CARP and Unbound DNS response

[rudiratlos63]

Hello,
I have a CARP-IP (10.8.99.1) on my INT ernal Interface and a physical IP (10.8.99.3).
my client gets per KEAdhcp the DNS serverIP as CARP-IP (10.8.99.1).
a nslookup to google.com from client cli gets the error, that the info is expected from 10.8.99.1#53, but 10.8.99.3#3 responded.
The client drops the dns info, because its not from the CARP-IP.
How to configure, that Unbound uses the CARP-IP and not the physical IP from node1 in the HA config.

[Patrick M. Hausen]

Create a NAT port forwarding rule on the INT interface:

Source: INT net
Destination: CARP-IP (create a manual alias if necessary)
Protocol: TCP & UDP
Destination port: 53
Redirect target: 127.0.0.1:53

If all your interfaces have a CARP address you can do this for all of them and bind Unbound to 127.0.0.1:53 only.

[rudiratlos63]

Hello Patrick,
this is not working. same result. pls. see attached screenshots. I've defined the nat rule you suggested.

[Patrick M. Hausen]

Then try to bind Unbound to 127.0.0.1 only, please.

[rudiratlos63]

Where should I do this?
I have Adguard running on DNS Port 53. Unbound runs on Port 5354