Unbound DNS over TLS

Started by user12314, October 22, 2026, 04:17:54 PM

Previous topic - Next topic
Hi everyone. I set up Unbound DNS, my setup is my devices -> pihole -> Unbound DNS.

I checked the "DNSSEC" box, but to be honest I don't know that much about DNS over TLS. Is this everything I have to do to enable DNS over TLS outside of my home network, or is there anything else?

thank you

DoT and DNSSEC are two different things just like DoH is another one...

So NO : You did not Enable DoT ;)
Weird guy who likes everything Linux and *BSD on PC/Laptop/Tablet/Mobile and funny little ARM based boards :)

DNSSEC is completely different form DNS over TLS. To enable it, you need to go to services > UnboundDNS > DNS over TLS. You can use cloud flare DNS (1.1.1.1) with port 853 to enable it. I would recommend forcing all traffic on port 53 to go to unbound through the firewall. After you set it up, verify by using the cloudflare site for testing DNS over TLS. It can only test cloudflare DNS over TLS so if you use another DNS you need to find a way to verify that. Good Luck!