anchor.diff:    # whitespace is not necessary, but looks cleaner.
   
     # verbosity number, 0 is least verbose. 1 is default.
  -  verbosity: 1
  +  verbosity: 2
   
     # print statistics to the log (for every thread) every N seconds.
     # Set to "" or 0 to disable. Default is disabled.
  
positive.code: 
    # number of ports to allocate per thread, determines the size of the
    # port range that can be open simultaneously. 
    outgoing-range: 32768
  
    # permit unbound to use this port number or port range for
    # making outgoing queries, using an outgoing interface.
  
negative.code:   # Default on, which insists on dnssec data for trust-anchored zones.
    # harden-dnssec-stripped: yes
  
    # Harden the referral path by performing additional queries for
    # infrastructure data.  Validates the replies (if possible).
    # Default off, because the lookups burden the server.  Experimental 
    # implementation of draft-wijngaards-dnsext-resolver-side-mitigation.
  