UPDATED GUIDE FOR Getdns 1.4.2-2 stubby 0.2.3-3 and unbound 1.8.1-2

Kuroi,
In my experience dnsmasq-full+stubby is quite a bit faster than unbound+stubby+dnsmasq for non-locally cached lookups, and they are about the same if the address is in the local cache. It's not surprising since unbound is a recursive resolver.

Dear slim0287,
Hello and try using - aggressive-nsec: yes in the /etc/unbound/unbound_srv.conf
file - it is a new UNBOUND feature since 1.7.0 - version is now Unbound 1.9.1 in OpenWRT
see here for details: https://medium.com/nlnetlabs/aggressive-use-of-the-dnssec-validated-cache-in-unbound-1ab3e315d13f

Peace

1 Like