Setting up Unbound as an recursive caching DNS server
Unbound has been setup with the motivation of providing:
- fast DNS resolution
- IPv6 support
- easy to configure and maintain
Unbound is part of the Fedora distribution, and for RHEL/CentOS it is part of the EPEL repository.
# yum install unbound
Configure the server for internal use only, bound to a specific address with the configuration file '/etc/unbound/unbound.conf':
server: verbosity: 1 num-threads: 2 interface: 10.20.2.5 interface: 2001:4428:225:2::5 access-control: 0.0.0.0/0 refuse access-control: 10.20.0.0/16 allow access-control: 127.0.0.0/8 allow access-control: ::0/0 refuse access-control: ::1 allow access-control: ::ffff:127.0.0.1 allow access-control: fe80::/10 allow access-control: 2001:4428:225::0/48 allow local-zone: "20.10.in-addr.arpa." transparent stub-zone: name: "lucidsolutions.co.nz" stub-addr: 2001:4428:225:2::3 stub-addr: 10.20.2.3 stub-zone: name: "20.10.in-addr.arpa" stub-addr: 2001:4428:225:2::3 stub-addr: 10.20.2.3 stub-zone: name: "5.2.2.0.8.2.4.4.1.0.0.2.ip6.arpa" stub-addr: 2001:4428:225:2::3 stub-addr: 10.20.2.3
Start the unbound service
# service unbound start
Links
Appendices
CentOS 5 RPM Installation
Dependencies Resolved ========================================================================================= Package Arch Version Repository Size ========================================================================================= Installing: unbound x86_64 1.4.4-1.el5 epel 814 k Installing for dependencies: ldns x86_64 1.6.4-4.el5 epel 447 k libevent x86_64 1.4.13-1 base 112 k libpcap x86_64 14:0.9.4-15.el5 base 109 k unbound-libs x86_64 1.4.4-1.el5 epel 261 k Transaction Summary ========================================================================================= Install 5 Package(s) Upgrade 0 Package(s) Total download size: 1.7 M