<font style="font-size:14px;font-family:sans-serif">
<div><font style="font-family:sans-serif;font-size:14px"><font style="font-size:14px"><font style="font-family:sans-serif">This is an interesting thread. If I understand it correctly, with the following changes to unbound.conf</font></font></font></div><div><font style="font-family:sans-serif;font-size:14px"><font style="font-size:14px"><font style="font-family:sans-serif"></font></font></font></div><div><font style="font-family:sans-serif;font-size:14px"><font style="font-size:14px"><font style="font-family:sans-serif"></font></font><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">auth-zone:</span></font></font></font></font></div><code><div style="background-color:rgba(0, 0, 0, 0.05);padding:0.2em 1em"><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">name: </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(206, 145, 120)">"."</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 198.41.0.4 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># a.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 199.9.14.201 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># b.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 192.33.4.12 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># c.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 199.7.91.13 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># d.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 192.203.230.10 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># e.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 192.5.5.241 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># f.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 192.112.36.4 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># g.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 198.97.190.53 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># h.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 192.36.148.17 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># i.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 192.58.128.30 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># j.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 193.0.14.129 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># k.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 199.7.83.42 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># l.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 202.12.27.33 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># m.root-servers.net</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 192.0.47.132 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># xfr.cjr.dns.icann.org</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">primary: 192.0.32.132 </span></font></font></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)"># xfr.lax.dns.icann.org</span></font></font></span></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">fallback-enabled: yes</span></font></font></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">for-downstream: no</span></font></font></font></div><div><font style="font-weight:normal"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(212, 212, 212)">for-upstream: yes</span></font></font></font></div></div></code><div><font style="font-family:sans-serif"></font></div><div><div><font style="font-family:sans-serif">and commenting out the root-hints, Unbound can cache the root servers in memory and perform </font><font style="font-weight:400"><font style="font-size:medium"><font style="font-family:"SF UI Display", Helvetica, sans-serif">AXFR transfer for the root zone.</font></font></font></div><div><font style="font-family:sans-serif"></font></div><div><font style="font-family:sans-serif"></font><font style="font-weight:normal"><span style="color:rgb(212, 212, 212)"><font style="font-size:12px"><font style="font-family:Menlo, Monaco, "Courier New", monospace"><span style="color:rgb(106, 153, 85)">#root-hints: "/opt/var/lib/unbound/root.hints"</span></font></font></span></font></div></div><div class="gmail_quote_attribution">On Sep 2 2021, at 8:18 AM, Chriztoffer Hansen via Unbound-users <unbound-users@lists.nlnetlabs.nl> wrote:</div><blockquote class="gmail_quote"><edo-readonly><div><div>On Thu, 2 Sept 2021 at 15:27, Charles Sharp via Unbound-users</div><div><unbound-users@lists.nlnetlabs.nl> wrote:</div><div>> Do most of you use the root hints or forwarders?</div><br><div>Tried both. Now using forwarders.</div><br><div>> I currently use the following, in order:</div><div>></div><div>> 1.1.1.1</div><div>> 9.9.9.9</div><div>> 8.8.8.8</div><br><div>No IPv6? Or not on a dual-stacked endpoint?</div><br><div>Joke questions aside, my own upstream is reasonably well-connected.</div><div>Has had configured the local dns forwarder to use root hints in the</div><div>past. Compared to using the "big cdn forwarders" the user experience</div><div>*perceived* is 99 % non-existent if the avg. lookup time is low.</div><br><div>If configuring the local resolver to cache all lookups for a reasonbly</div><div>minimum amount of time (e.g. 5 - 60 min). Only the user doing the</div><div>lookup when the cache entry is cold will (maybe) notice a delay if the</div><div>lookup is "slow".</div><br><div>Side-note: Depending on your choice of local resolver software. Some</div><div>implementations will ask the configured forwarders one at a time (i.e.</div><div>try entry 1, try 2 if 1 fail, try 3 if 2 fail, etc.).</div><div>Others (e.g. dnsmasq) defaults to ask _all_ configured forwarders</div><div>simultaniously.</div><div>Others will "regularly" test all configured forwarders to measure the</div><div>response time and only use the fastest forwarder.</div></div></edo-readonly></blockquote>
</font>