Validator module

Unbound
1

Is the validator module only for DNSSEC validation?

If so, is there any benefit (less overhead) to running Unbound with
only the iterator module:
module-config: "iterator"
when you're basically operating as a local cache for the network
working with stub-zones and forwarders that are not using DNSSEC?

Thank you,

Chris

2

Hi chris,

You are correct.
Enabling validator module effectively enables DNSSEC.
If you only cache internal network dns entries, there is not much added value enabling validator as far as I can see.

Cheers,
Mike