zoom_in Click to enlarge

Unbound DNS Resolver

▲ ▼

language

description Unbound DNS Resolver Overview

Unbound is a modern, validating, recursive, and validating DNS resolver often preferred by privacy advocates and technical users. It focuses heavily on security by validating DNSSEC records and minimizing external dependencies. It is designed to be a robust, self-contained resolver, making it a powerful alternative to commercial services for self-hosting.

help Unbound DNS Resolver FAQ

Does Unbound contact public DNS providers such as Google or Cloudflare?

In full recursive mode, Unbound follows the DNS hierarchy from root servers to authoritative servers instead of forwarding every request to Google Public DNS or Cloudflare. It can also be configured as a forwarding resolver, so the answer depends on its configuration.

What does DNSSEC validation do in Unbound?

Unbound checks cryptographic signatures for DNSSEC-signed domains and rejects responses that fail validation. It cannot authenticate an unsigned domain, because that domain has no DNSSEC chain to verify.

Does running Unbound hide DNS queries from an internet provider?

Not by itself. Direct recursive queries may still be visible on the network unless encrypted transport or another privacy layer is used, even though Unbound removes dependence on one public recursive provider.

Why do repeated DNS lookups become faster with Unbound?

Unbound is a caching resolver, so it can answer a repeated request locally until the record's TTL expires. The first uncached lookup may be slower because it can require queries to root, top-level-domain, and authoritative servers.

swap_horiz

Looking for Unbound DNS Resolver alternatives? Compare top competitors ranked & scored

arrow_forward