<p>Is there a possibility to configure all the unbound configurations listed <a href="https://linux.die.net/man/5/unbound.conf" rel="nofollow noreferrer">here</a> similarly in kubernetes coredns 'Corefile' configuration like this. Only few options are listed <a href="https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/" rel="nofollow noreferrer">here</a>. I am looking for the below server options in unbound conf to be done on kubernetes Corefile coredns configmap.</p>
<ol>
<li>do-ip6</li>
<li>verbosity</li>
<li>outgoing-port-avoid, outgoing-port-permit</li>
<li>domain-insecure</li>
<li>access-control</li>
<li>local-zone</li>
</ol>
<p>Example unbound conf which I am looking to do as same in kubernetes Corefile configuration:</p>
<pre><code>server:  
 do-ip6: yes  
 root-hints: /etc/unbound/named.cache  
 verbosity: 1  
 outgoing-port-avoid: 0-32767  
 outgoing-port-permit: 32768-65535   
 domain-insecure: &quot;pub&quot;  
 access-control: 0.0.0.0/0 refuse  
 local-zone: 10.in-addr.arpa nodefault  
 local-zone: 16.172.in-addr.arpa nodefault  
</code></pre>
<p>I need to do above unbound conf similarly in kubernetes Corefile configuration. As I am new to kubernetes coredns, I am not sure whether these configurations are possible in Coredns. Can someone direct me how to do that? Also I am looking for steps on how to configure this in Corefile  configmap using helm. It would be really helpful if I get some information on this. Thanks in advance!!!</p>

<p><code>CoreDNS</code> supports some requested features via <a href="https://coredns.io/plugins/" rel="nofollow noreferrer"><code>plugins</code></a>:</p>
<ul>
<li><code>do-ip6</code> - CoreDNS works with ipv6 by default (if cluster is dual-stack)</li>
<li><code>verbosity</code> - <a href="https://coredns.io/plugins/log/" rel="nofollow noreferrer"><code>log</code></a> plugin will show more details about queries, it can have different format and what it shows (success, denial, errors, everything)</li>
<li><code>outgoing-port-avoid, outgoing-port-permit</code> - did not find any support of this</li>
<li><code>domain-insecure</code> - please check if <a href="https://coredns.io/plugins/dnssec/" rel="nofollow noreferrer"><code>dnssec</code></a> can help (It looks similar to what <code>unbound</code> has, but I'm not really familiar with it).</li>
<li><code>access-control</code> - <a href="https://coredns.io/plugins/acl/" rel="nofollow noreferrer"><code>acl</code></a> plugin does it.</li>
<li><code>local-zone</code> - <a href="https://coredns.io/plugins/local/" rel="nofollow noreferrer"><code>local</code></a> plugin can be tried for this purpose, it doesn't have lots of options though.</li>
</ul>
<p>Bonus point:</p>
<ul>
<li>CoreDNS config's change - <a href="https://coredns.io/plugins/reload/" rel="nofollow noreferrer"><code>reload</code></a> allows automatic reload of a changed Corefile.</li>
</ul>
<p>All mentioned above plugins have syntax and examples on their pages.</p>
