{"id":959,"date":"2018-09-20T11:24:19","date_gmt":"2018-09-20T03:24:19","guid":{"rendered":"http:\/\/www.max-shu.com\/blog\/?p=959"},"modified":"2018-09-20T11:24:19","modified_gmt":"2018-09-20T03:24:19","slug":"linux%e4%b8%8b%e7%9a%84unbound-dns%e6%9c%8d%e5%8a%a1%e5%99%a8%e8%ae%be%e7%bd%ae%e8%af%a6%e8%a7%a3","status":"publish","type":"post","link":"http:\/\/www.max-shu.com\/blog\/?p=959","title":{"rendered":"linux\u4e0b\u7684unbound DNS\u670d\u52a1\u5668\u8bbe\u7f6e\u8be6\u89e3"},"content":{"rendered":"<h2><strong>\u5728CentOS7.x\u4e0b\u5b89\u88c5unbound 1.7.x\uff1a<\/strong><\/h2>\n<div># yum install -y epel-release<\/div>\n<div># rpm -Uvh <a href=\"http:\/\/rnd.rajven.net\/centos\/rajven-release-7-1.cnt7.noarch.rpm\">http:\/\/rnd.rajven.net\/centos\/rajven-release-7-1.cnt7.noarch.rpm<\/a>\u00a0 \u00a0 #\u8fd9\u91cc\u624d\u6709\u6bd4\u8f83\u65b0\u7684unbound\u7248\u672c\u3002<\/div>\n<div># wget <a href=\"ftp:\/\/ftp.pbone.net\/mirror\/ftp.scientificlinux.org\/linux\/scientific\/7.3\/x86_64\/updates\/security\/openssl-1.0.2k-8.el7.x86_64.rpm\">ftp:\/\/ftp.pbone.net\/mirror\/ftp.scientificlinux.org\/linux\/scientific\/7.3\/x86_64\/updates\/security\/openssl-1.0.2k-8.el7.x86_64.rpm<\/a><\/div>\n<div># wget <a href=\"ftp:\/\/ftp.pbone.net\/mirror\/ftp.scientificlinux.org\/linux\/scientific\/7.0\/x86_64\/updates\/security\/openssl-libs-1.0.2k-8.el7.x86_64.rpm\">ftp:\/\/ftp.pbone.net\/mirror\/ftp.scientificlinux.org\/linux\/scientific\/7.0\/x86_64\/updates\/security\/openssl-libs-1.0.2k-8.el7.x86_64.rpm<\/a><\/div>\n<div>#\u00a0yum localinstall openssl-1.0.2k-8.el7.x86_64.rpm openssl-libs-1.0.2k-8.el7.x86_64.rpm<\/div>\n<div># yum install unbound<\/div>\n<div><\/div>\n<div><\/div>\n<h2><strong>\u914d\u7f6e\uff1a<\/strong><\/h2>\n<div># vi \/etc\/unbound\/unbound.conf<\/div>\n<div>server:<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0verbosity: 1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u8f93\u51fa\u8be6\u7ec6\u7a0b\u5ea6\uff0c1\u4e3a\u7f3a\u7701<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0num-threads: 2\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u7ebf\u7a0b\u6570\uff0c\u53ef\u8bbe\u7f6e\u4e3aCPU\u6570<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0interface: 0.0.0.0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u76d1\u542c\u5730\u5740\uff08\u4e00\u822c\u5199\u672c\u673a\u5185\u7f51ip\uff0c\u6216\u80050.0.0.0\u8868\u793a\u5168\u90e8\u63a5\u53e3\uff09<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0interface: ::0<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0port: 53\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u7aef\u53e3<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0so-reuseport: yes\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u4e3a\u6bcf\u4e2a\u7ebf\u7a0b\u7684\u4f20\u5165\u67e5\u8be2\u6253\u5f00\u4e13\u7528\u4fa6\u542c\u5957\u63a5\u5b57\u3002\u53ef\u4ee5\u66f4\u5747\u5300\u5730\u5c06\u4f20\u5165\u67e5\u8be2\u5206\u5e03\u5230\u7ebf\u7a0b<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0cache-min-ttl: 93600\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0#\u6700\u5c0f\u7f13\u5b58\u65f6\u95f4\uff08\u4e0d\u7ba1\u6743\u5a01dns\u670d\u52a1\u5668\u4e0a\u914d\u7f6e\u7684ttl\u662f\u591a\u5c11\uff0c\u8fd9\u91cc\u8fd4\u56de\u7ed9\u5ba2\u6237\u7aef\u53ca\u81ea\u8eab\u4fdd\u5b58\u7684\u7f13\u5b58\u65f6\u95f4\u90fd\u4e0d\u4f1a\u6bd4\u8fd9\u4e2a\u8bbe\u7f6e\u503c\u5c0f\uff09\uff0c26\u5c0f\u65f6\uff0c\u56e0\u4e3abind\uff08named\uff09\u6ca1\u6709\u8fd9\u4e2a\u8bbe\u7f6e\uff0c\u6240\u4ee5named\u4e0d\u90a3\u4e48\u597d\u7528\uff0c\u5efa\u8bae\u7528unbound\u3002<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0cache-max-ttl: 604800\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u6700\u5927\u7f13\u5b58\u65f6\u95f4\uff0c7\u5929<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0cache-max-negative-ttl: 3600\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u5426\u5b9a\u5e94\u7b54\u7f13\u5b58\u65f6\u95f4\uff0c1\u5c0f\u65f6<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0outgoing-range: 20000\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u7aef\u53e3\u6570\u91cf<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0access-control: 