Sold by: Software Sushi
Deployed on AWS
Free Trial
Run your own validating DNS resolver. Unbound 1.26.1 on Ubuntu 24.04 does recursive lookups with DNSSEC validation, ships with built-in test zones so you can see validation work, and serves your VPC once you add its private address.
Overview
Run your own validating recursive DNS resolver. This image starts Unbound 1.26.1 with DNSSEC validation on, a synthetic signed test zone and a check that unsigned data is refused, so you can see it working before you point any client at it.
Launch this version on t3.medium with at least 16 GiB encrypted root storage and at least 2 GiB RAM. Connect with AWS Systems Manager Session Manager. You land as ssm-user; run sudo -iu ubuntu to switch to the ubuntu account. SSH is off: no key pair is attached and no inbound rule is needed. First boot writes root trust anchors, secure.test keys and signed zone material; nothing sensitive is baked into the image. The recursive resolver listens on 127.0.0.1:53 and refuses other clients. Keep private DNSSEC keys out of recordings and tickets.
The standard software fee is described in the AWS Marketplace offer terms. EC2, EBS and data-transfer charges are billed separately. See the offer terms for applicable billing promotions.
After launch, wait for cloud-init to finish, then follow the bundled README for configuration, backup and day-2 operations. IAM is not required for the resolver itself. Opening the resolver beyond loopback is a customer change.
Reach it from other machines: To answer queries from your VPC, add the instance's private IP as an interface and your client range as an access-control allow line in /etc/unbound/unbound.conf, restart Unbound and allow UDP and TCP port 53 only from those ranges. Never allow 0.0.0.0/0.
Copy-paste launch kit (role, security group, run-instances and CloudFormation): https://docs.softwaresushi.com/launch-kit/ and the Unbound DNS Resolver guide: https://docs.softwaresushi.com/unbound/
This is a repackaged open source software product wherein additional charges apply for independent AWS packaging, validation, maintenance and setup documentation. NLnet Labs publishes Unbound under BSD terms; Software Sushi supplies the AMI recipe, pinned official source tarball build, first-boot trust anchors and signed synthetic zone, loopback ACL defaults, and setup documentation without claiming upstream endorsement.
Highlights
- Pinned Unbound 1.26.1 built from the official NLnet Labs tarball with provenance receipts.
- Loopback validating resolver with synthetic DNSSEC zone and refused unsigned zone check.
- Bundled configuration, backup and day-2 operations documentation.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.02 |
Dimensions summary
You pay one usage-based rate, billed per hour while the instance runs on the t3.medium instance type. There is a single pricing dimension, so there are no tiers or sizes to choose between. Billing accrues only while the instance is running and stops when you stop it. The software charge is separate from AWS infrastructure costs such as EC2, EBS, and data transfer, which AWS bills on their own.
Top-of-mind questions for buyers
The software runs on a single t3.medium EC2 instance, a general-purpose instance type with 2 vCPUs and 4 GiB of memory. You pay the hourly software rate for that one running instance. The t3.medium EC2 charge itself is billed separately by AWS.
The software charge accrues only while the instance is running. When you stop the instance, the hourly software charge stops. Stopped instances may still incur AWS storage fees for attached EBS volumes, which AWS bills separately from the software.
The hourly rate covers the software only. AWS bills EC2 compute, EBS storage, and data transfer separately. The resolver answers on loopback and needs no inbound service port, so no extra inbound security group costs apply. Review the current listing before subscribing.
docs.softwaresushi.com
Helpful?
Vendor refund policy
We offer a full refund of software charges for the first 48 hours billing starts if the product does not perform as described. To request a refund, email info@softwaresushi.com with your EC2 instance ID and a description of the issue. AWS infrastructure costs (EC2, EBS, data transfer) are not eligible for refund by us.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Unbound 1.26.1 on Ubuntu 24.04 LTS for t3.medium. Includes a loopback validating recursive resolver on 127.0.0.1:53, synthetic DNSSEC authority on 127.0.0.1:5353, first-boot trust anchors and signed zone, and a refused unsigned zone check. Connect with Session Manager as ubuntu and run bash /opt/sushi/docs/demo.sh after first boot.
Additional details
Usage instructions
Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Query dig @127.0.0.1 for resolver checks; Unbound stays on loopback by default.
Support
Vendor support
Software Sushi provides AMI packaging and setup guidance. Contact info@softwaresushi.com for installation questions. Support coverage requires a separate agreement. This offer does not include NLnet Labs or Unbound project support.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Production-ready Hermes AI messaging agent on hardened Ubuntu 24.04. Add your model-provider and Telegram credentials and run it in your AWS account.
Know when your services go down. Uptime Kuma v2.5.5 on Ubuntu 24.04 gives you a monitoring dashboard with HTTP, TCP, DNS and ping checks, status pages and notifications, behind HTTPS with a generated admin password.
Finds and removes Brazilian personal data (CPF, CNPJ, RG, names, addresses, phones, bank details, vehicle plates and more) from Portuguese text, inside your own AWS account, with no network access. Real-time endpoints and batch jobs over JSON Lines, CSV and plain-text files.
LiteLLM Proxy gives all your applications one OpenAI-compatible API in front of the LLM providers you use, so you can switch or combine models and keep provider keys in one place without changing application code. This Ubuntu 24.04 image starts the open source LiteLLM 1.104.2 gateway on first boot, with loopback-only HTTPS and a per-instance master key.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.