Unbound has a 'serve-expired' option: https://nlnetlabs.nl/documentation/unbound/unbound.conf/#ser...