pfSense

Ross Williams wrote:

dnstap support in Unbound would allow for query logging from pfSense with minimal performance impact. To implement a full (remote) query logging solution, additional packages will be required, but turning on --enable-dnstap for the build is a prerequisite. Advanced administrators could then add additional binaries to their installation to generate dnstap-based remote query logging. At some time in the future, remote query logging packages and GUI could be added.

dnstap support has been in Unbound for 5 years, since 1.5.0 and seen support and bugfixes over that time, despite the lack of documentation of the dnstap: clause in the unbound.conf manpage.

I know this is an old request, but times have changed, and doing any kind of forensics or post incident analysis requires organisations does full DNS logging these days.
With unbound we NEED DNSTAP support enabled in the build so we can get full visibility logs of requests (returned host IPs are required).