Better to use approproate tool for such cases.
To protect somebody's from big and evil internet usually uses http(s)
proxies. Not DNS recursors. Its more complex task, but much efficient.
08.02.2020 18:36, dy1977--- via Unbound-users пишет:
> Hello,
>
> we are using unbound an Internet filter, wh
/etc/unbound directory should have write permissions for unbound.
11.02.2020 20:07, Ramin Malekgahsemi via Unbound-users пишет:
> Hi Dear Friend I want enable DNS sec Validation For Recursive mode Unbound
>
> I use This link For
> https://plone.lucidsolutions.co.nz/linux/dns/enable-dnssec-for-un
Built without issues on Solaris and running.
Seems ok.
Good work!
13.02.2020 18:41, Wouter Wijngaards via Unbound-users пишет:
> Hi,
>
> Unbound 1.10.0rc1 pre-release is available:
> https://nlnetlabs.nl/downloads/unbound/unbound-1.10.0rc1.tar.gz
> sha256 cee1761b7801ae1f6e37f8a81f0646b93ad62bad
Same :-)
11.04.2020 15:40, A. Schulze via Unbound-users пишет:
>
> Am 09.04.20 um 13:27 schrieb George Thessalonikefs via Unbound-users:
>> We recently got a feature request
>> (https://github.com/NLnetLabs/unbound/issues/215) to change the default
>> value of 'rrset-roundrobin' from no to yes.
>
Seems no:
# dig yahoodns.net
; <<>> DiG 9.11.8 <<>> yahoodns.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65372
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; QU
Built and runs on my platform.
All ok.
Thank you!
19.05.2020 14:03, Wouter Wijngaards via Unbound-users пишет:
> Hi,
>
> Unbound 1.10.1 is available:
> https://nlnetlabs.nl/downloads/unbound/unbound-1.10.1.tar.gz
> sha256 b73677c21a71cf92f15cc8cfe76a3d875e40f65b6150081c39620b286582d536
> pgp htt
In contrib directory in package has some useful scripts. )
As an idea (as I'll can do such task) Dump cache by cron on storage
periodically, and load cache contents on event. For example.
09.06.2020 01:52, A. Schulze via Unbound-users пишет:
>
> Am 08.06.20 um 19:28 schrieb Mike Brust vi
May be, upgrade Unbound first? Current version is 1.10.1.
03.07.2020 13:49, Jan de Haan via Unbound-users пишет:
>
> Hi All,
>
>
> my unbound v1.6.0-3+deb9u2 servers were hit for short periods of time
> by traffic that generated a lot of log messages that look like
>
> unbound: [879:2] notice:
Built and runs ok (Solaris 10u13).
20.07.2020 18:04, Wouter Wijngaards via Unbound-users пишет:
> Hi,
>
> Unbound 1.11.0rc1 pre-release is available:
> https://nlnetlabs.nl/downloads/unbound/unbound-1.11.0rc1.tar.gz
> sha256 d7fbea076c7f5d37d7a6a8203c2eefb31d2207039f53f3fb98b25e1216152d79
> pgp ht
Can't build with errors:
Undefined first referenced
symbol in file
SHA512Update /usr/local/lib/libcrypto.a(getentropy_solaris.o) (symbol
belongs to implicit dependency /lib/amd64/libmd.so.1)
SHA512Final /usr/local/lib/libcrypto.a(getentropy_sol
Same shame with OpenSSL 1.0.2u:
Undefined first referenced
symbol in file
DSA_set0_pqg .libs/keyraw.o
DSA_set0_key .libs/keyraw.o
RSA_set0_key .libs/keyraw.o
ld: fatal: symbol r
Ooops, forgot about my own workaround. :-)
(on Solaris) To avoid with LibreSSL require to add -lmd to LDFLAGS:
./configure --prefix=/usr/local
--with-conf-file=/usr/local/etc/unbound/unbound.conf
--with-username=unbound --with-ssl=/usr/local --with-libevent=/usr/local
--with-libexpat=/opt/csw
Moreover, on Solaris Unbound will not work without this setting. 😉
22.10.2020 19:46, Ralph Dolmans via Unbound-users пишет:
On
Solaris ndd -set /dev/udp udp_max_buf 8388608.
OpenPGP_0x4BEE94A33E3743A7.asc
Description: application/pgp-keys
OpenPGP_signature
Description: OpenPGP digital signat
H.
Built successfully, but not work.
dig ya.ru
; <<>> DiG 9.11.13 <<>> ya.ru
;; global options: +cmd
;; connection timed out; no servers could be reached
With previous configuration.
