source: server/other/unbound.xml@ 217df4e

10.0 10.1 11.0 11.1 7.10 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind lazarus nosym perl-modules qt5new trunk upgradedb xry111/intltool xry111/test-20220226
Last change on this file since 217df4e was 217df4e, checked in by Igor Živković <igor@…>, 7 years ago

Update to unbound-1.5.6.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@16591 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 11.6 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY unbound-download-http "http://www.unbound.net/downloads/unbound-&unbound-version;.tar.gz">
8 <!ENTITY unbound-download-ftp " ">
9 <!ENTITY unbound-md5sum "691a34abd8e9257dd65b70f28326c1f0">
10 <!ENTITY unbound-size "4.6 MB">
11 <!ENTITY unbound-buildsize "41 MB">
12 <!ENTITY unbound-time "0.9 SBU (Add 0.2 SBU for tests)">
13]>
14
15<sect1 id="unbound" xreflabel="Unbound-&unbound-version;">
16 <?dbhtml filename="unbound.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>Unbound-&unbound-version;</title>
24
25 <indexterm zone="unbound">
26 <primary sortas="a-Unbound">Unbound</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to Unbound</title>
31
32 <para>
33 <application>Unbound</application> is a validating, recursive, and caching
34 DNS resolver. It is designed as a set of modular components that
35 incorporate modern features, such as enhanced security (DNSSEC)
36 validation, Internet Protocol Version 6 (IPv6), and a client resolver
37 library API as an integral part of the architecture.
38 </para>
39
40 &lfs78_checked;
41
42 <bridgehead renderas="sect3">Package Information</bridgehead>
43 <itemizedlist spacing="compact">
44 <listitem>
45 <para>
46 Download (HTTP): <ulink url="&unbound-download-http;"/>
47 </para>
48 </listitem>
49 <listitem>
50 <para>
51 Download (FTP): <ulink url="&unbound-download-ftp;"/>
52 </para>
53 </listitem>
54 <listitem>
55 <para>
56 Download MD5 sum: &unbound-md5sum;
57 </para>
58 </listitem>
59 <listitem>
60 <para>
61 Download size: &unbound-size;
62 </para>
63 </listitem>
64 <listitem>
65 <para>
66 Estimated disk space required: &unbound-buildsize;
67 </para>
68 </listitem>
69 <listitem>
70 <para>
71 Estimated build time: &unbound-time;
72 </para>
73 </listitem>
74 </itemizedlist>
75
76 <bridgehead renderas="sect3">Unbound Dependencies</bridgehead>
77
78 <bridgehead renderas="sect4">Required</bridgehead>
79 <para role="required">
80 <xref linkend="openssl"/>
81<!-- broken?
82 or <xref linkend="nss"/>
83-->
84 </para>
85
86 <bridgehead renderas="sect4">Optional</bridgehead>
87 <para role="optional">
88 <xref linkend="libevent"/>,
89 <xref linkend="python2"/>,
90 <xref linkend="swig"/> (for Python bindings),
91 <xref linkend="doxygen"/> (for html documentation), and
92 <!--<ulink url="http://sourceforge.net/projects/expat/">expat</ulink>, installed by LFS. -->
93 <ulink url="http://dnstap.info/">dnstap</ulink>
94 </para>
95
96 <para condition="html" role="usernotes">User Notes:
97 <ulink url="&blfs-wiki;/unbound"/>
98 </para>
99 </sect2>
100
101 <sect2 role="installation">
102 <title>Installation of Unbound</title>
103
104 <para>
105 There should be a dedicated user and group to take control of the
106 <command>unbound</command> daemon after it is started. Issue the following
107 commands as the <systemitem class="username">root</systemitem> user:
108 </para>
109
