Here is what I did:https://docs.opnsense.org/manual/unbound.html#advanced-configurationsUsing this:server:local-zone: "mask.icloud.com" staticlocal-zone: "mask-h2.icloud.com" staticApple document:https://developer.apple.com/support/prepare-your-network-for-icloud-private-relay