On Mon, 2021-03-08 at 10:34 -0500, Steve Litt wrote:
> Hi all,
>
> When I added four opennic root servers to my unbound's root.hints, I
> couldn't resolve grep.geek on my unbound server at 192.168.0.102,
> even
> though I could resolve it from the opennic root servers.
>
> Then I commented out all the icann root servers, restarted, and now I
> can resolve grep.geek as well as a bunch of .com and .org domains.
>
> I'd really like to have both icann and opennic root servers in my
> root.hints. Does anybody know a way to do that without the opennic
> root
> servers being sabotaged?


Is Unbound set to round-robin through your listed root servers? I
wouldn't think it would query more than one of your root servers for
one request. Maybe when you didn't get .geek that was because it hit a
non-opennic server that time.

Gabe