]> git.saurik.com Git - apple/network_cmds.git/blame - unbound/doc/unbound.8
network_cmds-481.20.1.tar.gz
[apple/network_cmds.git] / unbound / doc / unbound.8
CommitLineData
89c4ed63
A
1.TH "unbound" "8" "Dec 8, 2014" "NLnet Labs" "unbound 1.5.1"
2.\"
3.\" unbound.8 -- unbound manual
4.\"
5.\" Copyright (c) 2007, NLnet Labs. All rights reserved.
6.\"
7.\" See LICENSE for the license.
8.\"
9.\"
10.SH "NAME"
11.B unbound
12\- Unbound DNS validating resolver 1.5.1.
13.SH "SYNOPSIS"
14.B unbound
15.RB [ \-h ]
16.RB [ \-d ]
17.RB [ \-v ]
18.RB [ \-c
19.IR cfgfile ]
20.SH "DESCRIPTION"
21.B Unbound
22is a caching DNS resolver.
23.P
24It uses a built in list of authoritative nameservers for the root zone (.),
25the so called root hints.
26On receiving a DNS query it will ask the root nameservers for
27an answer and will in almost all cases receive a delegation to a top level
28domain (TLD) authoritative nameserver.
29It will then ask that nameserver for an answer.
30It will recursively continue until an answer is found or no answer is
31available (NXDOMAIN).
32For performance and efficiency reasons that answer is cached for a
33certain time (the answer's time\-to\-live or TTL).
34A second query for the same name will then be answered from the cache.
35Unbound can also do DNSSEC validation.
36.P
37To use a locally running
38.B Unbound
39for resolving put
40.sp
41.RS 6n
42nameserver 127.0.0.1
43.RE
44.sp
45into
46.IR resolv.conf (5).
47.P
48If authoritative DNS is needed as well using
49.IR nsd (8),
50careful setup is required because authoritative nameservers and
51resolvers are using the same port number (53).
52.P
53The available options are:
54.TP
55.B \-h
56Show the version and commandline option help.
57.TP
58.B \-c\fI cfgfile
59Set the config file with settings for unbound to read instead of reading the
60file at the default location, /usr/local/etc/unbound/unbound.conf. The syntax is
61described in \fIunbound.conf\fR(5).
62.TP
63.B \-d
64Debug flag: do not fork into the background, but stay attached to
65the console. This flag will also delay writing to the log file until
66the thread\-spawn time, so that most config and setup errors appear on
67stderr. If given twice or more, logging does not switch to the log file
68or to syslog, but the log messages are printed to stderr all the time.
69.TP
70.B \-v
71Increase verbosity. If given multiple times, more information is logged.
72This is in addition to the verbosity (if any) from the config file.
73.SH "SEE ALSO"
74\fIunbound.conf\fR(5),
75\fIunbound\-checkconf\fR(8),
76\fInsd\fR(8).
77.SH "AUTHORS"
78.B Unbound
79developers are mentioned in the CREDITS file in the distribution.