{"id":13758827,"url":"https://github.com/coredns/unbound","last_synced_at":"2025-04-09T10:06:44.719Z","repository":{"id":28586129,"uuid":"118793309","full_name":"coredns/unbound","owner":"coredns","description":"CoreDNS plugin that performs recursive queries using libunbound","archived":false,"fork":false,"pushed_at":"2022-02-23T14:45:40.000Z","size":45,"stargazers_count":36,"open_issues_count":8,"forks_count":21,"subscribers_count":9,"default_branch":"master","last_synced_at":"2024-04-17T18:05:15.236Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/coredns.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-01-24T16:45:42.000Z","updated_at":"2024-03-07T07:23:39.000Z","dependencies_parsed_at":"2022-08-09T09:18:24.074Z","dependency_job_id":null,"html_url":"https://github.com/coredns/unbound","commit_stats":null,"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/coredns%2Funbound","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/coredns%2Funbound/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/coredns%2Funbound/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/coredns%2Funbound/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/coredns","download_url":"https://codeload.github.com/coredns/unbound/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248018060,"owners_count":21034048,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-03T13:00:37.890Z","updated_at":"2025-04-09T10:06:44.690Z","avatar_url":"https://github.com/coredns.png","language":"Go","readme":"# unbound\n\n## Name\n\n*unbound* - perform recursive queries using libunbound.\n\n## Description\n\nVia *unbound* you can perform recursive queries. Unbound uses DNSSEC by default when resolving *and*\nit returns those records (DNSKEY, RRSIG, NSEC and NSEC3) back to the clients. The *unbound* plugin\nwill remove those records when a client didn't ask for it. The internal (RR) answer cache of Unbound\nis disabled, so you may want to use the *cache* plugin.\n\nLibunbound can be configured via (a subset of) options, currently the following are set, by default:\n\n* `msg-cache-size`, set to 0\n* `rrset-cache-size`, set to 0\n\nThis plugin can only be used once per Server Block.\n\n## Syntax\n\n~~~\nunbound [FROM]\n~~~\n\n* **FROM** is the base domain to match for the request to be resolved. If not specified the zones\n  from the server block are used.\n\nMore features utilized with an expanded syntax:\n\n~~~\nunbound [FROM] {\n    except IGNORED_NAMES...\n    option NAME VALUE\n    config FILENAME\n}\n~~~\n\n* **FROM** as above.\n* **IGNORED_NAMES** in `except` is a space-separated list of domains to exclude from resolving.\n* `option` allows setting *some* unbound options (see unbound.conf(5)), this can be specified multiple\n  times.\n* `config` allows one to supply an `unbound.conf` file to configure unbound.\n  _Note:_ The unbound configuration file still needs to be populated inside a\n  docker container.\n\n## Metrics\n\nIf monitoring is enabled (via the *prometheus* directive) then the following metric is exported:\n\n* `coredns_unbound_request_duration_seconds{server}` - duration per query.\n* `coredns_unbound_response_rcode_count_total{server, rcode}` - count of RCODEs.\n\nThe `server` label indicates which server handled the request, see the *metrics* plugin for details.\n\n## Examples\n\nResolve queries for all domains:\n~~~ corefile\n. {\n    unbound\n}\n~~~\n\nResolve all queries within example.org.\n\n~~~ corefile\n. {\n    unbound example.org\n}\n~~~\n\nor\n\n~~~ corefile\nexample.org {\n    unbound\n}\n~~~\n\nResolve everything except queries for example.org (or below):\n\n~~~ corefile\n. {\n    unbound {\n        except example.org\n    }\n}\n~~~\n\nEnable [DNS Query Name Minimisation](https://tools.ietf.org/html/rfc7816) by setting the option:\n\n~~~ corefile\n. {\n    unbound {\n        option qname-minimisation yes\n    }\n}\n~~~\n\n## Compiling into CoreDNS\n\nTo compile this with CoreDNS you can follow the normal procedure for external plugins, except that\nyou need to compile it with cgo. This means setting `CGO_ENABLED=1` when running `go build`.\n\n## Bugs\n\nThe *unbound* plugin depends on libunbound(3) which is C library, to compile this you have\na dependency on C and cgo. You can't compile CoreDNS completely static. For compilation you\nalso need the libunbound source code installed (`libunbound-dev` on Debian).\n\nDNSSEC *validation* is not supported (yet). There is also no (documented) way of configuration\na trust anchor.\n\n## See Also\n\nSee \u003chttps://unbound.net\u003e for information on Unbound and unbound.conf(5). See\n\u003chttps://github.com/miekg/unbound\u003e for the (cgo) Go wrapper for libunbound.\n","funding_links":[],"categories":["External Plguins"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcoredns%2Funbound","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcoredns%2Funbound","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcoredns%2Funbound/lists"}