Unbound

Unbound at a glance

Unbound is a widely used open-source validating, recursive DNS resolver, valued for security (DNSSEC) and performance. Unbound ships regular releases plus coordinated security fixes; as DNS infrastructure the network relies on, keeping it current matters.

For admins Unbound usually comes from the distribution, which backports fixes — for security advisories, confirm the patched package is installed and the service restarted. Harden the configuration: restrict who can query it (avoid being an open resolver), enable DNSSEC validation, and keep it off untrusted networks unless intended. Because DNS outages cascade, test changes and keep a fallback. Unbound is often paired with Pi-hole/AdGuard as the upstream resolver. After updating, verify that resolution and DNSSEC validation work. Track the version and its support status. Its security focus makes it a solid resolver choice, but it still needs patching. Patchletter surfaces new Unbound releases.