Sign inSign up

andrey0001/unbound-tls

By andrey0001

•Updated 2 months ago

Unbound DNS resolver with TLS upstream

Image
Networking
Security
0

1.6K

andrey0001/unbound-tls repository overview

⁠Unbound DNS resolver with TLS upstream

Github repo⁠

To hide your DNS requests to upstream provider you can use TLS for DNS. Not all software/equipment support tls for dns. This container will help solve it, and improve your privacy.

To run:

docker run --name unbound-tls -p 53:53 -p 53:53/udp -d andrey0001/unbound-tls

or with compose:

version: "3.8"
services:
  unbound:
    image: andrey0001/unbound-tls:latest
    hostname: unbound-tls
    container_name: unbound-tls
    network_mode: bridge
    ports:
      - "53:53/tcp"
      - "53:53/udp"
    restart: unless-stopped
    volumes:
      - /opt/unbound-tls:/etc/unbound/unbound.conf.d

docker-compose up -d

The container also looks for additional configs in /etc/unbound/unbound.conf.d , so you can attach volume and place your own files:

docker run -v ./conf.d:/etc/unbound/unbound.conf.d --name unbound-tls -p 53:53 -p 53:53/udp -d andrey0001/unbound-tls

Example of "example.conf" file you could place in forder:

server:
 forward-zone:
   name: "example.com"
   forward-addr: 208.67.222.222
   forward-addr: 208.67.220.220

Also, the good idea to use it with PiHole⁠. So, just change port for this container, then send all requests from PiHole to the port. As example:

docker run --name unbound-tls -p 2253:53 -p 2253:53/udp -d andrey0001/unbound-tls

Then use variable PIHOLE_DNS_ when you start PiHole and set it to IPADDRESS#2253

⁠compose with PiHole:
version: "3.8"
services:
  pihole:
    image: pihole/pihole:latest
    hostname: pihole
    container_name: pihole
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "8080:80/tcp"
    environment:
      TZ: 'Asia/Jerusalem'
      WEBPASSWORD: PassWord
      PIHOLE_DNS_: "10.8.1.3"
    volumes:
      - /opt/pihole/etc:/etc/pihole/
      - /opt/pihole/dnsmasq:/etc/dnsmasq.d/
    restart: unless-stopped
    networks:
      pihole-unbound-dns:
        ipv4_address: 10.8.1.2

  unbound:
    image: andrey0001/unbound-tls:latest
    hostname: unbound-tls
    container_name: unbound-tls
    restart: unless-stopped
    volumes:
      - /opt/unbound-tls:/etc/unbound/unbound.conf.d
    networks:
      pihole-unbound-dns:
        ipv4_address: 10.8.1.3

networks:
  pihole-unbound-dns:
    ipam:
      config:
        - subnet: 10.8.1.0/29

The container forward all requests with TLS to:

   1.0.0.1@853#one.one.one.one
   1.1.1.1@853#one.one.one.one
   8.8.4.4@853#dns.google
   8.8.8.8@853#dns.google
   9.9.9.9@853#dns.quad9.net
   149.112.112.112@853#dns.quad9.net

Since ARM architecture also pushed to Docker Hub⁠, you could use container on Mikrotik⁠ devices, supported on the latest version of RouterOS.

Tag s6 based on s6-overlay, when master based on simple start.

Enjoy!!!

Tag summary

Content type

Image

Digest

sha256:4b8a8dcbf…

Size

6.7 MB

Last updated

2 months ago

docker pull andrey0001/unbound-tls