THANKYOU for choosing to describe what the commands you want us to type are doing, and breaking them down bit by bit, like ''type -d to run it as a daemon in the background''. very few linux channels I've found do this. they just tell you to type what i type, you don't need to know what its doing'' and you can guarantee the comment sections are filled with ''help, this command broke my computer and i don't know what the hell it did''
@AwesomeOpenSource
9 ай бұрын
Glad my style is helpful. I know more advanced useers find it tedious, but my goal is to help everyone that I can.
@shaolindan
2 жыл бұрын
Thank you - I had worked out everything up to Pihole talking to unbound. I was using : instead of # to spedify the port. Now all working!
@AwesomeOpenSource
2 жыл бұрын
Glad it helped! And, I made the same mistake initially.
@esketit3701
5 ай бұрын
Wow honestly great explanation in the beginning there bri
@AwesomeOpenSource
5 ай бұрын
I appreciate it!
@rcdenis1
3 жыл бұрын
My setup is the same except unbound runs on my raspberry pi. Thank you for posting
@AwesomeOpenSource
3 жыл бұрын
My pleasure.
@snowman3130
2 жыл бұрын
How to run this on raspberrypi?
@iamrage4753
Жыл бұрын
@@AwesomeOpenSource can you cover technitium DNS server in place of pihole please?
@Mindflayer86
Жыл бұрын
"Stop Giving Away your Data and Web Profile. [...] Make Privacy Number 1!" - The Pi-hole with Unbound DNS combination doesnt add a lot to your privacy actually. Like you correctly mentioned yourself, the default DNS, and thus the one most people use, is the DNS of your ISP. And wether you use that DNS or Unbound doesnt prevent them from building a "web profile" of you. Since after (almost) every DNS request, there comes the request to the obviously unencrypted IP-Address. Why else would you ask for the DNS entry. This tells your ISP exactly as much as when it logs your DNS requests. And you cannot prevent that without a VPN.
@AwesomeOpenSource
Жыл бұрын
Great tip and clarification.
@KidJake695
Жыл бұрын
Got a little stuck because I was running Pihole and Unbound on the same Raspberrypi, but I got it to work the moment I put Unbound on my Linux server. Huge thanks!
@AwesomeOpenSource
Жыл бұрын
Super glad it worked out for you.
@Wahinies
Жыл бұрын
For future reference the DietPi distro makes it way too easy to install both. Its a checkbox. For added security because Unbound uses root hints (plain udp/53), there is a Cat command on the DietPi site to change it to public DNS over TLS (encrypted). I also installed ntpd and use it as my time server.
@Tntdruid
Жыл бұрын
You still need a firewall rule to force hardcodes ens.
@Datalore74
3 жыл бұрын
Fantastic video. Keep up the good work.
@AwesomeOpenSource
3 жыл бұрын
Thank you!
@syotos8643
3 жыл бұрын
Great video, love your stuff!! Haha docker rum.
@AwesomeOpenSource
3 жыл бұрын
Makes me think of a good drink sometimes.
@guydreamr
9 ай бұрын
Good video on installing Unbound on Docker, however as far as the video for installation on Raspberry Pi which you said in the introduction that you also made, doing a Control F search failed to return any results, nor is there a link to the video in the description.
@AwesomeOpenSource
9 ай бұрын
Maybe I mispoke. I meant i have Pihole running on the raspberry Pi but I installed Unbound in my docker server, and pointed the raspberry pi running pihole at it.
@guydreamr
9 ай бұрын
@@AwesomeOpenSource Excellent, thank you for the clarification.
@panoshountis1516
Жыл бұрын
Thank you for this; I am running Pi-hole for 3 years now but I will try it with Unbound. One question, though: Do I need to edit the bottom part of the unbound config file below "# Ensure privacy of local IP ranges" to cater for my local ranges, and if so, what needs to be listed there?
@AwesomeOpenSource
Жыл бұрын
It's optional, but if your wanting DNS over TLS, I suggest choosing one of those options.
