# Unbound DNS resolver

45 Hacker News commenters recommended Unbound DNS resolver and 4 criticized it, November 2025 to November 2026. It was recommended in 12 of 13 months. It meets the Hacker Approved badge rule.

**Verdict:** Free, open-source DNS resolver people run locally or on routers to cache lookups, block domains and avoid ISP tampering. Common caveat: setup and debugging can be clunky.

## Why people recommend it

- Network-wide blocklists and wildcard filtering (5 comments): "unbound supports wildcards to blacklist domains and that's what I care the most about" ([source](https://news.ycombinator.com/item?id=46757127)) "I run the unbound DNS (on a little Pi so it's on 24/7) with gigantic killfiles" ([source](https://news.ycombinator.com/item?id=46364590)) "Local DNS server with a script that updates the bllacklist is enough for me." ([source](https://news.ycombinator.com/item?id=47378576))
- Keeps queries away from big providers (4 comments): "Pihole + Unbound as recursive DNS to avoid DNS poisoning and personal data tracking." ([source](https://news.ycombinator.com/item?id=47773262)) "Why not run your own recursive resolver like unbound if you're looking for privacy" ([source](https://news.ycombinator.com/item?id=49574612)) "we can take away the logging of DNS queries away from the big providers" ([source](https://news.ycombinator.com/item?id=48347721))
- Turnkey setup that runs smoothly (4 comments): "Shouldn't we just encourage everyone to run their own resolvers (it's turnkey for the most part!)?" ([source](https://news.ycombinator.com/item?id=50201053)) "If you are on Linux, install unbound and set your DNS server to localhost, done." ([source](https://news.ycombinator.com/item?id=46429499)) "It took perhaps a couple of hours to set up in the pre-AI age." ([source](https://news.ycombinator.com/item?id=49570466))
- Fast, reliable local caching (4 comments): "Running Unbound locally with intelligent upstream selection and caching definitely reduces blast radius from edge resolver outages." ([source](https://news.ycombinator.com/item?id=47226237)) "now your unbound serves records faster than the round trip out to anything off your own network in most cases" ([source](https://news.ycombinator.com/item?id=49576618)) "I am fairly sure that just unbound by itself can do almost any dns party trick you care to throw at it" ([source](https://news.ycombinator.com/item?id=48838523))

## What people warn about

- Fiddly setup and debugging (3 comments): "I just spent the better half of an hour to debug unbound and the pihole because I thought it's a me problem" ([source](https://news.ycombinator.com/item?id=48028362)) "you can't easily bind Unbound on a WireGuard interface because of services dependency order" ([source](https://news.ycombinator.com/item?id=48106649)) "Clunky but it would sortof work." ([source](https://news.ycombinator.com/item?id=50200350))
- Missing some advanced features (2 comments): "Unbound does not have native Geo support and will not let one set custom per-zone EDE text" ([source](https://news.ycombinator.com/item?id=50199051)) "It would be best if unbound does ZONEMD checking" ([source](https://news.ycombinator.com/item?id=48711900))

## Alternatives hackers recommend

- [Cloudflare DNS](https://hackerapproved.com/p/cloudflare-dns.md): 52 recommend
- [Google Public DNS](https://hackerapproved.com/p/google-public-dns.md): 18 recommend
- [systemd-resolved](https://hackerapproved.com/p/systemd-resolved.md): 10 recommend
- [Numa DNS resolver](https://hackerapproved.com/p/numa-dns-resolver.md): 10 recommend
- [DNS4EU](https://hackerapproved.com/p/dns4eu.md): 5 recommend

## Cite as

Hacker Approved, "Unbound DNS resolver", https://hackerapproved.com/p/unbound/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).