klutchell/unbound repository overview

⁠unofficial unbound multiarch docker image

Unbound⁠ is a validating, recursive, and caching DNS resolver.

Note that this image is distroless⁠!

⁠Usage/Examples

Run a recursive dns server on host port 53 with the default configuration.

docker run --name unbound \
  -p 53:53/tcp -p 53:53/udp \
  klutchell/unbound

Optionally mount custom configuration⁠ from a host directory. Files must be readable by user/group 101:102 or world.

docker run --name unbound \
  -p 53:53/tcp -p 53:53/udp \
  -v /path/to/config:/etc/unbound/custom.conf.d \
  klutchell/unbound

⁠Optional: Enable CacheDB Module with Valkey (Redis-compatible) backend

The cache DB module was compiled into daemon, but is disabled by default. To enable this module, follow this steps:

• You will need a Redis-protocol-compatible backend (e.g. Redis or Valkey) running and reachable from the Unbound container; see examples/redis⁠ for a full docker-compose example;
• Create a cachedb.conf under your custom configuration directory /path/to/config/custom.conf.d;
• Add a server directive with module configuration to enable cachedb module;
• Add a cachedb directive with Valkey (Redis-compatible) credentials;

server:
  module-config: "validator cachedb iterator"
cachedb:
  backend: "redis"
  redis-server-host: valkey
  redis-server-port: 6379
  redis-expire-records: yes

Files must be readable by user/group 101:102 or world.

Examples of docker-compose usage can be found in examples⁠.

⁠License

This software is licensed under the BSD 3-Clause License⁠.

Original software is by NLnet Labs: https://unbound.net⁠