jokester/ansible-playbooks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(unbound): enable prefetch, prefetch-key, and deny-any

Browse Source
This commit is contained in:
Clément Désiles
2026-09-08 22:49:50 +02:00
parent e4d0812a69
commit 56fe5304c5
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/unbound/templates/unbound.conf.j2
+5 -2
View File
@@ -96,9 +96,12 @@ server:
# Perform prefetching of close to expired message cache entries # Perform prefetching of close to expired message cache entries
# This only applies to domains that have been frequently queried # This only applies to domains that have been frequently queried
# NOTE: Disabled because prefetch doesn't work with subnet module (views)
# see: https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html#unbound-conf-prefetch # see: https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html#unbound-conf-prefetch
prefetch: no prefetch: yes
prefetch-key: yes
# RFC 8482: answer ANY queries with an empty response instead of recursing
deny-any: yes
# Threads and cache slabs optimized for 4-core CPU # Threads and cache slabs optimized for 4-core CPU
num-threads: 4 num-threads: 4