3 min read

Firewalla: Protect Your Privacy With Unbound

Firewalla: Protect Your Privacy With Unbound
Photo by David Rangel / Unsplash

Protect Your Privacy With Unbound

In addition to DNS over HTTPS, Firewalla supports another DNS service to help you keep your network traffic secure: Unbound. Unbound is a validating, recursive, caching DNS resolver installed locally on the Firewalla box. It prevents a single DNS server from having all your DNS records, increasing your online privacy and security.


How does Unbound work?

Unbound is a DNS resolver server that processes DNS queries from client devices and provides the corresponding IP addresses (while DNS-over-HTTPS (DoH) is a DNS protocol that can be used to talk to DNS resolvers).

  • Unbound uses DNSSec to validate DNS results and prevent man-in-the-middle attacks. Because Unbound is a DNS resolver, it will connect to different DNS servers for other domains, preventing modifications to DNS replies.
  • Unbound doesn't encrypt DNS traffic.
  • Unbound will talk to root DNS servers directly, ensuring no one DNS server has a full record of your DNS queries.

When should I use Unbound?

Unbound is valuable whenever you want to protect your digital privacy. More specifically, it's useful when you don't want a single DNS server to know where you're going and you don't want your DNS queries to be modified.

How do I enable Unbound?

Unbound is part of Firewalla's DNS Service feature. To apply Unbound to your devices, tap the 'DNS Service' button at the bottom of your box's main page, toggle Unbound on, and select the devices, groups, or networks to apply it to.


As part of the 1.52 app release, you can also now send DNS requests over VPN instead of your ISP to protect your privacy further. To enable Unbound over VPN, you must have a VPN Client connection configured on your Firewalla and be using Unbound. Watch a video tutorial or read more about this feature in our 1.52 App Release Notes.


Can I use Unbound with other DNS services?

While you can't run two different DNS services at the same time on one device, you can enable different DNS services at the same time on different devices. For example, you can run DoH for your laptop while running Unbound for your tablet.


This newsletter is a shortened version of our article on using Unbound with Firewalla. You can read the full article here: DNS Service: Unbound.

For a more comprehensive guide to the range of DNS services Firewalla offers, read our article on Firewalla DNS Services.


Firewalla Gold Plus

Order Gold Plus


Order Firewalla Purple SE

Firewalla Wi-Fi SD for the Gold

(Now Shipping!)

Back up your home/business internet with your phone seamlessly


Order Firewalla Wi-Fi SD


Firewalla Purple: Gigabit Cyber Security

2-port Gigabit Firewall + Router + WiFi

Order Firewalla Purple


Firewalla Gold: Multi-Gigabit Cyber Security

4-port Multi-Gigabit Firewall + Router

Full Metal and Fanless Design

More Advanced Features

Same Delightful Experience

Order Firewalla Gold

Any questions, please email us help@firewalla.com

or visit our site https://firewalla.com

Want to learn more? Here are more ways to follow us

Reddit: https://reddit.com/r/firewalla

Facebook: https://facebook.com/firewalla


Connect with us [Infosec.Exchange] | Mastodon