Unbound, a validating, recursive, caching DNS resolver that answers safely the moment it boots.
Unbound is a fast, lean DNS resolver from NLnet Labs that performs recursive resolution and DNSSEC validation for the networks it serves. It cryptographically validates every answer, caches aggressively for low latency, and is driven entirely by a single plain text configuration file, with no database and no web console to manage. It is a popular choice for private resolvers inside cloud networks, on premises sites and labs.
cloudimg ships Unbound hardened, fully patched and configured secure by default: DNSSEC validation is on, and recursion is offered only to the local host and your private ranges rather than the public internet, so it can never be abused as an open resolver. The control channel is keyed by a fresh per instance credential generated at first boot, never baked into the image. Paired with a step by step deploy guide and backed by 24/7 support.