HTTP/2 302 date: Wed, 16 Jul 2025 04:54:40 GMT content-type: text/html; charset=utf-8 content-length: 0 vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With,Accept-Encoding, Accept, X-Requested-With location: https://objects.githubusercontent.com/github-production-repository-file-5c1aeb/94195301/14772197?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20250716%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250716T045440Z&X-Amz-Expires=300&X-Amz-Signature=430e967ec54ace201d4921f53533cbbb3a1f6cdee052693f43c9340d56a536ba&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3Bfilename%3Dunbound-conf.txt&response-content-type=text%2Fplain cache-control: no-cache strict-transport-security: max-age=31536000; includeSubdomains; preload x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: no-referrer-when-downgrade content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/ server: github.com set-cookie: _gh_sess=tAeiozI5LgYlRBjQ1bCT7zzP6TjHVb%2Flkilm7BG1SX4fpwnIgYpOQz4feEapw1wkYbiwKzORUbVX1leFyxVQ%2BGzcytpy148R8LkoyI1zIPHweEJcr0x%2BIPfE1tb9rN4FhZ97HEDtI%2BqXaA73friintZXtKHlY6DDyuLrA19myyMn0YNPLM5D18dq9dYNe0pukn2b2aIh6vpczOxmsOSAAebR3tLgtN23GBNXEX%2BTjWMckueJ0I9REtZWuOHJtuT75S5YmBiVe43Gkgs50aV4qQ%3D%3D--CvxXaoJzjJ4xH%2BEK--1SZ7gCTbky4zwhkR05oxtQ%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax set-cookie: _octo=GH1.1.1090039982.1752641680; Path=/; Domain=github.com; Expires=Thu, 16 Jul 2026 04:54:40 GMT; Secure; SameSite=Lax set-cookie: logged_in=no; Path=/; Domain=github.com; Expires=Thu, 16 Jul 2026 04:54:40 GMT; HttpOnly; Secure; SameSite=Lax x-github-request-id: 81F4:3687E9:3AC7FB:4FE8CC:68773090 HTTP/2 200 content-type: text/plain last-modified: Wed, 05 Mar 2025 03:32:38 GMT etag: "0x8DD5B9660B21943" server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: e8302d71-501e-0029-610d-f60f0c000000 x-ms-version: 2025-05-05 x-ms-creation-time: Wed, 05 Mar 2025 03:32:38 GMT x-ms-blob-content-md5: CWNed2igWXZkHqL7De2xPQ== x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob content-disposition: attachment;filename=unbound-conf.txt x-ms-server-encrypted: true via: 1.1 varnish, 1.1 varnish fastly-restarts: 1 accept-ranges: bytes age: 0 date: Wed, 16 Jul 2025 04:54:42 GMT x-served-by: cache-iad-kjyo7100070-IAD, cache-bom4732-BOM x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1752641681.799725,VS0,VE357 content-length: 3421 # Unbound configuration file for Debian. # # See the unbound.conf(5) man page. # # See /usr/share/doc/unbound/examples/unbound.conf for a commented # reference config file. remote-control: control-enable: yes # don't conflict with the local resolver control-port: 8954 server: extended-statistics: yes statistics-cumulative: yes # unbound automatically tries to bind to ::1, which it can't do # when there's no v6 do-ip6: no # unbound by default blocks recursing to localhost. We ideally # don't want it to recurse to localhost@53, but we can't specify # that do-not-query-localhost: no # open recursor interface: 0.0.0.0 access-control: 0.0.0.0/0 allow # drop privileges username: "unbound" # round robin results rrset-roundrobin: yes # prefetch results so that things don't expire from the cache prefetch: yes # Forces a 1s min TTL for cached records. # # Most of our DNS traffic to Consul is AAAA lookups which never resolve. # Consul's SOA record is hardcoded to not allow negative caching, which # ends up resulting in thousands of bogus requests per second. Adding a 1 # second minium TTL drops most of that traffic. cache-min-ttl: 1 # retransmit timeout. default is 50ms, leading to 50+100+200+400+800 = 1.55s final timeout # setting to 250ms gives 7.8s for recursive upstream resolver to finish infra-cache-min-rtt: 250 # Optimizing based on recommendations from # https://www.unbound.net/documentation/howto_optimise.html # Use all the CPUs # telegraf/templates/datadog_compat_config/unbound.yaml.erb assumes server unbound runs > 1 thread, verify any effects before changing num-threads num-threads: 4 # These should be power of two that's "close to the num-threads" msg-cache-slabs: 4 rrset-cache-slabs: 4 infra-cache-slabs: 4 key-cache-slabs: 4 # default is 4 MiB; dns & vpn are c3.8xl with 64 GB of RAM, so we can be generous rrset-cache-size: 1000m msg-cache-size: 2000m # Larger socket buffer. OS may need config. so-rcvbuf: 4m so-sndbuf: 4m # Faster UDP with multithreading (only on Linux). so-reuseport: yes # EDNS reassembly buffer to advertise to UDP peers (the actual buffer # is set with msg-buffer-size). # edns-buffer-size: 1232 ## unbound 1.9.4 version used 4096 as default edns-buffer-size: 4096 # Maximum UDP response size (not applied to TCP response). # Suggested values are 512 to 4096. Default is 1232. 65536 disables it. # max-udp-size: 1232 ## unbound 1.9.4 version used 4096 as default max-udp-size: 4096 use-syslog: no logfile: /pay/log/unbound/unbound.log log-servfail: yes # qname-minimisation defaults to yes as of unbound version 1.7.2 # (https://nlnetlabs.nl/news/2018/Jun/11/unbound-1.7.2-released/). See here # for an explanation # https://www.isc.org/blogs/qname-minimization-and-privacy/ # # We don't want this turned on. When it is on, if there is a query for e.g. # mongo.service.qa-northwest.consul, unbound will make queries for # qa-northwest.consul and service.qa-northwest.consul as well. These queries # sometimes time out and have caused huge DNS latency spikes in Consul # (enough for an incident and days of head scratching). qname-minimisation: no