diff --git a/etc/unbound/unbound.conf.d/00-insecure-domains.conf b/etc/unbound/unbound.conf.d/00-insecure-domains.conf
index 72dacd5b..a653f8d4 100644
--- a/etc/unbound/unbound.conf.d/00-insecure-domains.conf
+++ b/etc/unbound/unbound.conf.d/00-insecure-domains.conf
@@ -6,6 +6,10 @@
 # thanks to Android.
 
 server:
+# Quad9 says pointless performance impact on forwarders.
+# https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization
+qname-minimisation: no
+
 forward-zone:
 	name: "mywifiext.net"
 	forward-tls-upstream: no
diff --git a/etc/unbound/unbound.conf.d/nordvpn.conf b/etc/unbound/unbound.conf.d/nordvpn.conf
index 7ec1519b..63261cb1 100644
--- a/etc/unbound/unbound.conf.d/nordvpn.conf
+++ b/etc/unbound/unbound.conf.d/nordvpn.conf
@@ -1,4 +1,8 @@
 server:
+# Quad9 says pointless performance impact on forwarders.
+# https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization
+qname-minimisation: no
+
 forward-zone:
 	name: "."
 	forward-tls-upstream: no