unbound on MacOSX

DNS

MacOSXでローカルキャッシュをunboundにしてみる

  • 普通に
% cd Desktop
% fetch http://www.unbound.net/downloads/unbound-latest.tar.gz
% tar zxvf unbound-latest.tar.gz
% cd unbound-latest
% ./configure
% make
% sudo make install
  • 設定ファイルは
% grep -v '#' /usr/local/etc/unbound/unbound.conf | grep ':'
server:
	verbosity: 1
	access-control: 0.0.0.0/0 refuse
	access-control: 127.0.0.0/8 allow
	access-control: ::0/0 refuse
	access-control: ::1 allow
	access-control: ::ffff:127.0.0.1 allow
	username: "root"
	logfile: "unbound.log"
	use-syslog: no
	local-zone: "local." static
	local-zone: "cawjb.com." static
	local-zone: "3322.org." static
	local-zone: "meibu.com." static
remote-control:
         control-enable: yes
  • テスト
% sudo /usr/local/sbin/unbound-control-setup
% sudo /usr/local/sbin/unbound -c /usr/local/etc/unbound/unbound.conf
% dig @localhost xn--y8jmg4a9b7g.jp. A +short +recurse
61.211.239.186
  • ネットワーク環境設定からDNSに127.0.0.1を追加
  • 起動時に立ち上がるように
% cat  /Library/LaunchDaemons/net.unbound.unbound.plist 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>net.unbound.unbound</string>
    <key>ProgramArguments</key>
    <array>
        <string>/usr/local/sbin/unbound</string>
    </array>
    <key>RunAtLoad</key>
    <true/>
</dict>
</plist>