Unbound
DNSunbound
Validating, recursive, caching DNS resolver.
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| anycast | boolean | — | no | false | ▸ false |
| cacheMaxTtlSeconds | integer | — | no | 86400 | inherited |
| cacheMinTtlSeconds | integer | — | no | 0 | inherited |
| dnssecValidation | boolean | — | no | true | inherited |
| geoRouting | boolean | — | no | false | inherited |
| healthChecked | boolean | — | no | false | inherited |
| managed | boolean | — | no | true | ▸ false |
| prefetch | boolean | — | no | false | inherited |
| redundantProviders | boolean | — | no | false | inherited |
| ttlSeconds | integer | — | no | — | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
shared-dependency-without-redundancy
The design requires redundant discovery, but this DNS or coordination service, which everything depends on, runs on a single provider or a single replica. Its failure is the whole system's failure.
- — all of these hold:
- — the design requirement `availability.discoveryRedundant` is true
- — any of these hold:
- — the node's `redundantProviders` is false
- — the node's `replicated` is false
nodes:
- { id: "unbound", component: "unbound" }Alibaba Cloud DNSalibaba-dnsAlibaba Cloud Domain Namesalibaba-domainsAlibaba Cloud DNS PrivateZonealibaba-private-zoneAmazon Application Recovery Controller (ARC)aws-application-recovery-controllerAmazon Route 53 Global Resolveraws-route53-global-resolverAmazon Route 53 Resolver endpointaws-route53-resolverAmazon Route 53route53Azure DNSazure-dnsAzure DNS Private Resolverazure-dns-private-resolverAzure Private DNSazure-private-dnsAzure Traffic Managerazure-traffic-managerCloudflare DNScloudflare-dnsCloudflare Internal DNScloudflare-internal-dnsCloudflare Registrarcloudflare-registrarCloudflare Secondary DNScloudflare-secondary-dnsBIND 9bindCoreDNScorednsGeneric DNSdnsDNSdns-resolverdnsmasqdnsmasqExternalDNSexternal-dnsKnot DNSknot-dnsIBM NS1 Connectns1Pi-holepi-holePowerDNS Authoritative ServerpowerdnsDigitalOcean DNSdigitalocean-dnsGoogle Cloud DNSgoogle-cloud-dnsCloud Domainsgoogle-cloud-domainsIBM Cloud DNS Servicesibm-dns-servicesDNS Private Zoneoci-dns-private-zoneDNS Public Zoneoci-dns-zoneTraffic Management Steering Policyoci-traffic-managementOpenStack Designateopenstack-designate
# yaml-language-server: $schema=../../schema/component.schema.json # Unbound: self-hosted validating, recursive, caching DNS resolver. Per "unbound.conf" the default # module-config is "validator iterator" (DNSSEC validation on), cache-max-ttl is 86400, cache-min-ttl # is 0 (disabled), prefetch is no and harden-dnssec-stripped is yes. schemaVersion: "1" type: "component" id: "unbound" kind: "dns" provider: "default" docs: "https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html" defaults: managed: false anycast: false properties: dnssecValidation: type: "boolean" default: true cacheMaxTtlSeconds: type: "integer" default: 86400 cacheMinTtlSeconds: type: "integer" default: 0 prefetch: type: "boolean" default: false