Unbound refuses to serve to Wireguard once a month

[CJ]

About once a month Unbound starts refusing to provide DNS to my WG tunnel.  Every other network interface receives DNS just fine.

If I restart Unbound then everything goes back to working normal for a few weeks.

Any ideas what would cause this?  I don't see anything in the logs indicating a problem.