Unbound No internet on clients after reboot.

[Khadanja]

No, you’ve turned Unbound into Stubby by enabling DoT. Everything gets forwarded to Cloudflare.

So, what exactly does forwarding DNS queries mean? Is there a way to forward without using DoT? I read somewhere that DNS queries can be forwarded to other DNS servers to hide your WAN IP from root servers. How is that achievable along with getting unbound benefits?

 

[dave14305]

So, what exactly does forwarding DNS queries mean? Is there a way to forward without using DoT? I read somewhere that DNS queries can be forwarded to other DNS servers to hide your WAN IP from root servers. How is that achievable along with getting unbound benefits?

You're sending your DNS requests to another third-party service (Cloudflare). You could do that with the built-in dnsmasq. And if you wanted it encrypted, you could add DNS-over-TLS via DNS Privacy (using stubby).

Most people install Unbound because they don't want to rely on a third-party DNS provider, which may or may not log your DNS query history, or other privacy-infringing concerns.

Unbound will perform the same queries to upstream root and authoritative DNS servers as Cloudflare would do, but without letting Cloudflare see all your queries.

If you want to hide your WAN IP from the root and authoritative servers, you'd have to look into the VPN-related threads around Unbound, which are very active right now.