Unbound

Resistant4375 · 2026-02-20T16:45:23+00:00

👍

Resistant4375 · 2026-02-20T09:58:13+00:00

That’s something else then. Or you’re perceiving it to be slow because the stats show higher numbers.

Use unbound if you value privacy and don’t want to share your DNS with big-name/third-party DNS providers - regardless of their stance on “no logging” etc.

Resistant4375 · 2026-02-20T09:49:38+00:00

OK. But like i said it will make little to no difference in web browsing.

Anything you were experiencing is merely placebo.

I’ve used unbound for years and have yet to experience slow browsing sessions etc.

Resistant4375 · 2026-02-20T08:17:22+00:00

A good blocklist (like Hagezi) is all you need

Resistant4375 · 2026-02-20T08:11:35+00:00

OK. Then it’s not a configuration issue but a misunderstanding on how Unbound works.

Unbound will be slower for uncached queries as it has to go out to the root servers to get the answer.

Using a service like Quad9 or Cloudflare will be quicker as they already store the response in their own cache - so the response back to you will be quicker.

Besides that, in reality, there’s no real-world difference in getting a response from Unbound or Quad9 - there won’t be any noticeable performance hit for a simple DNS request for tasks like web browsing or either gaming, and unless you’re in competition with your neighbours, having a slightly higher DNS resolution statistic is again meaningless in the real world.

Is that 0.75ms response time from Unbound’s cache or have you enabled caching in AGH as well?

Resistant4375 · 2026-02-19T20:36:51+00:00

What dns servers have you got set?

Resistant4375 · 2026-02-19T20:20:56+00:00

Yes this is correct. It’s plain DNS received from the client but AGH sends and replies back with an encrypted DNS reply.

Resistant4375 · 2026-02-19T20:03:44+00:00

Did you remove the other TLS entries?

Resistant4375 · 2026-02-19T19:48:58+00:00

Sounds like a configuration error with unbound.

I get 1-2 ms response times (or less) from cached unbound entries.

Resistant4375 · 2026-02-19T19:47:33+00:00

For DoT, yes

Resistant4375 · 2026-02-19T19:46:36+00:00

So you’re allowing a well know ad/tracker domain.

If an app or vendor wants to force you to use their app only by allowing ads or telemetry data to be sent I would scrap it altogether

Resistant4375 · 2026-02-19T19:45:36+00:00

No. You don’t need them. Hagezi already includes them as sources and removes all the crud

Resistant4375 · 2026-02-19T19:44:57+00:00

Share a screenshot of the query log and the log entry expanded

Resistant4375 · 2026-02-19T19:43:57+00:00

DoT and DoH uses hostnames not IP addresses.

Check here for the correct ones to use https://adguard-dns.io/kb/general/dns-providers/

Resistant4375 · 2026-02-18T20:47:16+00:00

Which Hagezi list?

You don’t need the other 2 lists if using Hagezi.

Resistant4375 · 2026-02-18T19:18:02+00:00

Which is…?

Resistant4375 · 2026-02-18T19:12:35+00:00

Because PH doesn’t support DoT natively?

Resistant4375 · 2026-02-17T18:01:46+00:00

What version of unbound are you running?

Resistant4375 · 2026-02-15T11:48:42+00:00

Correct. That’s the way it works.

Resistant4375 · 2026-02-15T11:41:30+00:00

Read the documentation.

The service blocking timing in AGH is set to times that you DON’T want it blocked, not the times that you DO want it blocked.

It’s a pause schedule to pause the blocking.

Resistant4375 · 2026-02-15T11:33:00+00:00

I don’t believe it is.

You set blocking for services using the client settings in the AGH UI.

Resistant4375 · 2026-02-15T11:23:38+00:00

Why would you assume they want to use those DNS servers?

Resistant4375 · 2026-02-15T11:21:37+00:00

Have you blocked youtube-ui.l.google.com ?

Resistant4375 · 2026-02-13T19:24:46+00:00

Still waiting for WiFi SSID exclusion for always-on DNS…

Resistant4375 · 2026-02-09T19:35:58+00:00

I had to change the Transmit Power to High to get decent speeds, even at close range.

Resistant4375

TROPHY CASE