Messages

Of course is possible. Simply give AdGH your ip and port of Unbound as the single upstream DNS server. They can not be on the same port though, is the only requisite.
Then local clients go to AdGH, their queries flow from AdGH to Unbound and then that goes out to what Unbound is set to query. By default that'll be the root servers on the internet, unencrypted.

Yes it works if the configuration and queries flow such as below

local client -> AGH set to port 53 and set the upstream to 127.0.0.1:65353 -> OPNSense/Unbound set to Port 65353 -> OPNSense/Unbound query forwarding set to an upstream dns.

If in unbound not configure or disabled query forwarding to public upstream, it can not resolving dns.

Is it possible no need configure an upstream/forwarder DNS at all in unbound? so it not use any public DNS servers anymore.

1) Upstream DNS servers:

Code Select Expand

Code Select Expand

#Add or remove upstreams as appropriate
tls://one.one.one.one
https://dns.google/dns-query
https://cloudflare-dns.com/dns-query
quic://unfiltered.adguard-dns.com
# ————- #
# Local resolution via Unbound on Port 5353
[//]127.0.0.1:5353
[/use-application-dns.net/]127.0.0.1:5353
[/dns.resolver.arpa/]127.0.0.1:5353
[/in-addr.arpa/]127.0.0.1:5353

Is it possible only use local upstream unbound? so we no need public upstream.
I already try to use if only local unbound, it cannot works. Any suggestion?