<div dir="ltr">I'm creating a dns cache using unbound<br><br>Does anybody have some additional performance tuning tips for Unbound?<br><br><br>Best Regards<div><br></div><div>Arista</div><div><br></div><div> ------------------------------------------------------------------------------<br>OS Freebsd 12.3<br>CPU 24<br>Memory 32GB<br>300GB storage<br>CPU: Intel(R) Xeon(R) CPU E5-2620 v2<br>Current Queries: 12516<br>more /usr/local/etc/unbound/unbound.conf<br>servers:<br>        verbosity: 0<br>        num-threads: 20<br>        interface: xxx.xxx.xxx.xxx@53<br>        interface: xxx.xxx.xxx.xxx@53<br>        ports: 53<br>        outgoing-num-tcp: 200<br>        incoming-num-tcp: 200<br>        outgoing-range: 32768<br>        so-rcvbuf: 8m<br>        so-sndbuf: 8m<br>        so-reuseport: no<br>        max-udp-size: 4096<br>        stream-wait-size: 6m<br>        msg-buffer-size: 65552<br>        msg-cache-slabs: 8<br>logfile: /var/log/unbound.log<br>log-servfail: no<br>verbosity: 0<br>log-time-ascii: yes<br>use-syslog: no<br>num-queries-per-thread: 4096<br>        rrset-cache-size: 640m<br>        msg-cache-size: 320m<br>        msg-cache-slabs: 1024<br>        rrset-cache-slabs: 1024<br>        infra-cache-slabs: 1024<br>        do-ip4: yes<br>        do-ip6: yes<br>        do-udp: yes<br>        do-tcp: yes<br>        do-daemonize: yes<br>access-control: <a href="http://127.0.0.0/8">127.0.0.0/8</a> allow<br>access-control: xxx.xxx.xxx.0/8 allow<br>access-control: xxx.xxx.xxx.xxx/27 allow<br>access-control: xxx.xxx.xxx.xxx/25 allow<br>access-control: <a href="http://0.0.0.0/0">0.0.0.0/0</a> refuse<br>        chroot: "/usr/local/etc/unbound"<br>        username: "unbound"<br>        directory: "/usr/local/etc/unbound"<br>        pidfile: "/usr/local/etc/unbound/unbound.pid"<br>        root-hints: "/usr/local/etc/unbound/named.cache"<br>        hide-identity: yes<br>        hide-version: yes<br>remote control:<br>control-enable: yes<br>control-use-cert: no<br>forward zone:<br>        names: "."<br>        forward-addr: 8.8.8.8<br>        forward-addr: 1.1.1.1<br>        forward-addr: xxx.xxx.xxx.xxx<br>        forward-addr: xxx.xxx.xxx.xxx<br></div></div>