110<screen role="root"><userinput>groupadd -g 88 unbound &amp;&amp;
111useradd -c "Unbound DNS resolver" -d /var/lib/unbound -u 88 \
112 -g unbound -s /bin/false unbound</userinput></screen>
113
114 <para>
115 Install <application>Unbound</application> by running the following
116 commands:
117 </para>
118
119<screen><userinput>./configure --prefix=/usr \
120 --sysconfdir=/etc \
121 --disable-static \
122 --with-pidfile=/run/unbound.pid &amp;&amp;
123make</userinput></screen>
124
125 <para>
126 If you have <xref linkend="doxygen"/> package installed and want to build
127 html documentation, run the following command:
128 </para>
129
130<screen><userinput>make doc</userinput></screen>
131
132 <para>To test the results, issue <command>make check</command>.</para>
133
134 <para>
135 Now, as the <systemitem class="username">root</systemitem> user:
136 </para>
137
138<screen role="root"><userinput>make install &amp;&amp;
139mv -v /usr/sbin/unbound-host /usr/bin/</userinput></screen>
140
141 <para>
142 If you built html documentation, install it by running the following
143 commands as the <systemitem class="username">root</systemitem> user:
144 </para>
145
146<screen role="root"><userinput>install -v -m755 -d /usr/share/doc/unbound-&unbound-version; &amp;&amp;
147install -v -m644 doc/html/* /usr/share/doc/unbound-&unbound-version;</userinput></screen>
148
149 </sect2>
150
151 <sect2 role="commands">
152 <title>Command Explanations</title>
153
154 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
155 href="../../xincludes/static-libraries.xml"/>
156
157 <para>
158 <option>--with-libevent</option>: This option enables libevent support
159 allowing use of large outgoing port ranges.
160 </para>
161
162 <para>
163 <option>--with-pyunbound</option>: This option enables building of the Python
164 bindings.
165 </para>
166
167 </sect2>
168
169 <sect2 role="configuration">
170 <title>Configuring Unbound</title>
171
172 <sect3 id="unbound-config">
173 <title>Config Files</title>
174
175 <para><filename>/etc/unbound/unbound.conf</filename></para>
176
177 <indexterm zone="unbound unbound-config">
178 <primary sortas="e-etc-unbound-unbound.conf">/etc/unbound/unbound.conf</primary>
179 </indexterm>
180
181 </sect3>
182
183 <sect3>
184 <title>Configuration Information</title>
185
186 <para>
187 In the default configuration, <command>unbound</command> will bind to
188 localhost (127.0.0.1 IP address) and allow recursive queries only from
189 localhost clients. If you want to use <command>unbound</command> for
190 local DNS resolution, run the following command as the
191 <systemitem class="username">root</systemitem> user:
192 </para>
193
194<screen role="root"><userinput>echo "nameserver 127.0.0.1" > /etc/resolv.conf</userinput></screen>
195
196 <para>
197 If you are using a DHCP client for connecting to a network,
198 <filename>/etc/resolv.conf</filename> gets overwritten with values
199 provided by DHCP server. You can override this, for example in <xref
200 linkend="dhcp"/>, by running the following command as the <systemitem
201 class="username">root</systemitem> user:
202 </para>
203
204<screen role="root"><userinput>sed -i '/request /i\supersede domain-name-servers 127.0.0.1;' \
205 /etc/dhcp/dhclient.conf</userinput></screen>
206
207 <para>
208 For advanced configuration see
209 <filename>/etc/unbound/unbound.conf</filename> file and the
210 documentation.