0.0.0.0\/0 allow\u00a0\u00a0\u00a0\u00a0#\u8bbf\u95eeipv4\u7f51\u6bb5\u8bbf\u95ee<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0access-control: ::0\/0 allow\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u5141\u8bb8ipv6\u7f51\u6bb5\u8bbf\u95ee<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0prefetch: yes\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u6d88\u606f\u7f13\u5b58\u5143\u7d20\u5728\u5b83\u4eec\u5230\u671f\u4e4b\u524d\u88ab\u9884\u53d6\u4ee5\u4fdd\u6301\u7f13\u5b58\u662f\u6700\u65b0\u7684<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0module-config: &#8220;iterator&#8221;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u7981\u7528DNSSEC\u68c0\u67e5\uff0c\u5426\u5219\u4f5c\u4e3a\u8f6c\u53d1\u65f6\u53ef\u80fd\u4f1a\u6821\u9a8c\u4e0d\u8fc7\uff0c\u62a5\u9519\u7c7b\u4f3c\uff1ainfo: validation failure beacons.gvt2.com. A IN\u3002<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0do-ip4: yes\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u542f\u7528IP4<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0do-ip6: yes<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0do-udp: yes<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0do-tcp: yes<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0tcp-upstream: no\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u4e0a\u884c\u4e0d\u7528tcp\u65b9\u5f0f<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0so-rcvbuf: 8m\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#SO_RCVBUF\u5957\u63a5\u53e3\u63a5\u6536\u7f13\u5b58\u5927\u5c0f<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0so-sndbuf: 8m\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#SO_SNDBUF\u5957\u63a5\u53e3\u53d1\u9001\u7f13\u5b58\u5927\u5c0f<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0msg-cache-size: 1G\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u6d88\u606f\u7f13\u5b58\u7684\u5b57\u8282\u6570\u3002 \u9ed8\u8ba4\u503c\u4e3a4 MB\u3002<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0rrset-cache-size: 1G\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#RRset\u7f13\u5b58\u7684\u5b57\u8282\u6570\u3002<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0outgoing-num-tcp: 256\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u4e3a\u6bcf\u4e2a\u7ebf\u7a0b\u5206\u914d\u7684\u4f20\u51faTCP\u7f13\u51b2\u533a\u6570<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0incoming-num-tcp: 1024\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u4e3a\u6bcf\u4e2a\u7ebf\u7a0b\u5206\u914d\u7684\u4f20\u5165TCP\u7f13\u51b2\u533a\u6570<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0hide-identity: yes\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u4e0d\u8fd4\u56de\u5bf9 id.server \u548c hostname.bind \u7684\u67e5\u8be2\u3002<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0hide-version: yes\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u4e0d\u8fd4\u56de\u5bf9 version.server \u548c version.bind \u7684\u67e5\u8be2\u3002<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0unwanted-reply-threshold: 10000000 #\u9488\u5bf9\u5404\u79cd\u7f51\u7edc\u4e0d\u670d\uff0c\u6570\u503c\u4e3a\u5efa\u8bae\u503c\u3002<\/div>\n<div>#\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0include: &#8220;zone.conf&#8221;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#zone.conf\u6587\u4ef6\u5185\u5bb9\u4e3a\u89e3\u6790\u5185\u5bb9\uff0c\u5982local-data: &#8220;m.baidu.com A 192.168.10.1&#8243;\uff0c\u4e5f\u53ef\u4ee5\u4f7f\u7528\u4e0b\u9762\u6ce8\u91ca\u7684\u65b9\u5f0f\u914d\u7f6e\u89e3\u6790<\/div>\n<div>#\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0local-data: &#8220;m.baidu.com 600 A 192.168.10.1&#8221;\u00a0\u00a0#\u5176\u4e2d600\u4e3a\u89e3\u6790\u7f13\u5b58\u65f6\u95f4<\/div>\n<div># python:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u53ef\u4ee5\u6267\u884cpython\u811a\u672c<\/div>\n<div>remote-control:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u8fd9\u4e2a\u533a\u95f4\u4e3aunbound\u63a7\u5236\u8bbe\u7f6e\u3002\u914d\u7f6e\u5982\u4e0b\u5185\u5bb9\u53ef\u4ee5\u63a7\u5236unbound\u670d\u52a1\uff0c\u5229\u7528unbound-control\u547d\u4ee4\u5bf9\u8be5\u670d\u52a1\u6267\u884c\u5f00\u542f\u3001\u5173\u95ed\u3001\u91cd\u542f\u7b49\u64cd\u4f5c\u3002<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0control-enable: