diff --git a/pkgs/tools/networking/unbound/default.nix b/pkgs/tools/networking/unbound/default.nix
new file mode 100644
index 00000000000..f92665dd8c0
--- /dev/null
+++ b/pkgs/tools/networking/unbound/default.nix
@@ -0,0 +1,20 @@
+{ stdenv, fetchurl, openssl }:
+
+stdenv.mkDerivation rec {
+  name = "unbound-1.4.1";
+
+  src = fetchurl {
+    url = "http://unbound.net/downloads/${name}.tar.gz";
+    sha256 = "2573db422d7a856a3783b96698f2d5ca18a849d0bd6f0e36eb37a4f0a65b60e2";
+  };
+ 
+  buildInputs = [openssl];
+
+  configureFlags = "--with-ssl=${openssl}";
+
+  meta = {
+    description = "Unbound, a validating, recursive, and caching DNS resolver.";
+    license = "BSD";
+    homepage = http://www.gnu.org/software/wget/;
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 23db6b294d8..cb6ada9a0b9 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -1675,6 +1675,10 @@ let
     flex = flex2534;
   };
 
+  unbound = import ../tools/networking/unbound {
+    inherit fetchurl stdenv openssl;
+  };
+
   units = import ../tools/misc/units {
     inherit fetchurl stdenv;
   };