# This file was generated by local-unbound-setup.

# Modifications will be overwritten.

server:
pidfile: /var/run/local_unbound.pid
username: unbound
directory: /var/unbound
chroot: /var/unbound
auto-trust-anchor-file: /var/unbound/root.key
root-hints: /var/unbound/named.cache
# log verbosity
verbosity: 1

# Endereço IP que vai ▒^`^|ouvir▒^`^}, default 127.0.0.1 e ::1

interface: 0.0.0.0

# Porta
port: 53

# Habilitar em IPv4
do-ip4: yes

# Habilitar em IPv6
do-ip6: yes

# Habilitar UDP
do-udp: yes

# Habiitar TCP
do-tcp: yes

# Controle de Acesso ( Default Refused )

access-control: 127.0.0.0/8 allow
access-control: 170.79.84.0/22 allow
access-control: 131.0.116.0/22 allow
access-control: 138.121.24.0/22 allow
access-control: 168.232.188.0/22 allow

# Arquivo root.hints ( ftp://FTP.INTERNIC.NET/domain/named.cache )

# root-hints: /etc/unbound/named.cache

Desabilitar id.server e hostname.bind queries.

# hide-identity: yes

# Desabilitar version.server e version.bind queries.

hide-version: yes

# Segurança
harden-glue: yes
harden-dnssec-stripped: yes
 # http://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00
use-caps-for-id: yes

# TTL em cache, default 0

cache-min-ttl: 3600
cache-max-ttl: 86400

# Verificação de tempo em cache

prefetch: yes

# Número de threads . 1 desabilita.

num-threads: 4

# Otimizações
msg-cache-slabs: 8
rrset-cache-slabs: 8
infra-cache-slabs: 8
key-cache-slabs: 8

# Limites de Memória
rrset-cache-size: 1024m
msg-cache-size: 3000m

# Tamanho do Buffer da porta de entrada ( 53 UDP )

so-rcvbuf: 1m

# Log de inundação e ações de limpeza

unwanted-reply-threshold: 10000

# Limitação de requests de localhost

do-not-query-localhost: no

# Segurança extra dados cache

val-clean-additional: yes
local-data: "www.cnj.jus.br A 201.49.152.201"