(re)adding local resolver.arpa zone

A.Schulze sca at andreasschulze.de
Thu Oct 16 16:38:29 UTC 2025



Am 16.10.25 um 11:06 schrieb Havard Eidnes via Unbound-users:
> Part and parcel of that is getting a local customized
> resolver.arpa zone loaded, to enable use of RFC 9462, "Discovery
> of Designated Resolvers".
> 
> However, I am having a hard time getting my unbound 1.23.1 to
> properly load and use my own local resolver.arpa zone.

Hello Havard,

reading RFC 9462 and looking in my resolver logs, I only see one type of queries:

`_dns.resolver.arpa. SVCB`

So, I added these two lines in my unbound.conf:

     local-zone: resolver.arpa. static
     local-data: '_dns.resolver.arpa. 300 SVCB <your data here>'

Now, I can test:

$ dig @resolver-ip _dns.resolver.arpa. SVCB +short
<your data here>

$ dig _dns.resolver.arpa. SVCB +short
<your data here>

That's all.
But it does not necessary mean, any client will magically *use* the announced DoT / DoH / DoQ :-/

Andreas


More information about the Unbound-users mailing list