Unbound DNS in OPNsense
OPNsense is often configured with a local Unbound DNS server to use for
its own lookups and to provide as a recursive DNS service to LAN clients.
Tailscale DNS settings are not currently implemented for Unbound DNS;
instead, the 100.100.100.100 DNS server will be written to
/etc/resolv.conf. This will effectively disable Unbound.
It may be preferable to not use the Tailscale DNS settings:
tailscale up --accept-dns=false.
Instead, Unbound can be configured to be able to resolve MagicDNS names.
The tiny 100.100.100.100 DNS server running within the
will always answer queries specifically sent to it.
In System > Settings > General, add a search domain for the MagicDNS name
of the tailnet such as
In Services > Unbound DNS > Query Forwarding, add an entry for the MagicDNS name directed to 100.100.100.100.