I'm creating a dns cache using unbound
Does anybody have some additional performance tuning tips for Unbound?
Best Regards
Arista
------------------------------------------------------------------------------
OS Freebsd 12.3
CPU 24
Memory 32GB
300GB storage
CPU: Intel(R) Xeon(R) CPU E5-2620 v2
Current Queries: 12516
more /usr/local/etc/unbound/unbound.conf
servers:
verbosity: 0
num-threads: 20
interface: xxx.xxx.xxx.xxx@53
interface: xxx.xxx.xxx.xxx@53
ports: 53
outgoing-num-tcp: 200
incoming-num-tcp: 200
outgoing-range: 32768
so-rcvbuf: 8m
so-sndbuf: 8m
so-reuseport: no
max-udp-size: 4096
stream-wait-size: 6m
msg-buffer-size: 65552
msg-cache-slabs: 8
logfile: /var/log/unbound.log
log-servfail: no
verbosity: 0
log-time-ascii: yes
use-syslog: no
num-queries-per-thread: 4096
rrset-cache-size: 640m
msg-cache-size: 320m
msg-cache-slabs: 1024
rrset-cache-slabs: 1024
infra-cache-slabs: 1024
do-ip4: yes
do-ip6: yes
do-udp: yes
do-tcp: yes
do-daemonize: yes
access-control: 127.0.0.0/8 allow
access-control: xxx.xxx.xxx.0/8 allow
access-control: xxx.xxx.xxx.xxx/27 allow
access-control: xxx.xxx.xxx.xxx/25 allow
access-control: 0.0.0.0/0 refuse
chroot: "/usr/local/etc/unbound"
username: "unbound"
directory: "/usr/local/etc/unbound"
pidfile: "/usr/local/etc/unbound/unbound.pid"
root-hints: "/usr/local/etc/unbound/named.cache"
hide-identity: yes
hide-version: yes
remote control:
control-enable: yes
control-use-cert: no
forward zone:
names: "."
forward-addr: 8.8.8.8
forward-addr: 1.1.1.1
forward-addr: xxx.xxx.xxx.xxx
forward-addr: xxx.xxx.xxx.xxx