211 </para>
212
213 <para>
214 When <application>Unbound</application> is installed, some package
215 builds fail if the file <filename>/etc/unbound/root.key</filename> is
216 not found. This file is created by running the boot script (install
217 instructions below). Alternatively, it can be created by running the
218 following command as the <systemitem class="username">root</systemitem>
219 user:
220 </para>
221
222<screen role="root"><userinput>unbound-anchor</userinput></screen>
223
224 </sect3>
225
226 <sect3 id="unbound-init">
227 <title>Boot Script</title>
228
229 <para>If you want the <application>Unbound</application> server to
230 start automatically when the system is booted, install the
231 <filename>/etc/rc.d/init.d/unbound</filename> init script included
232 in the <xref linkend="bootscripts"/> package.</para>
233
234 <indexterm zone="unbound unbound-init">
235 <primary sortas="f-unbound">unbound</primary>
236 </indexterm>
237
238<screen role="root"><userinput>make install-unbound</userinput></screen>
239
240 </sect3>
241
242 </sect2>
243
244 <sect2 role="content">
245 <title>Contents</title>
246
247 <segmentedlist>
248 <segtitle>Installed Programs</segtitle>
249 <segtitle>Installed Library</segtitle>
250 <segtitle>Installed Directories</segtitle>
251
252 <seglistitem>
253 <seg>
254 unbound, unbound-anchor, unbound-checkconf, unbound-control,
255 unbound-control-setup, and unbound-host
256 </seg>
257 <seg>
258 libunbound.so and (optional)
259 /usr/lib/python&python2-majorver;/site-packages/_unbound.so
260 </seg>
261 <seg>
262 /etc/unbound and /usr/share/doc/unbound-&unbound-version;
263 </seg>
264 </seglistitem>
265 </segmentedlist>
266
267 <variablelist>
268 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
269 <?dbfo list-presentation="list"?>
270 <?dbhtml list-presentation="table"?>
271
272 <varlistentry id="unbound-prog">
273 <term><command>unbound</command></term>
274 <listitem>
275 <para>
276 is a DNS resolver daemon.
277 </para>
278 <indexterm zone="unbound unbound-prog">
279 <primary sortas="b-unbound">unbound</primary>
280 </indexterm>
281 </listitem>
282 </varlistentry>
283
284 <varlistentry id="unbound-anchor">
285 <term><command>unbound-anchor</command></term>
286 <listitem>
287 <para>
288 performs setup or update of the root trust anchor for DNSSEC
289 validation.
290 </para>
291 <indexterm zone="unbound unbound-anchor">
292 <primary sortas="b-unbound-anchor">unbound-anchor</primary>
293 </indexterm>
294 </listitem>
295 </varlistentry>
296
297 <varlistentry id="unbound-checkconf">
298 <term><command>unbound-checkconf</command></term>
299 <listitem>
300 <para>
301 checks <command>unbound</command> configuration file for syntax
302 and other errors.
303 </para>
304 <indexterm zone="unbound unbound-checkconf">
305 <primary sortas="b-unbound-checkconf">unbound-checkconf</primary>
306 </indexterm>
307 </listitem>
308 </varlistentry>
309
310 <varlistentry id="unbound-control">
311 <term><command>unbound-control</command></term>
312 <listitem>
313 <para>
314 performs remote administration on the <command>unbound</command> DNS
315 resolver.
316 </para>
317 <indexterm zone="unbound unbound-control">
318 <primary sortas="b-unbound-control">unbound-control</primary>
319 </indexterm>
320 </listitem>
321 </varlistentry>
322
323 <varlistentry id="unbound-control-setup">
324 <term><command>unbound-control-setup</command></term>
325 <listitem>
326 <para>
327 generates self-signed certificate and private keys for the server
328 and client.
329 </para>
330 <indexterm zone="unbound unbound-control-setup">
331 <primary sortas="b-unbound-control-setup">unbound-control-setup</primary>
332 </indexterm>
333 </listitem>
334 </varlistentry>
335
336 <varlistentry id="unbound-host">
337 <term><command>unbound-host</command></term>
338 <listitem>
339 <para>
340 is a DNS lookup utility similar to <command>host</command> from
341 <xref linkend="bind-utils"/>.
342 </para>
343 <indexterm zone="unbound unbound-host">
344 <primary sortas="b-unbound-host">unbound-host</primary>
345 </indexterm>
346 </listitem>
347 </varlistentry>
348
349 <varlistentry id="libunbound">
350 <term><filename class="libraryfile">libunbound.so</filename></term>
351 <listitem>
352 <para>
353 provides the <application>Unbound</application> API functions to
354 programs.
355 </para>
356 <indexterm zone="unbound libunbound">
357 <primary sortas="c-libunbound">libunbound.so</primary>
358 </indexterm>
359 </listitem>
360 </varlistentry>
361
362 </variablelist>
363
364 </sect2>
365
366</sect1>
Note: See TracBrowser for help on using the repository browser.