Unbound is a production-grade, modular, recursive DNS resolver with extensive DNSSEC validation, caching, and policy enforcement. It functions as a system daemon that iteratively resolves DNS queries from root servers or forwards to upstream resolvers, caches results in multi-layered caches (message, RRset, infrastructure), and validates responses according to DNSSEC. The daemon supports multiple transport protocols: UDP, TCP, TLS (DoT), HTTPS (DoH), and QUIC (DoQ), as well as experimental DNSCrypt encryption. It includes a modular processing pipeline where the iterator, validator, response-IP modification (respip), DNS64 synthesis, and other modules are composable at startup. An embedded library (libunbound) provides a public C and Python API for synchronous and asynchronous DNS lookups, enabling integration into other applications.
This is a single-file Cloudflare Workers application that provides a web-based ProxyIP checking tool. It includes a full front-end with input for single/batch targets, DNS resolution via DoH, and connectivity verification using TCP/TLS probes against external test endpoints (ipv4.090227.xyz, ipv6.090227.xyz). The backend implements a custom TLS 1.2/1.3 client supporting ECDHE key exchange, ChaCha20-Poly1305, and AES-GCM. The application is entirely contained within `_worker.js`, which serves as both API router and HTML generator. It has no external dependencies beyond the Cloudflare Workers runtime and some CDN assets for maps and fonts. While the code is well-crafted for its purpose and demonstrates strong understanding of TLS and network programming, it lacks testing, modularity, and deployment configuration (no wrangler.toml). The single-file architecture makes it easy to deploy but hard to maintain or reuse components.