]> git.saurik.com Git - apple/network_cmds.git/blob - unbound/doc/unbound.8
b3b7d6a8afee7fc9d711f7b605c336825462696a
[apple/network_cmds.git] / unbound / doc / unbound.8
1 .TH "unbound" "8" "Dec 8, 2014" "NLnet Labs" "unbound 1.5.1"
2 .\"
3 .\" unbound.8 -- unbound manual
4 .\"
5 .\" Copyright (c) 2007, NLnet Labs. All rights reserved.
6 .\"
7 .\" See LICENSE for the license.
8 .\"
9 .\"
10 .SH "NAME"
11 .B unbound
12 \- Unbound DNS validating resolver 1.5.1.
13 .SH "SYNOPSIS"
14 .B unbound
15 .RB [ \-h ]
16 .RB [ \-d ]
17 .RB [ \-v ]
18 .RB [ \-c
19 .IR cfgfile ]
20 .SH "DESCRIPTION"
21 .B Unbound
22 is a caching DNS resolver.
23 .P
24 It uses a built in list of authoritative nameservers for the root zone (.),
25 the so called root hints.
26 On receiving a DNS query it will ask the root nameservers for
27 an answer and will in almost all cases receive a delegation to a top level
28 domain (TLD) authoritative nameserver.
29 It will then ask that nameserver for an answer.
30 It will recursively continue until an answer is found or no answer is
31 available (NXDOMAIN).
32 For performance and efficiency reasons that answer is cached for a
33 certain time (the answer's time\-to\-live or TTL).
34 A second query for the same name will then be answered from the cache.
35 Unbound can also do DNSSEC validation.
36 .P
37 To use a locally running
38 .B Unbound
39 for resolving put
40 .sp
41 .RS 6n
42 nameserver 127.0.0.1
43 .RE
44 .sp
45 into
46 .IR resolv.conf (5).
47 .P
48 If authoritative DNS is needed as well using
49 .IR nsd (8),
50 careful setup is required because authoritative nameservers and
51 resolvers are using the same port number (53).
52 .P
53 The available options are:
54 .TP
55 .B \-h
56 Show the version and commandline option help.
57 .TP
58 .B \-c\fI cfgfile
59 Set the config file with settings for unbound to read instead of reading the
60 file at the default location, /usr/local/etc/unbound/unbound.conf. The syntax is
61 described in \fIunbound.conf\fR(5).
62 .TP
63 .B \-d
64 Debug flag: do not fork into the background, but stay attached to
65 the console. This flag will also delay writing to the log file until
66 the thread\-spawn time, so that most config and setup errors appear on
67 stderr. If given twice or more, logging does not switch to the log file
68 or to syslog, but the log messages are printed to stderr all the time.
69 .TP
70 .B \-v
71 Increase verbosity. If given multiple times, more information is logged.
72 This is in addition to the verbosity (if any) from the config file.
73 .SH "SEE ALSO"
74 \fIunbound.conf\fR(5),
75 \fIunbound\-checkconf\fR(8),
76 \fInsd\fR(8).
77 .SH "AUTHORS"
78 .B Unbound
79 developers are mentioned in the CREDITS file in the distribution.