@itsathejoey
2 жыл бұрын
I have found that listing the ports like this doesn't work. For PiHole the dns port options need to be set to IPADDR:53:53 and for unbound IPADDR:5335:53.
@AwesomeOpenSource
2 жыл бұрын
Great tip for anyone having issues using my method.
@kevinhughes9801
3 жыл бұрын
Excellent vid thank you
@AwesomeOpenSource
3 жыл бұрын
my pleasure
@fuelbuster4368
2 жыл бұрын
Great video. I noticed UBlock Origin was blocking a few adds on the MSN page. Disabling that will show the adds the get past Pi-hole. At least they will work together.
@AwesomeOpenSource
2 жыл бұрын
Indeed, I use both together, and it's tremendously wonderful!
@mohamedfarhanal-subaey1670
Жыл бұрын
thank you for your reply and I would like to ask you if you have time to make tutorial in detail in how to install pihole with unbound because I try to flow all your video regarding synology , pihole and unbound but I'm really confused. my device synology DS220+ DSM 7.1.1 Ram 6GB 16TB HDD it will be a grate helpful. best regards
@fiezdude
Жыл бұрын
WARNING: The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8) and no specific platform was requested
@AwesomeOpenSource
Жыл бұрын
I think the issue is it's defaulting to amd64, but you're running on an arm64 device, so you may need to add something to this to get it to install on arm instead.
@fiezdude
Жыл бұрын
@AwesomeOpenSource hello thanks. Got a solution. It worked. Added rpi at the emd and work worked.
@jcw232000
2 жыл бұрын
i setup pi-vpn pi-hole works with wireguard unbound so when cell phone is connected to vpn it uses pi-hole as well
@AwesomeOpenSource
2 жыл бұрын
Definitely. it's a great set of amazing tools!
@sidewind131258
2 жыл бұрын
One no a few questions, do you run pi hole on a raspberry pi or on your server ? If on a raspberry pi can you please show how to hook it up. When using the internet via unbound/pi hole, do you do it from your physical server (in an vm or so) or do you have a second computer hooked up to your server ? I have asked quite a few about exactly that (the hardware part) and if I get an answer, it is a nonansver like "I go on the internet from another machine, why should I use my server for that? " or equivelent
@AwesomeOpenSource
2 жыл бұрын
It's a great question and it definitely depends on how you run pi-hole and unbound. I run pi-hole on an actual raspberry pi. I'm running unbound from a Ubuntu server (a VM in Proxmox) using docker. So, I have pihole connected to my network via an ethernet cable. I then tell my router to use my pi-hole's IP address as it's DNS server. So when I go to the internet from any machine, the request goes to my router, which then asks my Pi-hole for the information it needs. Pi-hole then looks at all of the IPs it receives back, and essentially trashes the ones associated to ads. It then forwards the rest of the request back to the machine that asked for the site. As for Unbound. I set it up, and then told Pi-hole to use it for upstream DNS. You do this in the Pi-hole Web configuration page. So instead of OpenDNS or Cloudflare, I told pi-hole just to use my unbound. After the video I setup a second unbound on a different server I run, so that I have 2 instances of Unbound running, and Pi-hole looks at both of them (one primary, one secondary)..
@sidewind131258
2 жыл бұрын
@@AwesomeOpenSource I'll give it a looki seee when I have my Unraid server up and running sometime this week
@emiliostefano
Жыл бұрын
great tutorial thnx !
@AwesomeOpenSource
Жыл бұрын
My pleasure.
@viggyprabhu
6 ай бұрын
In your setup isnt unbound forwarding request by default to cloudflare? what is achieved differently here?
@AwesomeOpenSource
6 ай бұрын
No, unbound can be configured to send to any one of several upstream (top level) DNS servers. I setup mine to use Secure DNS. It's available in the configuration file.
@viggyprabhu
6 ай бұрын
Ok.. so you still pass your DNS requests to an upstream DNS but it’s sent over securely unlike direct pihole? Does it use DoH or DoT?