yes<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0control-use-cert: no<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0control-interface: 127.0.0.1<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0control-port: 8953<\/div>\n<div>forward-zone:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u8fd9\u4e2a\u533a\u95f4\u4e3a\u8f6c\u53d1\u8bbe\u7f6e<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0name: &#8220;.&#8221;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u540d\u79f0<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-first: yes\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u8bbe\u4e3ano\u662f\u65e0\u6cd5\u5411\u6839\u57df\u540d\u670d\u52a1\u5668TCP\u89e3\u6790\u7684\u624d\u4f1a\u7528\u8fd9\u4e9b\u6765\u89e3\u6790\uff0c\u8bbe\u4e3ayes\u5c31\u4e0d\u5411\u6839\u57df\u540d\u670d\u52a1\u5668\u8bf7\u6c42\uff0c\u76f4\u63a5\u7528\u8fd9\u4e9b\u5217\u8868\u91cc\u7684\u3002<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-addr: 202.96.128.86@53\u00a0\u00a0\u00a0\u00a0\u00a0#\u5916\u90e8DNS\u670d\u52a1\u5668\uff0c\u683c\u5f0f: IP@PORT<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-addr: 202.96.134.133<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-addr: 202.96.134.33<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-addr: 202.96.128.166<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-addr: 114.114.114.114<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-addr: 114.114.115.115<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-addr: 182.254.116.116<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-addr: 119.29.29.29<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-addr: 180.76.76.76<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-addr: 223.5.5.5<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-addr: 223.6.6.6<\/div>\n<div><\/div>\n<div><\/div>\n<h2><strong>\u542f\u505c\uff1a<\/strong><\/h2>\n<div># systemctl enable unbound<\/div>\n<div># systemctl\u00a0restart unbound<\/div>\n<div>\u8bb0\u5f97\u91cd\u542f\u6216\u91cd\u914d\u7f6e\u65f6\u5148\u4fdd\u5b58cache\uff0c\u542f\u52a8\u540e\u6216\u91cd\u914d\u7f6e\u540e\u518d\u5bfc\u5165cache\uff1a<\/div>\n<div># unbound-control\u00a0dump_cache &gt; .\/unbound_dump_cache-20180919.tmp<\/div>\n<div># unbound-control reload<\/div>\n<div># unbound-control load_cache &lt; .\/unbound_dump_cache-20180919.tmp<\/div>\n<div><\/div>\n<div><\/div>\n<h2><strong>\u7ba1\u7406\uff1a<\/strong><\/h2>\n<div>#\u00a0unbound-control\u00a0status<\/div>\n<div>#\u00a0unbound-control\u00a0stats_noreset<\/div>\n<div>#\u00a0unbound-control\u00a0dump_cache<\/div>\n<div># unbound-control dump_infra<\/div>\n<div>#\u00a0unbound-control flush &#8220;aaa.com&#8221;<\/div>\n<div># unbound-control -h<\/div>\n<div>Usage:\u00a0\u00a0unbound-control [options] command<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Remote control utility for unbound server.<\/div>\n<div>Options:<\/div>\n<div>\u00a0\u00a0-c file\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0config file, default is \/etc\/unbound\/unbound.conf<\/div>\n<div>\u00a0\u00a0-s ip[@port]\u00a0\u00a0server address, if omitted config is used.<\/div>\n<div>\u00a0\u00a0-q\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0quiet (don&#8217;t print anything if it works ok).<\/div>\n<div>\u00a0\u00a0-h\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0show this usage help.