ok as next step, let’s try to catch what unbound is doing while trying to resolve DNS request. I have the feeling, it’s going into direction of blocked DNSSEC request Unbound not working with pi-hole
First, we need the tcpdump
tool to be installed
apt install tcpdump
Stop AGH
systemctl stop adguardhome
Once done start tcpdump
on 1st SSH session
tcpdump -i any -c500 -nn port 53 or port 5335
On a 2nd SSH session, perform a test
dig @127.0.0.1 -p 5335 google.com
Stop/cancel tcpdump
and restart AGH