24.11.2020 20:28, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.13.0rc1 pre-release is avai
Confirm. It crashes repeatedly with stacktrace:
(dbx) where
current thread: t@2
=>[1] reuse_cmp(0xfd7ffc5fed08, 0x0, 0x28, 0x0, 0xfd7ffe6f5000,
0x37961626504), at 0x4eb85e
[2] rbtree_find_less_equal(), at 0x4dc2e9
[3] 0x4eba25(), at 0x4eba25
[4] pending_tcp_query(), at 0x50b69
Debug build produced following stacktrace:
t@3 (l@3) terminated by signal SEGV (no mapping at the fault address)
Current function is reuse_cmp_addrportssl
144 r = sockaddr_cmp(&r1->addr, r1->addrlen, &r2->addr,
r2->addrlen);
(dbx) where
current thread: t@3
=>[1] reuse_cmp_addrportss
No. Still crashes.
24.11.2020 22:07, Wouter Wijngaards via Unbound-users пишет:
Hi Tuomo,
This should be fixed in commit
https://github.com/NLnetLabs/unbound/commit/4e8a1ede3b41e9b4a93cb664fbc3f48b1521f62b
Best regards, Wouter
On 24/11/2020 16:50, Tuomo Soini wrote:
On Tue, 24 Nov 2020 15:28
Different stacktrace:
(dbx) where
current thread: t@7
=>[1] evmap_io_del_(0xfd7ff9e00400, 0x3c, 0xfd7f9dd81800,
0xfd7f9ed3a680, 0x9, 0xfd7ffe2dfe80), at 0x5a768f
[2] event_del_nolock_(), at 0x59f854
[3] event_del(), at 0x5a0af4
[4] comm_point_listen_for_rw(), at 0x5503fb
a verbosity trace, or some
way to reproduce it.
Best regards, Wouter
On 24/11/2020 17:24, Yuri via Unbound-users wrote:
Different stacktrace:
(dbx) where
current thread: t@7
=>[1] evmap_io_del_(0xfd7ff9e00400, 0x3c, 0xfd7f9dd81800,
0xfd7f9ed3a680, 0x9, 0xfd7ffe2dfe80),
Well at least, it running.
No cores yet. 😉
25.11.2020 19:31, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.13.0rc2 pre-release is available:
https://nlnetlabs.nl/downloads/unbound/unbound-1.13.0rc2.tar.gz
sha256 63a626a301fe11d4aaf5990f0d46c645d7c99262ead76a9066e3515179f71417
pg
On first look running faster with less CPU utilization during warming up.
25.11.2020 21:19, Yuri пишет:
Well at least, it running.
No cores yet. 😉
25.11.2020 19:31, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.13.0rc2 pre-release is available:
https://nlnetlabs.nl/downloads/u
Still no crashes. Seems fixed :)
25.11.2020 19:31, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.13.0rc2 pre-release is available:
https://nlnetlabs.nl/downloads/unbound/unbound-1.13.0rc2.tar.gz
sha256 63a626a301fe11d4aaf5990f0d46c645d7c99262ead76a9066e3515179f71417
pgp https://nlnet
Andreas, I've uses Firefox as DoH client on my infrastructure ;)
Seems it works. (But I'd be prefer DoT client instead, of course 😉)
27.11.2020 4:10, A. Schulze via Unbound-users пишет:
Am 25.11.20 um 14:31 schrieb Wouter Wijngaards via Unbound-users:
Unbound 1.13.0rc2 pre-release is availabl
Runs ok.
27.11.2020 21:03, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.13.0rc3 pre-release is available:
https://nlnetlabs.nl/downloads/unbound/unbound-1.13.0rc3.tar.gz
sha256 7702fc832337a71a1cbd8026e2f2784daff3313c098021e80f479c67affb546f
pgp https://nlnetlabs.nl/downloads/unboun
Runs ok.
30.11.2020 18:32, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.13.0rc4 pre-release is available:
https://nlnetlabs.nl/downloads/unbound/unbound-1.13.0rc4.tar.gz
sha256 b7cfb0fe0f138970271d9e037913350a0ca03a66ead6e6f77cc0ca02f7245aa3
pgp https://nlnetlabs.nl/downloads/unboun
Well, built on first server. Runs ok.
Later will deploy on two others. )
03.12.2020 15:11, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.13.0 is available:
https://nlnetlabs.nl/downloads/unbound/unbound-1.13.0.tar.gz
sha256 a954043a95b0326ca4037e50dace1f3a207a0a19e9a4a22f4c6718fc623
07.12.2020 19:15, Andre Martins via Unbound-users пишет:
Guys,
I appreciate the lesson. I didn't know we had root servers locally in
Brazil. So, again thanks for the information.