<\/div>\n<div>Commands:<\/div>\n<div>\u00a0\u00a0start\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0start server; runs unbound(8)<\/div>\n<div>\u00a0\u00a0stop\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0stops the server<\/div>\n<div>\u00a0\u00a0reload\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0reloads the server<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0(this flushes data, stats, requestlist)<\/div>\n<div>\u00a0\u00a0stats\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0print statistics<\/div>\n<div>\u00a0\u00a0stats_noreset\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0peek at statistics<\/div>\n<div>\u00a0\u00a0stats_shm\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0print statistics using shm<\/div>\n<div>\u00a0\u00a0status\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0display status of server<\/div>\n<div>\u00a0\u00a0verbosity &lt;number&gt;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0change logging detail<\/div>\n<div>\u00a0\u00a0log_reopen\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0close and open the logfile<\/div>\n<div>\u00a0\u00a0local_zone &lt;name&gt; &lt;type&gt;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0add new local zone<\/div>\n<div>\u00a0\u00a0local_zone_remove &lt;name&gt;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0remove local zone and its contents<\/div>\n<div>\u00a0\u00a0local_data &lt;RR data&#8230;&gt;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0add local data, for example<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0local_data www.example.com A 192.0.2.1<\/div>\n<div>\u00a0\u00a0local_data_remove &lt;name&gt;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0remove local RR data from name<\/div>\n<div>\u00a0\u00a0local_zones, local_zones_remove, local_datas, local_datas_remove<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0same, but read list from stdin<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0(one entry per line).<\/div>\n<div>\u00a0\u00a0dump_cache\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0print cache to stdout<\/div>\n<div>\u00a0\u00a0load_cache\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0load cache from stdin<\/div>\n<div>\u00a0\u00a0lookup &lt;name&gt;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0print nameservers for name<\/div>\n<div>\u00a0\u00a0flush &lt;name&gt;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0flushes common types for name from cache<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0types:\u00a0\u00a0A, AAAA, MX, PTR, NS,<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0SOA, CNAME, DNAME, SRV, NAPTR<\/div>\n<div>\u00a0\u00a0flush_type &lt;name&gt; &lt;type&gt;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0flush name, type from cache<\/div>\n<div>\u00a0\u00a0flush_zone &lt;name&gt;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0flush everything at or under name<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0from rr and dnssec caches<\/div>\n<div>\u00a0\u00a0flush_bogus\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0flush all bogus data<\/div>\n<div>\u00a0\u00a0flush_negative\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0flush all negative data<\/div>\n<div>\u00a0\u00a0flush_stats\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0flush statistics, make zero<\/div>\n<div>\u00a0\u00a0flush_requestlist\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0drop queries that are worked on<\/div>\n<div>\u00a0\u00a0dump_requestlist\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0show what is worked on by first thread<\/div>\n<div>\u00a0\u00a0flush_infra [all | ip]\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0remove ping, edns for one IP or all<\/div>\n<div>\u00a0\u00a0dump_infra\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0show ping and edns entries<\/div>\n<div>\u00a0\u00a0set_option opt: val\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0set option to value, no reload<\/div>\n<div>\u00a0\u00a0get_option opt\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0get option value<\/div>\n<div>\u00a0\u00a0list_stubs\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0list stub-zones and root hints in use<\/div>\n<div>\u00a0\u00a0list_forwards\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0list forward-zones in use<\/div>\n<div>\u00a0\u00a0list_insecure\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0list domain-insecure zones<\/div>\n<div>\u00a0\u00a0list_local_zones\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0list local-zones in use<\/div>\n<div>\u00a0\u00a0list_local_data\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0list local-data RRs in use<\/div>\n<div>\u00a0\u00a0insecure_add zone\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0add domain-insecure zone<\/div>\n<div>\u00a0\u00a0insecure_remove zone\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0remove domain-insecure zone<\/div>\n<div>\u00a0\u00a0forward_add [+i] zone addr..