source: server/other/unbound.xml@ a1f2d184

10.0 10.1 11.0 11.1 7.10 7.6 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind krejzi/svn lazarus nosym perl-modules qt5new trunk upgradedb xry111/intltool xry111/test-20220226
Last change on this file since a1f2d184 was 56605b9, checked in by Bruce Dubbs <bdubbs@…>, 8 years ago

Remove XML::Parser from perl modules
Archive acl, attr, intltool, expat, gperf
Synchronize libcap with LFS.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@13004 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 11.0 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY unbound-download-http "http://www.unbound.net/downloads/unbound-&unbound-version;.tar.gz">
8 <!ENTITY unbound-download-ftp " ">
9 <!ENTITY unbound-md5sum "59728c74fef8783f8bad1d7451eba97f">
10 <!ENTITY unbound-size "4.6 MB">
11 <!ENTITY unbound-buildsize "42 MB (additional 70 MB for docs and 5 MB for tests)">
12 <!ENTITY unbound-time "0.6 SBU (additional less than 0.1 SBU for docs and 0.2 SBU for tests)">
13]>
14
15<sect1 id="unbound" xreflabel="Unbound-&unbound-version;">
16 <?dbhtml filename="unbound.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy: igor $</othername>
20 <date>$Date: 2013-07-21 21:06:50 +0200 (Sun, 21 Jul 2013) $</date>
21 </sect1info>
22
23 <title>Unbound-&unbound-version;</title>
24
25 <indexterm zone="unbound">
26 <primary sortas="a-Unbound">Unbound</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to Unbound</title>
31
32 <para>
33 <application>Unbound</application> is a validating, recursive, and caching
34 DNS resolver. It is designed as a set of modular components that
35 incorporate modern features, such as enhanced security (DNSSEC)
36 validation, Internet Protocol Version 6 (IPv6), and a client resolver
37 library API as an integral part of the architecture.
38 </para>
39
40 &lfs75_checked;
41
42 <bridgehead renderas="sect3">Package Information</bridgehead>
43 <itemizedlist spacing="compact">
44 <listitem>
45 <para>
46 Download (HTTP): <ulink url="&unbound-download-http;"/>
47 </para>
48 </listitem>
49 <listitem>
50 <para>
51 Download (FTP): <ulink url="&unbound-download-ftp;"/>
52 </para>
53 </listitem>
54 <listitem>
55 <para>
56 Download MD5 sum: &unbound-md5sum;
57 </para>
58 </listitem>
59 <listitem>
60 <para>
61 Download size: &unbound-size;
62 </para>
63 </listitem>
64 <listitem>
65 <para>
66 Estimated disk space required: &unbound-buildsize;
67 </para>
68 </listitem>
69 <listitem>
70 <para>
71 Estimated build time: &unbound-time;
72 </para>
73 </listitem>
74 </itemizedlist>
75
76 <bridgehead renderas="sect3">Unbound Dependencies</bridgehead>
77
78 <bridgehead renderas="sect4">Required</bridgehead>
79 <para role="required">
80 <xref linkend="ldns"/> and
81 <xref linkend="openssl"/>
82<!-- broken?
