unbound Rootless Unbound from Alpine with CAP_NET_BIND_SERVICE set on binary. With default configuration Unbound listens on port 53. See sample deployment under deploy/kubernetes/.