diff --git a/net/unbound/files/unbound.sh b/net/unbound/files/unbound.sh
index c6e891f49..419248f7e 100644
--- a/net/unbound/files/unbound.sh
+++ b/net/unbound/files/unbound.sh
@@ -990,6 +990,7 @@ unbound_conf() {
     # Adaptive infrastructure info kept for 15 minutes
     echo "  cache-min-ttl: $UB_TTL_MIN"
     echo "  cache-max-ttl: 72000"
+    echo "  cache-max-negative-ttl: $UB_NEG_TTL_MAX"
     echo "  val-bogus-ttl: 300"
     echo "  infra-host-ttl: 900"
     echo
@@ -1364,6 +1365,7 @@ unbound_uci() {
 
   config_get UB_TTL_MIN     "$cfg" ttl_min 120
   config_get UB_TXT_DOMAIN  "$cfg" domain lan
+  config_get UB_NEG_TTL_MAX "$cfg" ttl_neg_max 1000
 
   config_list_foreach "$cfg" domain_insecure bundle_domain_insecure
   config_list_foreach "$cfg" iface_lan bundle_lan_networks
diff --git a/net/unbound/files/unbound.uci b/net/unbound/files/unbound.uci
index 432332e6e..d921e3cd0 100644
--- a/net/unbound/files/unbound.uci
+++ b/net/unbound/files/unbound.uci
@@ -26,6 +26,7 @@ config unbound 'ub_main'
 	option resource 'default'
 	option root_age '9'
 	option ttl_min '120'
+	option ttl_neg_max '1000'
 	option unbound_control '0'
 	option validator '0'
 	option validator_ntp '1'