| | 1 | .TH "unbound" "8" "Dec 8, 2014" "NLnet Labs" "unbound 1.5.1" |
| | 2 | .\" |
| | 3 | .\" unbound.8 -- unbound manual |
| | 4 | .\" |
| | 5 | .\" Copyright (c) 2007, NLnet Labs. All rights reserved. |
| | 6 | .\" |
| | 7 | .\" See LICENSE for the license. |
| | 8 | .\" |
| | 9 | .\" |
| | 10 | .SH "NAME" |
| | 11 | .B unbound |
| | 12 | \- Unbound DNS validating resolver 1.5.1. |
| | 13 | .SH "SYNOPSIS" |
| | 14 | .B unbound |
| | 15 | .RB [ \-h ] |
| | 16 | .RB [ \-d ] |
| | 17 | .RB [ \-v ] |
| | 18 | .RB [ \-c |
| | 19 | .IR cfgfile ] |
| | 20 | .SH "DESCRIPTION" |
| | 21 | .B Unbound |
| | 22 | is a caching DNS resolver. |
| | 23 | .P |
| | 24 | It uses a built in list of authoritative nameservers for the root zone (.), |
| | 25 | the so called root hints. |
| | 26 | On receiving a DNS query it will ask the root nameservers for |
| | 27 | an answer and will in almost all cases receive a delegation to a top level |
| | 28 | domain (TLD) authoritative nameserver. |
| | 29 | It will then ask that nameserver for an answer. |
| | 30 | It will recursively continue until an answer is found or no answer is |
| | 31 | available (NXDOMAIN). |
| | 32 | For performance and efficiency reasons that answer is cached for a |
| | 33 | certain time (the answer's time\-to\-live or TTL). |
| | 34 | A second query for the same name will then be answered from the cache. |
| | 35 | Unbound can also do DNSSEC validation. |
| | 36 | .P |
| | 37 | To use a locally running |
| | 38 | .B Unbound |
| | 39 | for resolving put |
| | 40 | .sp |
| | 41 | .RS 6n |
| | 42 | nameserver 127.0.0.1 |
| | 43 | .RE |
| | 44 | .sp |
| | 45 | into |
| | 46 | .IR resolv.conf (5). |
| | 47 | .P |
| | 48 | If authoritative DNS is needed as well using |
| | 49 | .IR nsd (8), |
| | 50 | careful setup is required because authoritative nameservers and |
| | 51 | resolvers are using the same port number (53). |
| | 52 | .P |
| | 53 | The available options are: |
| | 54 | .TP |
| | 55 | .B \-h |
| | 56 | Show the version and commandline option help. |
| | 57 | .TP |
| | 58 | .B \-c\fI cfgfile |
| | 59 | Set the config file with settings for unbound to read instead of reading the |
| | 60 | file at the default location, /usr/local/etc/unbound/unbound.conf. The syntax is |
| | 61 | described in \fIunbound.conf\fR(5). |
| | 62 | .TP |
| | 63 | .B \-d |
| | 64 | Debug flag: do not fork into the background, but stay attached to |
| | 65 | the console. This flag will also delay writing to the log file until |
| | 66 | the thread\-spawn time, so that most config and setup errors appear on |
| | 67 | stderr. If given twice or more, logging does not switch to the log file |
| | 68 | or to syslog, but the log messages are printed to stderr all the time. |
| | 69 | .TP |
| | 70 | .B \-v |
| | 71 | Increase verbosity. If given multiple times, more information is logged. |
| | 72 | This is in addition to the verbosity (if any) from the config file. |
| | 73 | .SH "SEE ALSO" |
| | 74 | \fIunbound.conf\fR(5), |
| | 75 | \fIunbound\-checkconf\fR(8), |
| | 76 | \fInsd\fR(8). |
| | 77 | .SH "AUTHORS" |
| | 78 | .B Unbound |
| | 79 | developers are mentioned in the CREDITS file in the distribution. |
projects / apple / network_cmds.git / blame_incremental