diff --git a/unbound.conf b/unbound.conf
index a91ec99..52a48fc 100644
--- a/unbound.conf
+++ b/unbound.conf
@@ -322,6 +322,13 @@ server:
 	# if yes, perform key lookups adjacent to normal lookups.
 	prefetch-key: yes
 
+        # if yes, Unbound rotates RRSet order in response.
+        # rrset-roundrobin: no
+
+        # if yes, Unbound doesn't insert authority/additional sections
+        # into response messages when those sections are not required.
+        # minimal-responses: no
+
 	# module configuration of the server. A string with identifiers
 	# separated by spaces. "iterator" or "validator iterator"
 	# module-config: "validator iterator"
@@ -523,10 +530,12 @@ remote-control:
 # 'example.org' go to the given list of servers. These servers have to handle
 # recursion to other nameservers. List zero or more nameservers by hostname
 # or by ipaddress. Use an entry with name "." to forward all queries.
+# If you enable forward-first, it attempts without the forward if it fails.
 # forward-zone:
 # 	name: "example.com"
 # 	forward-addr: 192.0.2.68
 # 	forward-addr: 192.0.2.73@5355  # forward to port 5355.
+# 	forward-first: no
 # forward-zone:
 # 	name: "example.org"
 # 	forward-host: fwd.example.com