| Port details on branch 2026Q2 |
- unbound Validating, recursive, and caching DNS resolver
- 1.25.1 dns
=0 1.25.1Version of this port present on the latest quarterly branch. - Maintainer: jaap@NLnetLabs.nl
 - Port Added: 2026-04-27 00:16:43
- Last Update: 2026-05-20 14:34:46
- Commit Hash: 2fa25fb
- License: BSD3CLAUSE
- WWW:
- https://www.nlnetlabs.nl/projects/unbound
- Description:
- Unbound is designed as a set of modular components, so that also
DNSSEC (secure DNS) validation and stub-resolvers (that do not run as
a server, but are linked into an application) are easily possible.
Goals:
* A validating recursive DNS resolver.
* Code diversity in the DNS resolver monoculture.
* Drop-in replacement for BIND apart from config.
* DNSSEC support.
* Fully RFC compliant.
* High performance, even with validation enabled.
* Used as: stub resolver, full caching name server, resolver library.
* Elegant design of validator, resolver, cache modules.
o provide the ability to pick and choose modules.
* Robust.
* In C, open source: The BSD license.
* Smallest as possible component that does the job.
* Stub-zones can be configured (local data or AS112 zones).
Non-goals:
* An authoritative name server.
* Too many Features.
¦ ¦ ¦ ¦ 
- Manual pages:
-
- pkg-plist: as obtained via:
make generate-plist - USE_RC_SUBR (Service Scripts)
-
- Dependency lines:
-
- To install the port:
- cd /usr/ports/dns/unbound/ && make install clean
- To add the package, run one of these commands:
- pkg install dns/unbound
- pkg install unbound
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: unbound
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1779269013
SHA256 (unbound-1.25.1.tar.gz) = 0fe8b6277b0959cfd17562debac0aa5f71e0b02dc4ffa9c60271c583edab586f
SIZE (unbound-1.25.1.tar.gz) = 6832247
No package information for this port in our database- Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link:

- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- pkgconf>=1.3.0_1 : devel/pkgconf
- autoconf>=2.73 : devel/autoconf
- automake>=1.18.1 : devel/automake
- libtoolize : devel/libtool
- Library dependencies:
-
- libexpat.so : textproc/expat2
- libnghttp2.so : www/libnghttp2
- libsodium.so : security/libsodium
- libevent.so : devel/libevent
- There are no ports dependent upon this port
Configuration Options:
- ===> The following configuration options are available for unbound-1.25.1:
DEP-RSA1024=off: Deprecate the use of RSA 1024 keys
DNSCRYPT=on: Enable dnscrypt support
DNSTAP=off: Enable dnstap logging support
DOCS=on: Build and/or install documentation
DYNLIB=on: Enable support for dynamic (shared) 3rd-party libraries
ECDSA=on: Enable ECDSA (elliptic curve) support (OpenSSL >= 1.0)
EVAPI=on: Pluggable event based libunbound API support
FILTER_AAAA=off: Build with AAAA filter functionality (contrib)
GOST=on: Enable GOST support (requires OpenSSL >= 1.0)
HIREDIS=off: Enable hiredis support for the cachedb module
LIBEVENT=on: Build against libevent
MUNIN_PLUGIN=off: Install Munin plugin
PYTHON=off: Python bindings or support
SUBNET=off: Enable client subnet support
TFOCL=off: Enable TCP Fast Open for client mode
TFOSE=off: Enable TCP Fast Open for server mode
THREADS=on: Threading support
===> Use 'make config' to modify these settings
- Options name:
- dns_unbound
- USES:
- autoreconf cpe libtool pkgconfig ssl
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
1.25.1 20 May 2026 14:34:46
    |
R. Christian McDonald (rcm)  Author: Herbert J. Skuhra |
dns/unbound: Update 1.25.0 => 1.25.1
News:
https://www.nlnetlabs.nl/news/2026/May/20/unbound-1.25.1-released/
PR: 295442
Reported by: Herbert J. Skuhra <herbert@gojira.at>
Approved by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
MFH: 2026Q2
Security: CVE-2026-33278
Security: CVE-2026-42944
Security: CVE-2026-42959
Security: CVE-2026-32792
Security: CVE-2026-40622
Security: CVE-2026-41292
Security: CVE-2026-42534
Security: CVE-2026-42923
Security: CVE-2026-42960
Security: CVE-2026-44390
Security: CVE-2026-44608
Sponsored by: Rubicon Communications, LLC ("Netgate")
(cherry picked from commit 310af4aec441f3ff8be7532650e443a8214ee634) |
1.25.0 02 May 2026 20:17:19
    |
Yusuf Yaman (nxjoseph)  Author: Herbert J. Skuhra |
dns/unbound: Update 1.24.2 => 1.25.0
While here, drop backported patch, it's in upstream now.
News:
https://www.nlnetlabs.nl/news/2026/Apr/29/unbound-1.25.0-released/
Changelog:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-25-0
PR: 294931
Reported by: Herbert J. Skuhra <herbert@gojira.at>
Approved by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Approved by: vvd (co-mentor)
MFH: 2026Q2
(cherry picked from commit 24a052241554d57d2fde2076c8832ca92644b26b) |
1.24.2_2 27 Apr 2026 00:11:12
    |
Robert Clausecker (fuz)  Author: Jaap Akkerhuis |
dns/unbound: fix build with swig-4.4.1
This patch to replace a deprecated keyword in unbound.i should fix the
problem building with swig-4.4.1
Reported by: Vidar Karlsen <vidar@karlsen.tech>
PR: 292625
MFH: 2026Q2
Event: Wiesbaden Hackathon 202604
(cherry picked from commit 082a26ecdfaeb75205ceb9b905118075198282a9) |