@jantoniotorre
Жыл бұрын
Would be nice to know how you got your unbound IP address, I imagine is the IP of the machine where you are running docker but would be nice to explain
@AwesomeOpenSource
Жыл бұрын
It is the host IP of the machine where I was running Unbound.
@AwesomeOpenSource
Жыл бұрын
@@bouhisse5472 no, no firewall rule, but if you have a firewall rule blocking outgoing requests, you may have to allow that port. In my case I don’t block outgoing on the firewall, but instead on my local machine using open-snitch.
@mmad3130
Жыл бұрын
so with Unbound, do you forego the content filtering capabilites of say, OpenDNS?
@AwesomeOpenSource
Жыл бұрын
Yes, as the unbound would not route you through Open DNS in this case.
@francocastilloAR
3 жыл бұрын
Note that the configuration of that Unbound image has public DNS configured and not recursive DNS.
@AwesomeOpenSource
3 жыл бұрын
Thank you for letting me know. Need to see where it’s pointing and if I can change it.
@francocastilloAR
3 жыл бұрын
@@AwesomeOpenSource Just that image allows you to enter the container to change the Unbound settings. There is another image that is already configured as recursive DNS and it is klutchell's and cannot be configured, but the author claims that it is now ready to use with Pi-hole. Anyway, I already stopped using Unbound because I have a lot of latency like 160 ms or much more. So I use Cloudflare with about 10 ms approx.
@francocastilloAR
3 жыл бұрын
@@AwesomeOpenSource DD-WRT doesn't have many options. OpenWrt is much better. It has 802.11s and BATMAN. The "bad" thing is that it is not so much like a commercial solution because it is maintained by the community.
@AwesomeOpenSource
3 жыл бұрын
@@francocastilloAR Yep, I've looked at OpenWRT as well, and I like it a lot, but the devices I have right now are Broadlink chipped, so they don't do so great with OpenWRT on dual band. Plan to get some to test OpenWRT with Batman soon though as well. I love both of those systems, and I've really gotten interested in OpenWisp for OpenWRT as well.
@AwesomeOpenSource
3 жыл бұрын
@@francocastilloAR Yep, I did that after you other comment. I need to make a follow up video on it. Very cool to have DNS-over-TLS options and some others in there.
@Aloysius1966
3 жыл бұрын
I use Ubuntu AdGuard Home running on a Pi3
@AwesomeOpenSource
3 жыл бұрын
Haven’t tried AdGuard, but hear it’s pretty nice as well.
@lolololowbx280
3 жыл бұрын
@@AwesomeOpenSource if you need encrypted dns upstream, adguard are much more straight forward to setup
@c.m.7037
2 жыл бұрын
Does running unbound by itself on a ubuntu server help with ad blocking or is that the feature set of Pi-Hole? Also, does unbound need to have DNS forwarders set?
@AwesomeOpenSource
2 жыл бұрын
I don't think so, you need to run Pi-hole or Ad-guard for the best blocking. Yes, unbound uses upstream main DNS, You can set it in the configuration file.
@Wahinies
Жыл бұрын
PiHole is what does the filtering. Unbound by default uses root hints which are plain udp/53. To use DNS over TLS you do have to add forwarders to the config and restart the service.
@itgeeky6313
3 жыл бұрын
I already have Pihole running on my network. I'm planning to get unbound installed as well. But I was wondering, if I remove my ISP's DNS server IP address from the router itself, will unbound still work?
@AwesomeOpenSource
3 жыл бұрын
Yep, that's how I do it. Myrouter points to my pi-hole, which then asks unbound for the DNS record of any website I want.
@itgeeky6313
3 жыл бұрын
@@AwesomeOpenSource that's great to know. Thanks again
@Bond2025
2 жыл бұрын
Is it possible to use DNS over HTTPS or TLS with Unbound? I find a lot of people saying I need to run another extension called STUBBY.
@AwesomeOpenSource
2 жыл бұрын
Yes, you can modify the Unbound Config inside the container / or on the mapped volume, then restart the container to get it to take effect. I did exactly that. In their config, they have a bunch of top tier options, and a couple are TLS based.
