From Surf Wiki (app.surf) — the open knowledge base
Unbound (DNS server)
Domain Name System software
Domain Name System software
| Field | Value | |
|---|---|---|
| name | Unbound | |
| logo | ||
| logo_size | 250px | |
| screenshot | Unbound 1.22.0 screenshot.webp | |
| caption | Screenshot of Unbound 1.22.0, showing version information, build configuration, and usage of `unbound-host` to check DNSSEC validation | |
| developer | NLnet Labs | |
| released | ||
| latest release version | latest release date = | |
| repo | ||
| programming language | C | |
| operating system | Unix-like, Windows | |
| genre | DNS server | |
| license | BSD-3-Clause |
Unbound is a validating, recursive, and caching DNS resolver software product from NLnet Labs. It is distributed free of charge in open-source form under the Modified BSD License.
Features
- Caching resolver with prefetching of popular items before they expire
- DNS over TLS forwarding and server, with domain-validation
- DNS over HTTPS
- DNS over QUIC
- Query name minimization
- Aggressive use of DNSSEC-Validated Cache
- Authority zones, for a local copy of the root zone
- DNS64
- DNSCrypt
- Domain Name System Security Extensions (DNSSEC) validating
- EDNS client subnet
History
Originally designed by Jakob Schlyter of Kirei and Roy Arends of Nominet in 2004, funding was provided by VeriSign and ep.net to develop a prototype written in Java (David Blacka and Matt Larson, VeriSign). In 2006, the prototype was re-written for high-performance in the C programming language by NLnet Labs.
Unbound is designed as a set of modular components that incorporate modern features, such as enhanced security (DNSSEC) validation, Internet Protocol Version 6 (IPv6), and a client resolver application programming interface library as an integral part of the architecture. Originally written for POSIX-compatible Unix-like operating system, it runs on FreeBSD, OpenBSD, NetBSD, macOS, and Linux, as well as Microsoft Windows.
Reception
Unbound has supplanted the Berkeley Internet Name Daemon (BIND) as the default, base-system name server in FreeBSD and OpenBSD, where it is perceived as smaller, more modern, and more secure for most applications.
References
References
- (2018-06-07). "Actually secure DNS over TLS in Unbound".
- (8 October 2020). "Unbound 1.12.0 released".
- (9 October 2020). "DNS-over-HTTPS in Unbound".
- (2024-12-20). "Unbound 1.22.0 released".
- (10 December 2015). "Unbound 1.5.7 release".
- (15 March 2018). "Unbound 1.7.0 Release".
- (15 March 2018). "Unbound 1.7.0 Release".
- (8 November 2023). "unbound.conf(5) - Unbound 1.19.0 Documentation".
- "Open source DNS server takes on BIND".
- (August 23, 2014). "Heads Up: BIND Disabled in Base".
- Dag-Erling Smørgrav. (September 24, 2014). "DNS in FreeBSD 10".
This article was imported from Wikipedia and is available under the Creative Commons Attribution-ShareAlike 4.0 License. Content has been adapted to SurfDoc format. Original contributors can be found on the article history page.
Ask Mako anything about Unbound (DNS server) — get instant answers, deeper analysis, and related topics.
Research with MakoFree with your Surf account
Create a free account to save articles, ask Mako questions, and organize your research.
Sign up freeThis content may have been generated or modified by AI. CloudSurf Software LLC is not responsible for the accuracy, completeness, or reliability of AI-generated content. Always verify important information from primary sources.
Report