There are many posts about asking to improve unbound.. and there are more solutions on the internet about people and their solutions.. but it's possible that it isn't clear what setting goes with which field.. or what is available to tweak in OpnSense unbound..
I came across this:
# pkg info unbound
unbound-1.19.0
Name : unbound
Version : 1.19.0
Installed on : Thu Nov 23 23:09:22 2023 EST
Origin : dns/unbound
Architecture : FreeBSD:13:amd64
Prefix : /usr/local
Categories : dns
Licenses : BSD3CLAUSE
Maintainer : jaap@NLnetLabs.nl
WWW : https://www.nlnetlabs.nl/projects/unbound
Comment : Validating, recursive, and caching DNS resolver
Options :
DEP-RSA1024 : off
DNSCRYPT : on
DNSTAP : off
DOCS : off
DOH : on
DYNLIB : on
ECDSA : on
EVAPI : off
FILTER_AAAA : off
GOST : on
HIREDIS : off
LIBEVENT : on
MUNIN_PLUGIN : off
PYTHON : on
SUBNET : off
TFOCL : off
TFOSE : off
THREADS : on
which showed me why I could not get ecs going..
* which was great * saved me tons of time and I stopped trying to set something which was never going to work..
Possibly something like this might help:
(picture attached)
My 0.02