@MariosMartiopoulos
3 жыл бұрын
Great video!!! Could you please tell me how to enable ipv6 filtering in the setup you showed to us?
@AwesomeOpenSource
3 жыл бұрын
Let me see what I can do.
@MariosMartiopoulos
3 жыл бұрын
@@AwesomeOpenSource thank you very much and sorry if I am wasting your time but i think a lot of people want to have ipv6 too. I have already done many failed tests so my knowledge is not enough I guess. We must rely on yours. :-D :-D :-D :-D
@ivanluhi
2 жыл бұрын
Thanks for the video. If i may ask, what Adlist/blocklist are you using ?
@AwesomeOpenSource
2 жыл бұрын
I don’t use any with unbound, but I have pi-hole set to use the ones they include.
@ivanluhi
2 жыл бұрын
@@AwesomeOpenSource yeah, i meant the ones you use in pihole, I run unbound and pihole in the pi but still I get a fair amount of ads with the "default" list.
@AwesomeOpenSource
2 жыл бұрын
@@ivanluhi ah, ok, i also use uBlock origin on Firefox and ghostery on Firefox. Those three together seem to knock out the vast majority.
@mr.boniato6402
Жыл бұрын
What's the difference between adding 192.168.1.51#5335 vs 127.0.0.1#5335 as the Upstream server?
@AwesomeOpenSource
Жыл бұрын
I have my unbound and my pihole running on different machines, so I had to use the private IP, but if they are running on the same device, you can use the localhost address.
@jeroenofferman8519
Жыл бұрын
You're showing all kinds of websites without ads. Great, but they're being blocked by uBlock Origins in the browser itself. It's right there, the red icon with the counter.
@AwesomeOpenSource
Жыл бұрын
Indeed, uBlock Origin does block a lot, but the Pi-hold is definitely blocking even more stuff on top of that.
@nammadesign9303
2 жыл бұрын
ublock origin was turned on during this video so it did most of the heavy lifting..
@AwesomeOpenSource
2 жыл бұрын
There is definitely a benefit to using multiple tools, but even with uBlock origin, there is a drastic difference when I turn off pi-hole.
@dkeisk
3 жыл бұрын
What is the name of the Service used to neatly Display the docker-hosted Services at 6:08?
@AwesomeOpenSource
3 жыл бұрын
It's called Portainer-CE (Community Edition). Also an open source project. Check out this video for more details on it kzitem.info/news/bejne/joKGx4unapF4eWU
@dkeisk
3 жыл бұрын
@@AwesomeOpenSource im familiar with portainer, im talking about the tab called os Ai dashboard among your tabs. Exactly the tab from which you opened portainer 😁
@AwesomeOpenSource
3 жыл бұрын
@@dkeisk oh, that is the Homer Dashboard. I have a video on it as well.
@Teleport73
2 жыл бұрын
Thanks for a very useful video. I have pi-hole running in a docker container, which I manage using Portainer. I woud like to install Unbound in a separate container, which I'd then point Pi-Hole towards, but am having trouble finding a docker image. Can anyone help please?
@AwesomeOpenSource
2 жыл бұрын
In portainer you can add Unbound using the Docker-compose format in the Stacks area.
@JasonBrain
8 ай бұрын
Have you looked into anonymous dnscrypt yet?
@AwesomeOpenSource
8 ай бұрын
I haven't, but I will.
@user-lh5uu2nr1p
5 ай бұрын
Not anonymous! Your ISP and anyone else sniffing can see and log all of your DNS requests with UNBOUND.
@AwesomeOpenSource
5 ай бұрын
do you mind pointing to your source of information? Unbound has the option to setup DNS over SSL and you can point to any number of top tier DNS servers.
@user-dy8uk1ot8h
2 жыл бұрын
Great video! Do you think this would be a good alternative for a vpn? My main use of vpn is just for privacy so that my ISP dont see the websites I visit. Since unbound caches the domains I visit, then from what I understand my ISP wont be able to see it? Or they can still the IP address I connect to?
