Hi all,
I am trying to use Unbound’s SSL upstream. Cause I am new to Unbound here, I doubt I might configure them wrong. Both sides use unbound1.5.7
The configuration of Resolver：
server:
directory: “/etc/unbound”
username: root
make sure unbound can access entropy from inside the chroot.
e.g. on linux the use these commands (on BSD, devfs(8) is used):
mount --bind -n /dev/random /etc/unbound/dev/random
and mount --bind -n /dev/log /etc/unbound/dev/log
chroot: “/etc/unbound”
logfile: “/etc/unbound/unbound.log” #uncomment to use logfile.
pidfile: “/etc/unbound/unbound.pid”
verbosity: 1 # uncomment and increase to get more logging.
listen on all interfaces, answer queries from the local subnet.
interface: 0.0.0.0
interface: ::0
access-control: 10.0.0.0/8 allow
The configuration of Forwarder:
unbound.conf(5) config file for unbound(8).
server:
directory: “/etc/unbound”
username: root
make sure unbound can access entropy from inside the chroot.
e.g. on linux the use these commands (on BSD, devfs(8) is used):
mount --bind -n /dev/random /etc/unbound/dev/random
and mount --bind -n /dev/log /etc/unbound/dev/log
chroot: “/etc/unbound”
logfile: “/etc/unbound/unbound.log” #uncomment to use logfile.
pidfile: “/etc/unbound/unbound.pid”
verbosity: 1 # uncomment and increase to get more logging.
listen on all interfaces, answer queries from the local subnet.
interface: 0.0.0.0
interface: ::0
access-control: 10.0.0.0/8 allow
tcp-upstream: yes
ssl-upstream: yes
ssl-port: 853
forward-zone:
name: “.”
forward-addr: 10.4.1.2@853
server:
ssl-upstream: yes
tcp-upstream: yes
do-daemonize: no
logfile: “”
verbosity: 10
Any help is welcome. Thanks.