But, with this in mind, why would I get a cold search (not on the
cache) going for over 300ms in average ? Is th
Wouter,
it seems for me that Unbound with DoH enabled is leaking:
Memory usage by process
Look. 1.13 Gb RAM consumption (and continious growing) is a bit a lot.
H? (When down was restart processes due to common library ugrade)
WBR, Yuri.
Try this one:
https://sourceforge.net/projects/logrotatewin/files
03.01.2021 18:07, RayG via Unbound-users пишет:
Hi,
Is there a method to rotate the unbound log file in windows?
Access to the file is denied in all cases unless the unbound server is
stopped.
In order to get the create tim
Runs ok.
04.02.2021 14:16, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.13.1rc2 pre-release is available
https://nlnetlabs.nl/downloads/unbound/unbound-1.13.1rc2.tar.gz
sha256 ab845db9ce9d38fe027ef5c198b3f76ddbc65f45e8c2c343db3cfdff34c01ac0
pgp https://nlnetlabs.nl/downloads/unbound
Runs ok on dev server. Seems memory leaks fixed - memory consumption
looks stable.
05.08.2021 15:11, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.13.2rc1 pre-release is available:
https://nlnetlabs.nl/downloads/unbound/unbound-1.13.2rc1.tar.gz
sha256 9627a85779eb9f812f725438ff5fa4c
Wow, less RSS. Running )))
02.12.2021 21:48, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.14.0rc1 pre-release is available:
https://nlnetlabs.nl/downloads/unbound/unbound-1.14.0rc1.tar.gz
sha256 e1f4ffb7386007f52435b7d537b563afa002f8ddb2e4a35424865e573d5cf4cb
pgp https://nlnetlabs.n
Win32 build?
02.06.2022 17:51, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.16.0 is available:
https://nlnetlabs.nl/downloads/unbound/unbound-1.16.0.tar.gz
sha256 6701534c938eb019626601191edc6d012fc534c09d2418d5b92827db0cbe48a5
pgp https://nlnetlabs.nl/downloads/unbound/unbound-1.16
Ah, I see. Thank you.
02.06.2022 19:24, George Thessalonikefs via Unbound-users пишет:
Hi Yuri,
They should be up now.
Best regards,
-- George
On 02/06/2022 14:44, Yuri via Unbound-users wrote:
Win32 build?
02.06.2022 17:51, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.16.0
Built and runs ok.
04.07.2022 18:23, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.16.1rc1 pre-release is available:
https://nlnetlabs.nl/downloads/unbound/unbound-1.16.1rc1.tar.gz
sha256 a02581c8fb730c8c7885d1ae76d0c4df44f27cb9131d0813002b8ea7c6183fa6
pgp https://nlnetlabs.nl/downlo
https://nlnetlabs.nl/documentation/unbound/howto-optimise/
That is you're looking for?
07.09.2022 13:44, Arista Sampurna via Unbound-users пишет:
I'm creating a dns cache using unbound
Does anybody have some additional performance tuning tips for Unbound?
Best Regards
Arista
-
Compiled and works like a charm.
Also windows version works perfectly.
07.10.2022 16:36, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.17.0rc1 pre-release is available:
https://nlnetlabs.nl/downloads/unbound/unbound-1.17.0rc1.tar.gz
sha256 bf48501cf799134a5c481e7d469e18a1e9195d5936a
Runs ok.
14.03.2024 14:24, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.19.3 is available:
https://nlnetlabs.nl/downloads/unbound/unbound-1.19.3.tar.gz
sha256 3ae322be7dc2f831603e4b0391435533ad5861c2322e34a76006a9fb65eb56b9
pgp https://nlnetlabs.nl/downloads/unbound/unbound-1.19.3.t
It is necessary to disable THP so often that I had to write a script for
this purpose. Doing this using the service is much more convenient than
doing it any other way, in my opinion.
https://github.com/yvoinov/memory-tools/blob/main/disable_thp.sh
16.03.2024 14:23, Tarko Tikan via Unbound-use
Well, installed and run on one production server. All ok till now.
01.05.2024 14:23, Wouter Wijngaards via Unbound-users пишет:
Hi,
Unbound 1.20.0rc1 is available:
https://nlnetlabs.nl/downloads/unbound/unbound-1.20.0rc1.tar.gz
sha256 f56bf689f4c4e0e68e5b48a6e0ad07f3e68e71f807e7cdc3da7524dd3a7d
40 matches
Mail list logo