diff --git a/etc/unbound/unbound.conf.d/dot-provider-zones.conf b/etc/unbound/unbound.conf.d/dot-provider-zones.conf
new file mode 100644
index 00000000..793eb683
--- /dev/null
+++ b/etc/unbound/unbound.conf.d/dot-provider-zones.conf
@@ -0,0 +1,116 @@
+# This file attempts to send zones belonging to DNS operators to their DNS servers.
+# Inclusion criteria: I know and use the service.
+
+server:
+	# Debian ca-certificates location
+	#tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
+	# Fedora
+	#tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
+	# Use system certificates no matter where they are
+	tls-system-cert: yes
+	# Quad9 says pointless performance impact on forwarders.
+	# https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization
+	qname-minimisation: no
+
+forward-zone:
+	name: "google."
+	forward-tls-upstream: yes
+	forward-addr: 2001:4860:4860::8844@853#dns.google
+	forward-addr: 2001:4860:4860::8888@853#dns.google
+	forward-addr: 8.8.4.4@853#dns.google
+	forward-addr: 8.8.8.8@853#dns.google
+
+forward-zone:
+	name: "google.fi."
+	forward-tls-upstream: yes
+	forward-addr: 2001:4860:4860::8844@853#dns.google
+	forward-addr: 2001:4860:4860::8888@853#dns.google
+	forward-addr: 8.8.4.4@853#dns.google
+	forward-addr: 8.8.8.8@853#dns.google
+
+forward-zone:
+	name: "google.com."
+	forward-tls-upstream: yes
+	forward-addr: 2001:4860:4860::8844@853#dns.google
+	forward-addr: 2001:4860:4860::8888@853#dns.google
+	forward-addr: 8.8.4.4@853#dns.google
+	forward-addr: 8.8.8.8@853#dns.google
+
+forward-zone:
+	name: "youtube.com."
+	forward-tls-upstream: yes
+	forward-addr: 2001:4860:4860::8844@853#dns.google
+	forward-addr: 2001:4860:4860::8888@853#dns.google
+	forward-addr: 8.8.4.4@853#dns.google
+	forward-addr: 8.8.8.8@853#dns.google
+
+forward-zone:
+	name: "youtube-nocookie.com."
+	forward-tls-upstream: yes
+	forward-addr: 2001:4860:4860::8844@853#dns.google
+	forward-addr: 2001:4860:4860::8888@853#dns.google
+	forward-addr: 8.8.4.4@853#dns.google
+	forward-addr: 8.8.8.8@853#dns.google
+
+forward-zone:
+	name: "youtu.be."
+	forward-tls-upstream: yes
+	forward-addr: 2001:4860:4860::8844@853#dns.google
+	forward-addr: 2001:4860:4860::8888@853#dns.google
+	forward-addr: 8.8.4.4@853#dns.google
+	forward-addr: 8.8.8.8@853#dns.google
+
+forward-zone:
+	name: "googlevideo.com."
+	forward-tls-upstream: yes
+	forward-addr: 2001:4860:4860::8844@853#dns.google
+	forward-addr: 2001:4860:4860::8888@853#dns.google
+	forward-addr: 8.8.4.4@853#dns.google
+	forward-addr: 8.8.8.8@853#dns.google
+
+forward-zone:
+	name: "ytimg.com."
+	forward-tls-upstream: yes
+	forward-addr: 2001:4860:4860::8844@853#dns.google
+	forward-addr: 2001:4860:4860::8888@853#dns.google
+	forward-addr: 8.8.4.4@853#dns.google
+	forward-addr: 8.8.8.8@853#dns.google
+
+# forward-zone:
+# 	name: "googleusercontent.com."
+# 	forward-tls-upstream: yes
+# 	forward-addr: 2001:4860:4860::8844@853#dns.google
+# 	forward-addr: 2001:4860:4860::8888@853#dns.google
+# 	forward-addr: 8.8.4.4@853#dns.google
+# 	forward-addr: 8.8.8.8@853#dns.google
+
+forward-zone:
+	name: "gstatic.com."
+	forward-tls-upstream: yes
+	forward-addr: 2001:4860:4860::8844@853#dns.google
+	forward-addr: 2001:4860:4860::8888@853#dns.google
+	forward-addr: 8.8.4.4@853#dns.google
+	forward-addr: 8.8.8.8@853#dns.google
+
+forward-zone:
+	name: "cloudflare.com."
+	forward-addr: 2606:4700:4700::1112@853#security.cloudflare-dns.com
+	forward-addr: 2606:4700:4700::1002@853#security.cloudflare-dns.com
+	forward-addr: 1.1.1.2@853#security.cloudflare-dns.com
+	forward-addr: 1.0.0.2@853#security.cloudflare-dns.com
+
+forward-zone:
+	name: "cloudflare-dns.com."
+	forward-addr: 2606:4700:4700::1112@853#security.cloudflare-dns.com
+	forward-addr: 2606:4700:4700::1002@853#security.cloudflare-dns.com
+	forward-addr: 1.1.1.2@853#security.cloudflare-dns.com
+	forward-addr: 1.0.0.2@853#security.cloudflare-dns.com
+
+forward-zone:
+	name: "one.one."
+	forward-addr: 2606:4700:4700::1112@853#security.cloudflare-dns.com
+	forward-addr: 2606:4700:4700::1002@853#security.cloudflare-dns.com
+	forward-addr: 1.1.1.2@853#security.cloudflare-dns.com
+	forward-addr: 1.0.0.2@853#security.cloudflare-dns.com
+
+# vim: filetype=unbound.conf