83 or <xref linkend="nss"/>
84-->
85 </para>
86
87 <bridgehead renderas="sect4">Optional</bridgehead>
88 <para role="optional">
89 <xref linkend="libevent"/>,
90 <xref linkend="python2"/>,
91 <xref linkend="swig"/> (for Python bindings), and
92 <xref linkend="doxygen"/> (for html documentation)
93 </para>
94
95 <para condition="html" role="usernotes">User Notes:
96 <ulink url="&blfs-wiki;/unbound"/>
97 </para>
98 </sect2>
99
100 <sect2 role="installation">
101 <title>Installation of Unbound</title>
102
103 <para>
104 There should be a dedicated user and group to take control of the
105 <command>unbound</command> daemon after it is started. Issue the following
106 commands as the <systemitem class="username">root</systemitem> user:
107 </para>
108
109<screen role="root"><userinput>groupadd -g 88 unbound &amp;&amp;
110useradd -c "Unbound DNS resolver" -d /var/lib/unbound -u 88 \
111 -g unbound -s /bin/false unbound</userinput></screen>
112
113 <para>
114 Install <application>Unbound</application> by running the following
115 commands:
116 </para>
117
118<screen><userinput>./configure --prefix=/usr \
119 --sysconfdir=/etc \
120 --disable-static \
121 --with-pidfile=/run/unbound.pid &amp;&amp;
122make</userinput></screen>
123
124 <para>
125 If you have <xref linkend="doxygen"/> package installed and want to build
126 html documentation, run the following command:
127 </para>
128
129<screen><userinput>make doc</userinput></screen>
130
131 <para>To test the results, issue <command>make check</command>.</para>
132
133 <para>
134 Now, as the <systemitem class="username">root</systemitem> user:
135 </para>
136
137<screen role="root"><userinput>make install &amp;&amp;
138mv -v /usr/sbin/unbound-host /usr/bin/</userinput></screen>
139
140 <para>
141 If you built html documentation, install it by running the following
142 commands as the <systemitem class="username">root</systemitem> user:
143 </para>
144
145<screen role="root"><userinput>install -v -m755 -d /usr/share/doc/unbound-&unbound-version; &amp;&amp;
146install -v -m644 doc/html/* /usr/share/doc/unbound-&unbound-version;</userinput></screen>
147
148 </sect2>
149
150 <sect2 role="commands">
151 <title>Command Explanations</title>
152
153 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
154 href="../../xincludes/static-libraries.xml"/>
155
156 <para>
157 <option>--with-libevent</option>: This option enables libevent support
158 allowing use of large outgoing port ranges.
159 </para>
160
161 <para>
162 <option>--with-pyunbound</option>: This option enables building of the Python
163 bindings.
164 </para>
165
166 </sect2>
167
168 <sect2 role="configuration">
169 <title>Configuring Unbound</title>
170
171 <sect3 id="unbound-config">
172 <title>Config Files</title>
173
174 <para><filename>/etc/unbound/unbound.conf</filename></para>
175
176 <indexterm zone="unbound unbound-config">
177 <primary sortas="e-etc-unbound-unbound.conf">/etc/unbound/unbound.conf</primary>
178 </indexterm>
179
180 </sect3>
181
182 <sect3>
183 <title>Configuration Information</title>
184
185 <para>
186 In the default configuration, <command>unbound</command> will bind to
187 localhost (127.0.0.1 IP address) and allow recursive queries only from
188 localhost clients. If you want to use <command>unbound</command> for
189 local DNS resolution, run the following command as the
190 <systemitem class="username">root</systemitem> user:
191 </para>
192
193<screen role="root"><userinput>echo "nameserver 127.0.0.1" > /etc/resolv.conf</userinput></screen>
194
195 <para>
196 If you are using a DHCP client for connecting to a network,
197 <filename>/etc/resolv.conf</filename> gets overwritten with values
198 provided by DHCP server. You can override this, for example in
199 <xref linkend="dhcp"/>, by running the following command:
200 </para>
201
202<screen role="root"><userinput>sed -i '/request /i\supersede domain-name-servers 127.0.0.1;' \
203 /etc/dhcp/dhclient.conf</userinput></screen>
204
205 <para>
206 For advanced configuration see <filename>/etc/unbound/unbound.conf</filename>
207 file and the documentation.
