Unbound - DNS récursif (utilisé par OPNsense)
Find a file
W.C.A. Wijngaards 40b16d0565
Some checks failed
ci / build (push) Has been cancelled
- Fix for signed same-owner CNAME and ordinary RRset responses.
Thanks to Xin Wang and Jiajia Liu, Northwestern Polytechnical
  University, for the report.
2026-05-20 16:30:37 +02:00
.github - Update github ci cross platform to use 2026-04-17 10:41:24 +02:00
cachedb - Fix in depth for serve-expired responses from cachedb, that it 2026-05-20 14:58:26 +02:00
compat - Fix compat/gmtime_r old style definition syntax. 2026-04-17 11:05:15 +02:00
contrib - Fix #1389: [FR] replacement with ECC-GOST12 according to RFC9558. 2026-02-06 14:39:23 +01:00
daemon - Fix to clean up log ids after a failure to start a worker thread. 2026-05-07 14:42:29 +02:00
dns64 - Fix that for dns64 answers, the AAAA query is checked to be 2026-05-15 15:43:18 +02:00
dnscrypt - Fix CVE-2026-32792, Packet of death with DNSCrypt. Thanks to Andrew 2026-05-20 10:15:30 +02:00
dnstap Merge branch 'features/pthread-setname' 2026-04-17 16:22:04 +02:00
doc - Fix for signed same-owner CNAME and ordinary RRset responses. 2026-05-20 16:30:37 +02:00
dynlibmod ipset-pf-support, move startup and destartup to the front of the module 2024-07-03 13:53:44 +02:00
edns-subnet - Fix subnet store of servfail to not leak memory. 2026-04-17 13:48:38 +02:00
ipsecmod - Fix for #1344: Fix that respip and dns64 can be enabled at the 2025-09-30 11:28:15 +02:00
ipset ipset-pf-support, move startup and destartup to the front of the module 2024-07-03 13:53:44 +02:00
iterator - Fix for signed same-owner CNAME and ordinary RRset responses. 2026-05-20 16:30:37 +02:00
libunbound Mesh reply counters (#1374) 2025-11-13 09:33:05 +01:00
pythonmod - Fix for #1344: Fix that respip and dns64 can be enabled at the 2025-09-30 11:28:15 +02:00
respip Add lock unlock for view in memory error handling (#1415) 2026-03-06 08:57:54 +01:00
services - Fix cleaning up DoH session. The same query can be on multiple 2026-05-20 15:04:12 +02:00
sldns - Fix DNSKEY size calculation for noncanonical RSA DNSKEYs 2026-05-15 16:22:59 +02:00
smallapp - Fix compile failure in unbound-checkconf for older gcc compiler. 2026-03-09 09:18:43 +01:00
testcode - Fix CVE-2026-42944, Heap overflow and crash with multiple nsid, 2026-05-20 10:13:55 +02:00
testdata - Fix for signed same-owner CNAME and ordinary RRset responses. 2026-05-20 16:30:37 +02:00
util - Fix cleaning up DoH session. The same query can be on multiple 2026-05-20 15:04:12 +02:00
validator Merge branch 'branch-1.25.1' 2026-05-20 11:19:56 +02:00
winrc - Fix to increase size of the buffer for the win_svc reportev log 2026-04-17 11:05:31 +02:00
.gitattributes - .gitattributes line for githubs code language display. 2016-11-03 08:29:29 +00:00
.gitignore DNSoverQUIC (#871) 2024-10-09 10:32:03 +02:00
.travis.yml - Travis, fix warning in ubsan compile. 2021-03-24 15:34:26 +01:00
aclocal.m4 - Fix for #570: regen aclocal.m4, fix configure.ac for spelling. 2021-11-29 11:41:45 +01:00
acx_nlnetlabs.m4 - Fix configure test for nonstring attribute so that it does not 2025-11-06 15:03:17 +01:00
acx_python.m4 - Fix #1092: Ubuntu 22.04 Jammy fails to compile unbound 1.20.0; by 2024-06-19 15:27:50 +02:00
ax_build_date_epoch.m4 Prefer SOURCE_DATE_EPOCH over actual time (#1238) 2025-02-28 09:22:19 +01:00
ax_pkg_swig.m4 Update ax_pkg_swig.m4 and ax_pthread.m4 2024-04-15 11:54:46 +02:00
ax_pthread.m4 Update ax_pkg_swig.m4 and ax_pthread.m4 2024-04-15 11:54:46 +02:00
config.guess Add loongarch support: 2024-04-09 11:15:14 +08:00
config.h.in - Update generated configure, with autoconf. 2026-04-17 17:00:09 +02:00
config.sub Add loongarch support: 2024-04-09 11:15:14 +08:00
configure - Tag for 1.25.1 release, it contains the security fixes on 1.25.0. 2026-05-20 11:31:53 +02:00
configure.ac - Tag for 1.25.1 release, it contains the security fixes on 1.25.0. 2026-05-20 11:31:53 +02:00
install-sh - Newer aclocal and libtoolize used for generating configure scripts, 2019-01-24 08:57:47 +00:00
LICENSE - Fix #551: License change "Regents" to "Copyright holder", matching 2014-02-07 12:43:43 +00:00
ltmain.sh Changelog note for #1299 2025-07-02 10:57:23 +02:00
makedist.sh - Fix windows 64bit build for libssp dependency. 2026-04-29 15:06:09 +02:00
Makefile.in - For #1328: make depend. 2025-09-03 14:04:24 +02:00
README gmake no longer needed. 2012-02-10 10:34:15 +00:00
README-Travis.md Fix typos 2021-11-13 16:56:15 +02:00
README.md - Update the unbound.conf online man page link and some text 2025-10-20 14:34:40 +02:00
SECURITY.md add SECURITY.md, based on krill 2022-07-05 16:39:04 +02:00
systemd.m4 - Fix pkg-config availability check in dnstap/dnstap.m4 and 2024-06-21 14:34:12 +02:00

Unbound

Github Build Status Packaging status Fuzzing Status Documentation Status Mastodon Follow

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. If you have any feedback, we would love to hear from you. Dont hesitate to create an issue on Github or post a message on the Unbound mailing list. You can learn more about Unbound by reading our documentation.

Compiling

Make sure you have the C toolchain, OpenSSL and its include files, and libexpat installed. If building from the repository source you also need flex and bison installed. Unbound can be compiled and installed using:

./configure && make && make install

You can use libevent if you want. libevent is useful when using many (e.g., 10000) outgoing ports. Use the --with-libevent configure option to compile Unbound with libevent support.

If not, the default builtin alternative opens max 256 ports at the same time and is equally capable and a little faster.

Unbound configuration

All of Unbound's configuration options are described in the unbound.conf(5) man page, which will be installed and is also available on the Unbound documentation page for the latest version.

An example configuration file, with minimal documentation, is located in doc/example.conf.