@pfpv
The recent kea DHCP server supported fully automated DNS hist name integration into local pfSense DNS system, 'unbound'.
This is a new solution to a very old problem.
New solutions are often most not perfect the first time, so ... why do you want to deal with the issues known to 2.8.0 when the way better 2.8.1 is available (since a couple of months now) ? My advise : easy : get the latest version.
I'm using myself the 2.8.1 equivalent, 25.07.1, and it works fine for me.
"unbound" is by nature a resolver, but you can tell it to 'forward'. That will be like doing your daily shoppings with a Ferrari, but why not, you decide ^^ And I get it, you have another 'DNS' device, the pi-hole.
You can also consider disabling unbound, and activate the original 'ancient' forwarder that came with pfSense, also called dnsmasq :
[image: 1763105897314-2eea2f88-46e7-4f43-abd6-27888741d5fd-image.png]
and forward this forwader to your LAN pi-hilo.
This forwarder can't do 'DHCP host name integration' though ...