diff --git a/etc/unbound/unbound.conf.d/ecs.conf b/etc/unbound/unbound.conf.d/ecs.conf
new file mode 100644
index 00000000..0bc6abd6
--- /dev/null
+++ b/etc/unbound/unbound.conf.d/ecs.conf
@@ -0,0 +1,5 @@
+server:
+client-subnet-zone: "."
+client-subnet-always-forward: yes
+max-client-subnet-ipv6: "16"
+max-client-subnet-ipv4: "48"