@AwesomeOpenSource
2 жыл бұрын
No, a VPN is aa different thing. This won't encrypt the traffic, but it does use DNS other than your ISPs default DNS. The traffic runing through their lines still wwon't be encrypted. So this, in combination with a VPN will get you the privacy you really want.
@user-dy8uk1ot8h
2 жыл бұрын
@@AwesomeOpenSource Thanks for the reply! Well at least no DNS servers would be able to build a profile on me. My ISP will have to specifically sniff my own traffic just to see what websites I visit, if they even would find me interesting to bother with lol
@joshuapettus6973
2 жыл бұрын
@@AwesomeOpenSource Few things. First, in 2021 most of your traffic is encrypted anyway via https on most of the modern internet. You do not need a vpn for that. Second by using unbound as your primary DNS, your DNS requests, that arn't cached, go directly to the authoritative servers that know the website IP. Therefor, there isn't a single DNS server that knows your web history, except the one on your network. Which is why you use Unbound isn't it? Now this is actually UNDONE by using a VPN! Remember for a VPN to do what it does, you have to relinquish your DNS requests to the VPN server itself! (Otherwise you would be in a situation that is known as a DNS leak and would negate the VPN). Therefore you are trusting your VPN provider with everything, your traffic and your DNS requests. To which I ask why are they better than your ISP? Truth is, VPN are an excellent technology, but the paid for services out there are really overselling the privacy argument. And if this is why you use them, I highly recommend re evaluating.
@Movies4118
3 жыл бұрын
Can you run unbound and pihole on the same Rpi? Figured there might be a port binding issue - since both would use port 53.
@AwesomeOpenSource
3 жыл бұрын
Should be able to. Someone in one of the other comments said they do it that way I believe.’
@hagridsbeardguy1399
2 жыл бұрын
You have to config unbound to listen on a different port to Pi hole. Check out the guide at the link below. Once you're done you can log into pi hole and set a custom upstream DNS server under settings/dns, be sure to disable any preset dns servers you selected during setup. Now you have an ad blocker + recursive DNS server. docs.pi-hole.net/guides/dns/unbound/
@AwesomeOpenSource
2 жыл бұрын
@@hagridsbeardguy1399 yep, that’s what I do in the video as well, even running them on different machines.
@Wahinies
Жыл бұрын
Yes. DietPi makes it trivial as it automatically configures Unbound as a forwarder to PiHole on 5335
@1diazdev
2 жыл бұрын
Great Video, Thank you. I follow along and got an error in the Portainer logs after running unbound "standard_init_linux.go:228: exec user process caused: exec format error". I am not sure what to do or if this is normal. I am using the same pi for pihole and unbound and only did the steps on the video. Thank you
@AwesomeOpenSource
2 жыл бұрын
I want to say I saw this once, but I don’t recall what I did to fix it. It may have just been a matter of stopping, and removing the container and image and then running the Docker command again.
@online_now6834
Жыл бұрын
Can you show how to install with Adguard?
@AwesomeOpenSource
Жыл бұрын
These two things do essentially the same thing, so not sure there is a gain in doing this. But you'll likely want to run them on 2 different devices, and use 1 as primary DNS and one as secondary, and I'm sure they'll both use port 53.
@maxd7228
3 жыл бұрын
Quick Question, since requests are fetched over port 53, does this expose your DNS queries to your ISP? Given the fact that port 53 is unsecured dns.
@IgnoreMyChan
3 жыл бұрын
If you use the DNS server of your ISP as the upstream DNS for Pi-Hole: Yes. If your ISP filters your traffic (i.e. performs a MitM attack on you): Yes If you use an alternative DNS upstream server for Pi-Hole AND your ISP doesn't spy on your traffic: Probably not If you use unbound, as the video explains, AND your ISP doesn't spy on your traffic: Probably not
@AwesomeOpenSource
3 жыл бұрын
But that's the point of using Unbound DNS in this case. You are no longer using your ISP for DNS, you are making your DNS request to your own locally hosted DNS server. So unbound gets the request from pi-hole for blahblahblah.com, and hands back the IP for blahblahblah.com to pi-hole, which then filters any ads it can, and says to your machine - here you go... blahblahblah.com without the ads. Your traffic to blahblahblah.com still goes through your ISP, so you want to try to always use the SSL (https) address for sites whenever possible. The ISP will still see headers from those sites. You can use a VPN tunnel like Wireguard out to a VPS running pihole and unbound if you want to completely block your ISP ability to see anything you're doing. Check out Mistborn for that setup.
