[SOLVED] Unbound using multiple DNS Servers for Query Forwarding?

[knebb]

Hi,

as far as I can tell the docs for Unbound say it can use multiple forwarders for query forwarding: "The servers listed as forward-host:"
In OPNSense I have not found an option to set multiple forwarders- seems like only a single one is possible.

How can I configure multiple hosts as forwad hosts?

Thanks!

/KNEBB

[patient0]

What OPNsense version are you using? And how have you set the forwarding servers?

One option: you set DNS servers (IP addresses 1.1.1.1, 1.0.0.1, 8.8.8.8, 8.8.4.4 for this example) in System / General and instruct Unbound to use them for forwarding, Unbound DNS / Query Forwarding -> Use System Nameservers. Then check the generated config file, /var/unbound/unbound.conf and you'll see as many 'forward-addr' entries are you have set DNS servers in System / General.

Code Select Expand

# Forwarding
...
forward-zone:
    name: "."
        forward-addr: 1.0.0.1
        forward-addr: 1.1.1.1
        forward-addr: 8.8.8.8
        forward-addr: 8.8.4.4
...
forward-host : DNS server names
forward-addr : DNS server IPs

[knebb]

Hi,

sorry, I was not clear enough.

I was talking about the zone-based forwarding. I have a local DNS for my local zone. So I want Unbound to forward only those queries to my local DNS servers. And use the system configured servers for all other queries.

So yes, my Unbound uses configured "uolink" servers- except for the local domain. But for the local domain I can only add a single server in the GUI...

/KNEBB

[patient0]

But for the local domain I can only add a single server in the GUI...

In Query Forwarding you create two entries for the same domain, with different DNS server ips to forward to, that should work, no?

[knebb]

You have not tried, no?

I can not add a second entry with same domain.

[patient0]

You have not tried, no?

I'm on 25.7 RC2 and there is does work, what version are you on?
You cannot view this attachment.

[knebb]

8)
Sorry- I had to log off and logon again. And then it worked. My fault!

Ok, I guess it is done now. Sorry for confusion.

Going to add a second entry for my local domains.
THANKS!