\u00a0\u00a0add forward-zone with servers<\/div>\n<div>\u00a0\u00a0forward_remove [+i] zone\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0remove forward zone<\/div>\n<div>\u00a0\u00a0stub_add [+ip] zone addr..\u00a0\u00a0\u00a0\u00a0add stub-zone with servers<\/div>\n<div>\u00a0\u00a0stub_remove [+i] zone\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0remove stub zone<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0+i\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0also do dnssec insecure point<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0+p\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0set stub to use priming<\/div>\n<div>\u00a0\u00a0forward [off | addr &#8230;]\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0without arg show forward setup<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0or off to turn off root forwarding<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0or give list of ip addresses<\/div>\n<div>\u00a0\u00a0ratelimit_list [+a]\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0list ratelimited domains<\/div>\n<div>\u00a0\u00a0ip_ratelimit_list [+a]\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0list ratelimited ip addresses<\/div>\n<div>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0+a\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0list all, also not ratelimited<\/div>\n<div>\u00a0\u00a0list_auth_zones\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0list auth zones<\/div>\n<div>\u00a0\u00a0view_list_local_zones view\u00a0\u00a0\u00a0\u00a0list local-zones in view<\/div>\n<div>\u00a0\u00a0view_list_local_data\u00a0\u00a0view\u00a0\u00a0\u00a0\u00a0list local-data RRs in view<\/div>\n<div>\u00a0\u00a0view_local_zone view name type\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0add local-zone in view<\/div>\n<div>\u00a0\u00a0view_local_zone_remove view name\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0remove local-zone in view<\/div>\n<div>\u00a0\u00a0view_local_data view RR&#8230;\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0add local-data in view<\/div>\n<div>\u00a0\u00a0view_local_data_remove view name\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0remove local-data in view<\/div>\n<div><\/div>\n<div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u5728CentOS7.x\u4e0b\u5b89\u88c5unbound 1.7.x\uff1a # yum install -y epel-relea &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15],"tags":[707,706,708,705],"class_list":["post-959","post","type-post","status-publish","format-standard","hentry","category-linuxandroid","tag-bind","tag-dns","tag-named","tag-unbound"],"views":10231,"_links":{"self":[{"href":"http:\/\/www.max-shu.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/959","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.max-shu.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.max-shu.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.max-shu.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.max-shu.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=959"}],"version-history":[{"count":1,"href":"http:\/\/www.max-shu.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/959\/revisions"}],"predecessor-version":[{"id":960,"href":"http:\/\/www.max-shu.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/959\/revisions\/960"}],"wp:attachment":[{"href":"http:\/\/www.max-shu.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=959"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.max-shu.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=959"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.max-shu.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=959"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}