Kyle Harding 821844d38b Allow custom configuration clauses beyond just server 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-06-27 16:07:59 -04:00
Kyle Harding f288608749 Add plex to private-domains.conf 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-06-27 16:07:59 -04:00
Kyle Harding bc6d25e99d Include custom config directory in unbound conf 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-06-27 16:07:59 -04:00
Kyle Harding d30056d514 Create custom config include directory 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-06-27 16:07:59 -04:00
Kyle Harding 23ce95b039 unbound: update root hints 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-06-05 06:13:38 -04:00
Kyle Harding e448fe9f2e defaults: Increase number of ports and queries per thread 
As per performance recommendations with libevent:
https://unbound.docs.nlnetlabs.nl/en/latest/topics/performance.html?highlight=libevent#using-libevent

Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-03-17 11:56:27 -04:00
churchofnoise c0bc475944 Update unbound.conf 
In line with DNS Flag Day 2020, change edns-buffer-size default to 1232
 2022-03-15 15:40:46 +01:00
Kyle Harding e854baefbe Update root hints 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2021-12-15 09:26:19 -05:00
Kyle Harding 95380d76de Update root trust anchor 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2021-12-13 19:18:34 -05:00
Kyle Harding 117a2c220b root-hints: include external root.hints file 
Avoid cases where the default root hints may be out-of-date
by inluding our own copy in the overlay. This can be updated
more easily at build time, or at runtime.

eg. wget https://www.internic.net/domain/named.root -O root.hints

Change-type: patch
Signed-off-by: Kyle Harding <kyle@balena.io>
 2021-01-12 13:17:51 -05:00
Kyle Harding a711a1231a unbound-dnscrypt: initial commit 
Initial commit of buildroot-based image containing unbound w/ dnscrypt
and bind tools like dig and nslookup.

package/unbound files are based on the upstream buildroot repo.

https://github.com/buildroot/buildroot/tree/eb4ff9f11fe3585ca5f0e0b7bfd31b93dafd2dd1/package/unbound

Change-type: major
Signed-off-by: Kyle Harding <kyle@balena.io>
 2020-12-08 15:40:01 -05:00