Unbound - The NLnet Labs Blog

Sign in Subscribe

Unbound

A collection of 12 posts

The Next Five Years of DNS at NLnet Labs

The Next Five Years of DNS at NLnet Labs

2024 marks 25 years of NLnet Labs. We have delivered on our mission to make the domain name system (DNS) more dependable and trustworthy, and we are full of ambitions for the future. DNS standards and operations have evolved significantly in the last decades as technology advances and increasingly sophisticated

Who? He's from the village, you don't know him

Somebody Told Me

Proxying client information to your favorite resolver and more.

A little extra explanation is always helpf

Extended DNS Error support for Unbound

Unbound 1.16.0 adds support for Extended DNS Errors (EDEs) as codified in RFC 8914. While EDE was already supported in NSD since version 4.3.6 released in April of 2021, as with most things in a resolver, EDE support took more time to implement. As a short

SAD DNS and NLnet Labs DNS software

SAD DNS and NLnet Labs DNS software

Update 18 November 2021: we are aware of the follow-up paper published by the researchers. The text below remains accurate for Unbound users. Please note that Unbound 1.13.2 and newer has IPv6 PMTU disabled for UDP. During the ACM CCS conference 2020, held November 9-13, researchers from UC

DNS-over-HTTPS in Unbound

DNS-over-HTTPS in Unbound

A major step forward in end user privacy.

Some Country for Old Men

Some Country for Old Men

An Unbound Story of Serving Expired Records.

Response Policy Zones in Unbound

Response Policy Zones in Unbound

We are incredibly happy to introduce Unbound 1.10. This release features RPZ, a mechanism that makes it possible to define your local policies in a standardized way, and load your policies from external sources.

Prototyping Unbound extensions in minutes with Python and Docker

Prototyping Unbound extensions in minutes with Python and Docker

How, theoretically, could one lower the barrier to trying out the connection testing feature of the Internet.nl application.

Aggressive use of the DNSSEC-Validated cache in Unbound

Aggressive use of the DNSSEC-Validated cache in Unbound

One of the new features in Unbound 1.7.0 is the aggressive use of the DNSSEC-Validated cache, resulting in decreased load on name servers.

The peculiar case of NSEC processing using expanded wildcard records

The peculiar case of NSEC processing using expanded wildcard records

Unbound, Google public DNS, PowerDNS and Dnsmasq contained a flaw that made it possible to downgrade secure connections.

Privacy: Using DNS-over-TLS with the new Quad9 DNS Service

Privacy: Using DNS-over-TLS with the new Quad9 DNS Service

Install and configure Stubby to communicate securely with the Quad9 DNS service using DNS-over-TLS.

Client based filtering in Unbound

Client based filtering in Unbound

Using ‘tags’ introduced in Unbound 1.5.10 and ‘views’ in Unbound 1.6.0 to let DNS answers depend on the address of the client.