Unbound Unbound Tuning for gaming

[Jack-Sparr0w]

1472 without VPN is fine

 

[Jack-Sparr0w]

went up 20 percent on the hit rate. I mean 1400 has got to be the magic number with OpenVPN

 

[jacklul]

line 83: IPV6 section is # edns-buffer-size: 1232

line 119: which is part of ipv4 is edns-buffer-size: 1472

Router mtu is 1500

Perhaps running two instances of Unbound (one for ipv4 and one for ipv6) would push the optimizations to maximum, might achieve even higher hit rate this way.

Edit: I consulted this with AI, it obviously agrees that running two instances will be better.
Judgement day ain't happening anytime soon.

 

[Ripshod]

This is the same member whose superior Skynet blocklist blocked Ookla speedtest servers.
Once again, onto my ignore list

 

[Jack-Sparr0w]

This is the same member whose superior Skynet blocklist blocked Ookla speedtest servers.
Once again, onto my ignore list

use another firewall or wait a day for it to roll over. I told you the firewall was overkill.

 

[Tech9]

Still going? This is the longest useless thread I've seen on SNB Forums.

 

[Viktor Jaep]

Still going? This is the longest useless thread I've seen on SNB Forums.

I think there's actually a bunch more settings we still need to cover. Can't wait!

 

[Jack-Sparr0w]

Anything under 1400 stops Open VPN bind from working, I tried 1368 and it just messes with everything and dose not connect
edns-buffer-size: 1232 is used for ipv6 encapsulation

 

[Jack-Sparr0w]

Better option?
push "redirect-gateway def1" - Redirects all to Unbound
push "dhcp-option DNS 10.100.0.2"

Vs

pull-filter ignore "dhcp-option DNS" - could bypass and cause leaks

push "redirect-gateway def1"
push "dhcp-option DNS 10.100.0.2" - Best way to do this to block pushed VPN DNS

In open VPN config file

 

[Viktor Jaep]

Better option?
push "redirect-gateway def1" - Redirects all to Unbound
push "dhcp-option DNS 10.100.0.2"

Vs

pull-filter ignore "dhcp-option DNS" - could bypass and cause leaks

push "redirect-gateway def1"
push "dhcp-option DNS 10.100.0.2" - Best way to do this to block pushed VPN DNS

In open VPN config file

I bet @Tech9 can probably recommend some better options!

 

[Jack-Sparr0w]

just trying to block pushed dns in NordVPN

 

[Viktor Jaep]

just trying to block pushed dns in NordVPN

Instead of going through all that trouble, you could simply do this... which I mentioned a few pages back?

 

[Jack-Sparr0w]

did that and log still said it was pushed

 

[Viktor Jaep]

did that and log still said it was pushed

The log may say that because the VPN provider tried to push it, but your router would have rejected that and done it's own thing based on your own DNS director settings.

 

[Jack-Sparr0w]

log shows: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 103.86.96.100,dhcp-option DNS 103.86.99.100,explicit-exit-notify,comp-lzo no,route-gateway 10.100.0.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.100.0.2 255.255.0.0,cipher AES-256-GCM'

 

[Jack-Sparr0w]

what OpenVPN custom config looks like:

remote-random
nobind
tls-version-min 1.2
tls-version-max 1.3
resolv-retry infinite
remote-cert-tls server
cipher AES-256-GCM
data-ciphers AES-256-GCM
ping 60
ping-restart 180
ping-timer-rem
verify-x509-name CN=ca1507.nordvpn.com
persist-key
persist-tun
max-clients 100
reneg-sec 3600
pull
fast-io
mute-replay-warnings
auth-nocache
sndbuf 524288
rcvbuf 524288
push "sndbuf 524288"
push "rcvbuf 524288"
push "redirect-gateway def1"
push "dhcp-option DNS 10.100.0.2"
pull-filter ignore "auth-token"
pull-filter ignore "ifconfig-ipv6"
pull-filter ignore "route-ipv6"
explicit-exit-notify 3
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

#log /tmp/vpn.log

 

[Tech9]

I bet @Tech9 can probably recommend some better options!

Yes. Go on a vacation and leave DNS alone. This is what I'm doing now and can recommend it. Much better option.

 

[Viktor Jaep]

Yes. Go on a vacation and leave DNS alone. This is what I'm doing now and can recommend it. Much better option.

remote-random
nobind
tls-version-min 1.2
tls-version-max 1.3
initiate-vacation
relax-mode max
wine-and-beer true
feet-position up

These will really screw up your DNS. Your family will most certainly make you take a vacation if you add these to your Unbound settings.

 

[Tech9]

Got lucky. I use remote-own and there was a H2O DDoS attack few times in the area potentially requiring feet-position up.