Unbound-1.4.20

Introduction à Unbound

Unbound is a validating, recursive, et caching DNS resolver. It is designed as a set of modular components that incorporate modern features, such as enhanced security (DNSSEC) validation, Internet Protocol Version 6 (IPv6), et a client resolver library API as an integral part of the architecture.

Ce paquet est connu pour se construire correctement sur une plateforme LFS-7.4.

Information sur le paquet

  • Téléchargement (HTTP) : http://www.unbound.net/downloads/unbound-1.4.20.tar.gz

  • Somme de contrôle MD5 du téléchargement : 1f2d0b490fd7928a708a326beda21948

  • Taille du téléchargement : 3.5 Mo

  • Estimation de l'espace disque requis : 41 Mo

  • Estimation du temps de construction : 0.6 SBU

Dépendances de Unbound

Requises

expat-2.1.0, ldns-1.6.16 et OpenSSL-1.0.1e

Facultative

libevent-2.0.21, Python-2.7.5 et SWIG (for Python bindings), et Doxygen-1.8.5 (for html documentation)

Notes utilisateur : http://wiki.linuxfromscratch.org/blfs/wiki/unbound

Installation de Unbound

There should be a dedicated user et group to take control of the unbound daemon after it is started. Issue the following commands as the root user:

groupadd -g 88 unbound &&
useradd -c "Unbound DNS resolver" -d /var/lib/unbound -u 88 \
        -g unbound -s /bin/false unbound

Installez Unbound en lançant les commandes suivantes :

./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --disable-static  \
            --with-pidfile=/run/unbound.pid &&
make

If you have Doxygen-1.8.5 package installed et want to build html documentation, run the following command:

make doc

To test the results, issue make check.

Maintenant, en tant qu'utilisateur root :

make install &&
mv -v /usr/sbin/unbound-host /usr/bin

If you built html documentation, install it by running the following commands as the root user:

install -v -m755 -d /usr/share/doc/unbound-1.4.20 &&
install -v -m644 doc/html/* /usr/share/doc/unbound-1.4.20

Explications des commandes

--disable-static: Ce paramètre empêche l'installation des versions statiques des bibliothèques.

--with-libevent : This option enables libevent support allowing use of large outgoing port ranges.

--with-pyunbound : This option enables building of the Python bindings.

Configuring Unbound

Config Files

/etc/unbound/unbound.conf

Configuration Information

In the default configuration, unbound will bind to localhost (127.0.0.1 IP address) et allow recursive queries only from localhost clients. If you want to use unbound for local DNS resolution, run the following command as the root user:

echo "nameserver 127.0.0.1" > /etc/resolv.conf

If you are using a DHCP client for connecting to a network, /etc/resolv.conf gets overwritten with values provided by DHCP server. You can override this, for example in DHCP-4.2.5-P1, by running the following command:

sed -i '/request /i\supersede domain-name-servers 127.0.0.1;' \
       /etc/dhcp/dhclient.conf

For advanced configuration see /etc/unbound/unbound.conf file et the documentation.

Boot Script

If you want the Unbound server to start automatically when the system is booted, install the /etc/rc.d/init.d/unbound init script included in the blfs-bootscripts-20130908 package.

make install-unbound

Contenu

Programmes installés: unbound, unbound-anchor, unbound-checkconf, unbound-control, unbound-control-setup et unbound-host
Bibliothèque installée: libunbound.so
Répertoires installés: /etc/unbound et /usr/share/doc/unbound-1.4.20

Description courte

unbound

is a DNS resolver daemon.

unbound-anchor

performs setup or update of the root trust anchor for DNSSEC validation.

unbound-checkconf

checks unbound configuration file for syntax et other errors.

unbound-control

performs remote administration on the unbound DNS resolver.

unbound-control-setup

generates self-signed certificate et private keys for the server et client.

unbound-host

is a DNS lookup utility similar to host from BIND Utilities-9.9.3-P2.

libunbound.so

provides the Unbound API functions to programs.

Last updated on 2013-07-21 21:06:50 +0200