Adicione isso ao seu unbound.conf
# Dns over TLS
forward-zone:
name: "."
forward-addr: 1.0.0.1@853
forward-addr: 9.9.9.9@853
forward-ssl-upstream: yes
forward-addr: 1.0.0.1
forward-addr: 9.9.9.9