The branch releng/15.0 has been updated by cperciva: URL: https://cgit.FreeBSD.org/src/commit/?id=fef4de6547a7d74f579a79d3137835fe480bcf14
commit fef4de6547a7d74f579a79d3137835fe480bcf14 Author: Dag-Erling Smørgrav <[email protected]> AuthorDate: 2025-10-08 16:45:02 +0000 Commit: Colin Percival <[email protected]> CommitDate: 2025-10-28 21:23:12 +0000 local-unbound-setup: Set so-sndbuf to 0 Without this setting, Unbound 1.24.0 and newer will attempt to set the socket buffer size to 4 MB to mitigate issues that mostly affect servers with large numbers of clients on local networks, which is not a scenario local-unbound is intended for. This is not only a waste of resources, it can also fail, resulting in a warning message on daemon startup. Approved by: re (cperciva) Fixes: b2efd602aea8 ("unbound: Vendor import 1.24.0") Reviewed by: jlduran, cy Differential Revision: https://reviews.freebsd.org/D52977 (cherry picked from commit de3faa85d8f99d260cbfa6242dd8e4ece693e4f8) (cherry picked from commit 65629acb4a793416b128d932abf5c539315dec4e) --- usr.sbin/unbound/setup/local-unbound-setup.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/usr.sbin/unbound/setup/local-unbound-setup.sh b/usr.sbin/unbound/setup/local-unbound-setup.sh index d57d74952fc7..25cfef48b6f0 100755 --- a/usr.sbin/unbound/setup/local-unbound-setup.sh +++ b/usr.sbin/unbound/setup/local-unbound-setup.sh @@ -261,6 +261,7 @@ gen_unbound_conf() { if [ "${use_tls}" = "yes" ] ; then echo " tls-cert-bundle: /etc/ssl/cert.pem" fi + echo " so-sndbuf: 0" echo "" if [ -f "${forward_conf}" ] ; then echo "include: ${forward_conf}"
