Wouter Wijngaards

The forward-tls-upstream and forward-tcp-upstream only take precedence over the server: setting when they enable the setting. For disabling it it does not override the server setting. If it is needed...

The commit adds an explanation for the behaviour to the documentation. Maybe this is more understandable.

If this is using cachemiss or cachehits to measure it, it turns out that the code counts serve expired refresh attempts as a cachemiss. So the cachemiss counter is increased...

[ Edited the issue post to put the config in a code block, that shows the commented out entries with `#`. ]

That would need a test to see if there is an expired answer at that time. That there is a recursion to refresh is not so much the problem, I...

Unbound generates negative responses from cache, using `aggressive-nsec` and with `harden-below-nxdomain`. They can be turned off. The harden-below-nxdomain regularly turns up as a problem, with own use local domains where...

Perhaps with verbosity higher, like 4 and 5, it would log more details on the connection, eg. it looks like the connection times out. So much about the upstream connection,...

The local zone can match the most specific match. So it is possible to define all of them, and also `birb.it`, and have specific handling for each of them. For...

Unbound actually has syntax to specify this, with `forward-host: ns.example.com` and `stub-host: ns.example.com`. Unbound then, recursively, resolves the names to look up the nameserver addresses. This is useful for lower...

This set of changes looks nice to me. Unbound has similar issues, because it has the same code in certain places, it needs the memory leak fix and some of...