nandolavras/unbound repository overview

Usage:

Before running this container do on host:

sudo sysctl -w net.core.rmem_max=4194304

sudo sysctl -w net.core.wmem_max=4194304

Add this to host initialization.

Default:

docker run -itd --name my-container-name -p 53:53/tcp -p 53:53/udp nandolavras/unbound:TAG

With "net=host" (insecure, not recommended by Docker):

docker run -itd --name my-container-name --net=host -e ALLOW_NETWORK=X.X.X.X/X,Y.Y.Y.Y/Y nandolavras/unbound:TAG

The ALLOW_NETWORK environment variable accept multiple networks, separated by comma.

In this mode the container will use the network stack from the host directly, allowing direct access to unbound ports on public IP for example.

ATTENTION

• This container is designed to run on a protected internal network, run a firewall ahead of this container to limit who is permited to send queries to it.
• This unbound is configured to use DNSSEC by default.