Unbound-checkconf

 server:

    verbosity: 1

    use-syslog: yes

    logfile: "/var/log/unbound.log"

    log-time-ascii: yes

Parametres par defaut

    interface: 0.0.0.0

    interface: ::1

    do-ip4: yes

    do-ip6: yes

    do-udp: yes

    do-tcp: yes

  autoriser mon serveur

    access-control: 127.0.0.0/8 allow

  autoriser les réseaux locaux

    access-control: 192.168.0.0/24 allow

    access-control: 192.168.1.0/24 allow

   interdire tout le reste

    access-control: 0.0.0.0/0 refuse

   tous les CPUs

    num-threads: 8

    msg-cache-slabs: 16

    rrset-cache-slabs: 16

    infra-cache-slabs: 16

    key-cache-slabs: 16

  root hints 

    root-hints: "/var/lib/unbound/root.hints"

    harden-referral-path: yes

    use-caps-for-id: yes

    hide-identity: yes

    hide-version: yes

    harden-glue: yes

    harden-dnssec-stripped: yes

    cache-min-ttl: 3600

    cache-max-ttl: 86400

    prefetch: yes

    unwanted-reply-threshold: 10000

    val-clean-additional: yes

    val-log-level: 2

    private-address: 192.168.0.0/16

    private-address: 172.16.0.0/12

    private-address: 10.0.0.0/8

Taille du cache

    rrset-cache-size: 100m

    msg-cache-size: 50m

gestion DNSSEC

   harden-below-nxdomain: yes

   harden-dnssec-stripped: yes