### unbound.conf CentOS 6
server:
        verbosity: 1
        statistics-interval: 0
        statistics-cumulative: no
        extended-statistics: yes
        num-threads: 2
        interface: 0.0.0.0
        interface-automatic: no
        port: 53
        so-rcvbuf: 4m
        so-sndbuf: 4m
        edns-buffer-size: 1480
        msg-buffer-size: 65552
        msg-cache-size: 4m
        msg-cache-slabs: 4
        num-queries-per-thread: 1024
        rrset-cache-size: 4m
        rrset-cache-slabs: 4
        infra-cache-numhosts: 10000
        do-ip4: yes
        do-ip6: no
        do-udp: yes
        do-tcp: yes
        do-daemonize: yes
        access-control: 127.0.0.1 allow
        access-control: 10.0.0.0/8 allow
        access-control: 172.16.0.0/12 allow
        access-control: 192.168.0.0/16 allow
        access-control: 103.206.168.0/22 allow
        access-control: 103.252.12.0/23 allow
        access-control: 103.143.96.0/23 allow
        access-control: 0.0.0.0 refuse
        chroot: ""
        username: "unbound"   
        directory: "/etc/unbound"
        pidfile: "/var/run/unbound/unbound.pid"
        root-hints: "/etc/unbound/named.root"
        hide-identity: yes
        hide-version: no
        version: "Infotek DNS Resolver With DNSSEC & Kemkominfo TRUST+ Content Filter - http://infotek.net.id/dns/"
        harden-glue: yes
        harden-dnssec-stripped: yes
        harden-below-nxdomain: yes
        harden-referral-path: yes
        use-caps-for-id: no
        unwanted-reply-threshold: 10000000
        prefetch: yes
        prefetch-key: yes
        rrset-roundrobin: yes
        minimal-responses: yes
        dlv-anchor-file: "/etc/unbound/dlv.isc.org.key"
        trusted-keys-file: /etc/unbound/keys.d/*.key
        auto-trust-anchor-file: "/var/lib/unbound/root.key"
        include: "/etc/unbound/content-filter.unbound"
        include: "/etc/unbound/static.conf"
        val-bogus-ttl: 120  
        val-clean-additional: yes
        val-permissive-mode: no
        val-log-level: 1
        neg-cache-size: 1m
	cache-min-ttl: 60
        include: /etc/unbound/local.d/*.conf 
remote-control:
        control-enable: yes
        # control-port: 953
        server-key-file: "/etc/unbound/unbound_server.key"
        # unbound server certificate file.
        server-cert-file: "/etc/unbound/unbound_server.pem"
        # unbound-control key file.
        control-key-file: "/etc/unbound/unbound_control.key"
        # unbound-control certificate file.
        control-cert-file: "/etc/unbound/unbound_control.pem"
### unbound.conf CentOS 6