Unbound Configure unbound with multiple VPNs

[Jannik]

Hi,

I hope you can guide me through the configuration of unbound.

My goal:
- Get unbound up and running

- I dont know if it is currently working​

- Get it to work with multiple VPNs

- I use a different VPN for my TV, one for browsing and one for downloading w/ my NAS​

​

What did I do so far?
- Installation of unbound with Martineau installation manager

- I also installed the gui addon​

- Met all the prerequirements
- Looked in other posts here & searched for a step-by-step guide. But its a little above me - meaning I can put scripts in Putty and follow complete guides


netstat -nltup | grep -E ':53 |unbound|dnsmasq'

ASUSWRT-Merlin RT-AX88U 3004.388.4_0 Mon Aug 21 19:35:36 UTC 2023
Jannik@RT-AX88U-E0E8:/tmp/home/root# netstat -nltup | grep -E ':53 |unbound|dnsm
asq'
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 1296/dnsmasq
tcp 0 0 192.168.50.1:53 0.0.0.0:* LISTEN 1296/dnsmasq
tcp 0 0 127.0.1.1:53 0.0.0.0:* LISTEN 1293/stubby
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 28343/unbound
tcp 0 0 127.0.0.1:53535 0.0.0.0:* LISTEN 28343/unbound
udp 0 0 127.0.0.1:53 0.0.0.0:* 1296/dnsmasq
udp 0 0 192.168.50.1:53 0.0.0.0:* 1296/dnsmasq
udp 0 0 127.0.1.1:53 0.0.0.0:* 1293/stubby
udp 0 0 0.0.0.0:67 0.0.0.0:* 1296/dnsmasq
udp 0 0 127.0.0.1:53535 0.0.0.0:* 28343/unbound



VPN director with different assigend VPNs:

Unbound gui addon: In the other windows it shows "no data to post"

dnscheck.tools: DNSSEC warning

Thank you

 

[Jannik]

OK, I could unbound to work and update the stats. I just cant figure out how to get DNSSEC to work. Any advice?

 

[SomeWhereOverTheRainBow]

OK, I could unbound to work and update the stats. I just cant figure out how to get DNSSEC to work. Any advice?




View attachment 54240

It is weird, with unbound - dnssec should just work unless you turned it off using unbound options to do so. The defaults used by the Unbound Manager do not do that automatically. Since I don't think you put the options in your unbound.conf to turn off dnssec, I suspect your test case client is not actually using Unbound. As much as I'd like to sit around on this thread to troubleshoot "what DNS is my clients using", I am going to defer to the more knowledgeable other people in this forum. However, I wish you luck on getting this squared away. Maybe @Viktor Jaep can share some of their experience getting unbound to work across VPN's.

 

[Viktor Jaep]

Maybe @Viktor Jaep can share some of their experience getting unbound to work across VPN's.

It took me quite a while to figure out how to get unbound to behave over just 1 VPN connection... I can't imagine it's able to handle more than one, but I could be wrong? I documented what needs to be done here with my integration of this functionality into vpnmon-r2...perhaps this helps?

Post in thread 'VPNMON-R2 v2.63 -Nov 4, 2023- Monitor your VPN connection's Health (New: AirVPN, AMTM, KILLMON, supporting WeVPN/Nord/SurfShark/PerfectPrivacy) (#3)' https://www.snbforums.com/threads/v...-surfshark-perfectprivacy-3.84694/post-841170

 

[SomeWhereOverTheRainBow]

It took me quite a while to figure out how to get unbound to behave over just 1 VPN connection... I can't imagine it's able to handle more than one, but I could be wrong?

sounds like a challenge for your VPNMON-R5(err R3)

 

[Viktor Jaep]

sounds like a challenge for your VPNMON-R5(err R3)

VPNMON-R3 is only going to feature the basics to manage 5 distinct vpn connections... no crazy bells & whistles like R2.

 

[SomeWhereOverTheRainBow]

VPNMON-R3 is only going to feature the basics to manage 5 distinct vpn connections... no crazy bells & whistles like R2.

You say that now, but wait till you got your sleeves rolled up. Sure you might come out with something simple and basic at first, but then the feature temptation/fever will hit.

 

[Viktor Jaep]

You say that now, but wait till you got your sleeves rolled up. Sure you might come out with something simple and basic at first, but then the feature temptation/fever will hit.

You know me too well... LOL