208 </para>
209
210 </sect3>
211
212 <sect3 id="unbound-init">
213 <title>Boot Script</title>
214
215 <para>If you want the <application>Unbound</application> server to
216 start automatically when the system is booted, install the
217 <filename>/etc/rc.d/init.d/unbound</filename> init script included
218 in the <xref linkend="bootscripts"/> package.</para>
219
220 <indexterm zone="unbound unbound-init">
221 <primary sortas="f-unbound">unbound</primary>
222 </indexterm>
223
224<screen role="root"><userinput>make install-unbound</userinput></screen>
225
226 </sect3>
227
228 </sect2>
229
230 <sect2 role="content">
231 <title>Contents</title>
232
233 <segmentedlist>
234 <segtitle>Installed Programs</segtitle>
235 <segtitle>Installed Library</segtitle>
236 <segtitle>Installed Directories</segtitle>
237
238 <seglistitem>
239 <seg>
240 unbound, unbound-anchor, unbound-checkconf, unbound-control,
241 unbound-control-setup, and unbound-host
242 </seg>
243 <seg>
244 libunbound.so and
245 /usr/lib/python&python2-majorver;/site-packages/_unbound.so
246 </seg>
247 <seg>
248 /etc/unbound and /usr/share/doc/unbound-&unbound-version;
249 </seg>
250 </seglistitem>
251 </segmentedlist>
252
253 <variablelist>
254 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
255 <?dbfo list-presentation="list"?>
256 <?dbhtml list-presentation="table"?>
257
258 <varlistentry id="unbound-prog">
259 <term><command>unbound</command></term>
260 <listitem>
261 <para>
262 is a DNS resolver daemon.
263 </para>
264 <indexterm zone="unbound unbound-prog">
265 <primary sortas="b-unbound">unbound</primary>
266 </indexterm>
267 </listitem>
268 </varlistentry>
269
270 <varlistentry id="unbound-anchor">
271 <term><command>unbound-anchor</command></term>
272 <listitem>
273 <para>
274 performs setup or update of the root trust anchor for DNSSEC
275 validation.
276 </para>
277 <indexterm zone="unbound unbound-anchor">
278 <primary sortas="b-unbound-anchor">unbound-anchor</primary>
279 </indexterm>
280 </listitem>
281 </varlistentry>
282
283 <varlistentry id="unbound-checkconf">
284 <term><command>unbound-checkconf</command></term>
285 <listitem>
286 <para>
287 checks <command>unbound</command> configuration file for syntax
288 and other errors.
289 </para>
290 <indexterm zone="unbound unbound-checkconf">
291 <primary sortas="b-unbound-checkconf">unbound-checkconf</primary>
292 </indexterm>
293 </listitem>
294 </varlistentry>
295
296 <varlistentry id="unbound-control">
297 <term><command>unbound-control</command></term>
298 <listitem>
299 <para>
300 performs remote administration on the <command>unbound</command> DNS
301 resolver.
302 </para>
303 <indexterm zone="unbound unbound-control">
304 <primary sortas="b-unbound-control">unbound-control</primary>
305 </indexterm>
306 </listitem>
307 </varlistentry>
308
309 <varlistentry id="unbound-control-setup">
310 <term><command>unbound-control-setup</command></term>
311 <listitem>
312 <para>
313 generates self-signed certificate and private keys for the server
314 and client.
315 </para>
316 <indexterm zone="unbound unbound-control-setup">
317 <primary sortas="b-unbound-control-setup">unbound-control-setup</primary>
318 </indexterm>
319 </listitem>
320 </varlistentry>
321
322 <varlistentry id="unbound-host">
323 <term><command>unbound-host</command></term>
324 <listitem>
325 <para>
326 is a DNS lookup utility similar to <command>host</command> from
327 <xref linkend="bind-utils"/>.
328 </para>
329 <indexterm zone="unbound unbound-host">
330 <primary sortas="b-unbound-host">unbound-host</primary>
331 </indexterm>
332 </listitem>
333 </varlistentry>
334
335 <varlistentry id="libunbound">
336 <term><filename class="libraryfile">libunbound.so</filename></term>
337 <listitem>
338 <para>
339 provides the <application>Unbound</application> API functions to
340 programs.
341 </para>
342 <indexterm zone="unbound libunbound">
343 <primary sortas="c-libunbound">libunbound.so</primary>
344 </indexterm>
345 </listitem>
346 </varlistentry>
347
348 </variablelist>
349
350 </sect2>
351
352</sect1>
Note: See TracBrowser for help on using the repository browser.