Skip to content
Surf Wiki
Save to docs
technology/operating-systems

From Surf Wiki (app.surf) — the open knowledge base

Unbound (DNS server)

Domain Name System software


Summary

Domain Name System software

FieldValue
nameUnbound
logo
logo_size250px
screenshotUnbound 1.22.0 screenshot.webp
captionScreenshot of Unbound 1.22.0, showing version information, build configuration, and usage of `unbound-host` to check DNSSEC validation
developerNLnet Labs
released
latest release versionlatest release date =
repo
programming languageC
operating systemUnix-like, Windows
genreDNS server
licenseBSD-3-Clause

Unbound is a validating, recursive, and caching DNS resolver software product from NLnet Labs. It is distributed free of charge in open-source form under the Modified BSD License.

Features

  • Caching resolver with prefetching of popular items before they expire
  • DNS over TLS forwarding and server, with domain-validation
  • DNS over HTTPS
  • DNS over QUIC
  • Query name minimization
  • Aggressive use of DNSSEC-Validated Cache
  • Authority zones, for a local copy of the root zone
  • DNS64
  • DNSCrypt
  • Domain Name System Security Extensions (DNSSEC) validating
  • EDNS client subnet

History

Originally designed by Jakob Schlyter of Kirei and Roy Arends of Nominet in 2004, funding was provided by VeriSign and ep.net to develop a prototype written in Java (David Blacka and Matt Larson, VeriSign). In 2006, the prototype was re-written for high-performance in the C programming language by NLnet Labs.

Unbound is designed as a set of modular components that incorporate modern features, such as enhanced security (DNSSEC) validation, Internet Protocol Version 6 (IPv6), and a client resolver application programming interface library as an integral part of the architecture. Originally written for POSIX-compatible Unix-like operating system, it runs on FreeBSD, OpenBSD, NetBSD, macOS, and Linux, as well as Microsoft Windows.

Reception

Unbound has supplanted the Berkeley Internet Name Daemon (BIND) as the default, base-system name server in FreeBSD and OpenBSD, where it is perceived as smaller, more modern, and more secure for most applications.

References

References

  1. (2018-06-07). "Actually secure DNS over TLS in Unbound".
  2. (8 October 2020). "Unbound 1.12.0 released".
  3. (9 October 2020). "DNS-over-HTTPS in Unbound".
  4. (2024-12-20). "Unbound 1.22.0 released".
  5. (10 December 2015). "Unbound 1.5.7 release".
  6. (15 March 2018). "Unbound 1.7.0 Release".
  7. (15 March 2018). "Unbound 1.7.0 Release".
  8. (8 November 2023). "unbound.conf(5) - Unbound 1.19.0 Documentation".
  9. "Open source DNS server takes on BIND".
  10. (August 23, 2014). "Heads Up: BIND Disabled in Base".
  11. Dag-Erling Smørgrav. (September 24, 2014). "DNS in FreeBSD 10".
Wikipedia Source

This article was imported from Wikipedia and is available under the Creative Commons Attribution-ShareAlike 4.0 License. Content has been adapted to SurfDoc format. Original contributors can be found on the article history page.

Want to explore this topic further?

Ask Mako anything about Unbound (DNS server) — get instant answers, deeper analysis, and related topics.

Research with Mako

Free with your Surf account

Content sourced from Wikipedia, available under CC BY-SA 4.0.

This content may have been generated or modified by AI. CloudSurf Software LLC is not responsible for the accuracy, completeness, or reliability of AI-generated content. Always verify important information from primary sources.

Report