@dman34
2 жыл бұрын
Has anyone experienced drastic bandwidth drop after setting up both pi-hole and unbound? we used to get 250Meg/s via our fiber connection. After the setup, we only get about 20 meg per second . Any suggestions?
@AwesomeOpenSource
2 жыл бұрын
That is definitely strange. I have 400 Mb/s here and consistently hit that.
@Wahinies
Жыл бұрын
No problemo here. Are you using the PI as a proxy as well?
@alexharrington2110
3 жыл бұрын
I’m going to setup docker on my ras. But was wondering if I could run both pihole and unbound on the same pi with docker
@AwesomeOpenSource
3 жыл бұрын
You should be able to, yes, just follow the same instructions for handling ports, as you want Pi-hole to be on 53, then setup unbound on a different port, and set pi-hole to ask it for dns info.
@alexharrington2110
3 жыл бұрын
@@AwesomeOpenSource thank you for the timely reply and I’m looking forward to getting it set up
@bravofoxtrotllc6817
Жыл бұрын
I thought unbound as recursive doesn't encrypt queries? therefore Unbound as a DNS authoritative server leaks dns to your ISP!
@AwesomeOpenSource
Жыл бұрын
In the unbound config, you can select a TLS dns main provider, so not sure if it does or doesn't from that standpoint.
@Worscht3000
3 жыл бұрын
What DNS servers is unbound using as upstream? Your ISPs ?
@AwesomeOpenSource
3 жыл бұрын
Unbound starts at the Root Servers and works its way down from there.
@lolololowbx280
3 жыл бұрын
How about running pi-hole + stubby + nextdns/whatever dns over tls provider you use? Stubby could protect your dns traffic so it won't use unsecure protocol
@francocastilloAR
3 жыл бұрын
With Unbound you don't have to use public upstream DNS servers.
@lolololowbx280
3 жыл бұрын
@@francocastilloAR i would like to try unbound but it still have an issue with nextdns (github.com/NLnetLabs/unbound/issues/132) so i refrain myself to try that
@daninmanchester
Жыл бұрын
But unbound is still going out to a 3rd party. I'm not sure this is that different is it?
@AwesomeOpenSource
Жыл бұрын
Yes, unbound, as all DNS does, goes out to a 3rd party... but you are 1. choosing the 3rd party, 2. using a top tier DNS vs. your ISP (2nd or 3rd tier at best), or Google (who just wants to target you better with ads and tracking, and others who have similar goals / desires.
@KadargoGaming
2 жыл бұрын
How do you update pihole?
@AwesomeOpenSource
2 жыл бұрын
At one point, they had an update button, i think, but now I think you just run the installer again. If you're running it in docker, you stop and delete the container, pull the latest image, and create a new container. You'll want persistent volume mapping setup for this, so you don't lose all of your settings.
@futurecactus
2 жыл бұрын
I haven't run PiHole for a while but if I remember correctly, the easiest way is to SSH in and use pinhole -up
@francocastilloAR
3 жыл бұрын
What do you have in the "dd-wrt Mesh" bookmark?
@AwesomeOpenSource
3 жыл бұрын
I’ve been trying to find an open source wireless mesh that would perform as well as my eero setup, so was testing some of the de-wrt options, but they all cut speeds greatly.
@Xzeptie
2 жыл бұрын
does not work in Raspberry Pi :(
@AwesomeOpenSource
2 жыл бұрын
Should work fine in Raspberry PI. What issue are you seeing?
Пікірлер: 135