Lede 上设置 Ubound DOH 的疑问

lean 的源码编译的固件，加入了 Ubound 和$$R，Unbound 本地监听 5335，$$R 里和 dnsmasq 设置的 DNS 转发是 127.0.0.1#5335，但是一开启 tcp-upstream 和 ssl-upstream 就不能上网，是我的使用姿势不对吗？ Ubound 配置文件如下：

```
server:
port: 5335
access-control: 10.0.0.0/8 allow
access-control: 127.0.0.0/8 allow
access-control: 192.168.0.0/16 allow
cache-max-ttl: 14400
cache-min-ttl: 900
do-tcp: yes
do-udp: yes
hide-identity: yes
hide-version: yes
interface: 0.0.0.0
minimal-responses: yes
prefetch: yes
qname-minimisation: yes
rrset-roundrobin: yes
ssl-upstream: no
tcp-upstream: yes
use-caps-for-id: yes
verbosity: 1
do-ip4: yes
do-ip6: yes
outgoing-port-permit: "10240-65335"
outgoing-range: 60
num-queries-per-thread: 30
msg-buffer-size: 8192
infra-cache-numhosts: 200
msg-cache-size: 100k
rrset-cache-size: 100k
key-cache-size: 100k
neg-cache-size: 10k
target-fetch-policy: "2 1 0 0 0 0"
harden-large-queries: yes
harden-short-bufsize: yes
include: "/etc/unbound/accelerated-domains.china.unbound.conf"
include: "/etc/unbound/apple.china.unbound.conf"
include: "/etc/unbound/google.china.unbound.conf"
forward-zone:
name: "."
forward-addr: 1.1.1.1@853
forward-addr: 8.8.8.8@853
forward-addr: 114.114.114.114
```