Browse Source

Add aggressive-nsec example block.

While here, qname minimisation is an RFC since some time.
tweak & OK sthen
OPENBSD_6_4
florian 6 years ago
parent
commit
7e2a5e7e2d
1 changed files with 8 additions and 3 deletions
  1. +8
    -3
      src/etc/unbound.conf

+ 8
- 3
src/etc/unbound.conf View File

@ -1,4 +1,4 @@
# $OpenBSD: unbound.conf,v 1.7 2016/03/30 01:41:25 sthen Exp $
# $OpenBSD: unbound.conf,v 1.8 2018/03/29 20:40:22 florian Exp $
server:
interface: 127.0.0.1
@ -20,14 +20,19 @@ server:
hide-version: yes
# Uncomment to enable qname minimisation.
# https://tools.ietf.org/html/draft-ietf-dnsop-qname-minimisation-08
# https://tools.ietf.org/html/rfc7816
#
# qname-minimisation: yes
#qname-minimisation: yes
# Uncomment to enable DNSSEC validation.
#
#auto-trust-anchor-file: "/var/unbound/db/root.key"
# Uncomment to synthesize NXDOMAINs from DNSSEC NSEC chains
# https://tools.ietf.org/html/rfc8198
#
#aggressive-nsec: yes
# Serve zones authoritatively from Unbound to resolver clients.
# Not for external service.
#


Loading…
Cancel
Save