Mercurial > repos > other > Puppet
view common/unbound.conf @ 351:78a9c5946154
Handle DNS64 locally to fix DNSSEC issues
Unbound passes a "DO" (DNSSEC Okay) flag to upstream servers,
which means they don't synthesise DNS64 entries correctly for
some domains.
Doing this loses us redundancy (if :82: goes down we're DNS-less
until a manual change) but at least we can resolve more DNS now
author | IBBoard <dev@ibboard.co.uk> |
---|---|
date | Fri, 02 Oct 2020 20:16:04 +0100 |
parents | 1182a180085d |
children |
line wrap: on
line source
# Based on https://www.nlnetlabs.nl/documentation/unbound/howto-setup/ server: interface: 127.0.0.1 interface: ::1 access-control: 127.0.0.0/24 allow access-control: ::1 allow verbosity: 1