mungkin bagi para ubntu user yg pengen ganti dns server dari bind ke unbound




langsung aja

apt-get install unbound

cd /etc/unbound

wget ftp://FTP.INTERNIC.NET/domain/named.cache

unbound-control-setup

chown unbound:root unbound_*

chmod 440 unbound_*

trus ubah settingan di /etc/unbound/unbound.conf, dan servis dns lainnya (bind/dnsmasq dll) harus di stop agar tidak bentrok

server:

 verbosity: 1

 statistics-interval: 120

 num-threads: 1

 interface: 192.168.20.29



 outgoing-range: 512

 num-queries-per-thread: 1024



 msg-cache-size: 16m

 rrset-cache-size: 32m 



 msg-cache-slabs: 4

 rrset-cache-slabs: 4



 cache-max-ttl: 86400

 infra-host-ttl: 60

 infra-lame-ttl: 120

 

 infra-cache-numhosts: 10000

 infra-cache-lame-size: 10k



 do-ip4: yes

 do-ip6: no

 do-udp: yes

 do-tcp: yes

 do-daemonize: yes



 #access-control: 0.0.0.0/0 allow

 access-control: 192.168.0.0/16 allow

 access-control: 172.16.0.0/12 allow

 access-control: 10.0.0.0/8 allow

 access-control: 127.0.0.0/8 allow

 access-control: 0.0.0.0/0 refuse

 

 chroot: "/etc/unbound"

 username: "unbound"

 directory: "/etc/unbound"

 #logfile: "/etc/unbound/unbound.log"

 #use-syslog: yes

 logfile: ""

 use-syslog: no

 pidfile: "/etc/unbound/unbound.pid"

 root-hints: "/etc/unbound/named.cache"

 

 identity: "DNS"

 version: "1.4"

 hide-identity: yes

 hide-version: yes

 harden-glue: yes

 do-not-query-address: 127.0.0.1/8

 do-not-query-localhost: yes

 module-config: "iterator"



 #zone localhost

 local-zone: "localhost." static 

 local-data: "localhost. 10800 IN NS localhost."

 local-data: "localhost. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800" 

 local-data: "localhost. 10800 IN A 127.0.0.1" 



 local-zone: "127.in-addr.arpa." static 

 local-data: "127.in-addr.arpa. 10800 IN NS localhost." 

 local-data: "127.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 2 3600 1200 604800 10800" 

 local-data: "1.0.0.127.in-addr.arpa. 10800 IN PTR localhost." 

 

 #zone cache.dns.sky.net.id 

 local-zone: "cache.dns.sky.net.id." static

 local-data: "sky.net.id. 86400 IN NS cache.dns.sky.net.id."

 local-data: "sky.net.id. 86400 IN SOA sky.net.id. proxy.sky.net.id. 3 3600 1200 604800 86400"

 local-data: "sky.net.id. 86400 IN A 192.168.20.29"

 local-data: "www.sky.net.id. 86400 IN A 192.168.20.29"

 local-data: "cache.dns.sky.net.id. 86400 IN A 192.168.20.29"

 



 local-zone: "20.168.192.in-addr.arpa." static

 local-data: "20.168.192.in-addr.arpa. 10800 IN NS sky.net.id."

 local-data: "20.168.192.in-addr.arpa. 10800 IN SOA sky.net.id. proxy.sky.net.id. 4 3600 1200 604800 864000"

 local-data: "29.20.168.192.in-addr.arpa. 10800 IN PTR sky.net.id."



forward-zone: 

 name: "."

 forward-addr: 203.130.193.74

 forward-addr: 125.160.4.82

 forward-addr: 125.160.18.25

 forward-addr: 125.160.16.10

 forward-addr: 203.130.209.242

 forward-addr: 202.134.0.62

 forward-addr: 222.124.18.62

 forward-addr: 203.130.196.5

 forward-addr: 203.130.196.155

 forward-addr: 202.134.1.10

 forward-addr: 222.124.204.34

 forward-addr: 202.134.0.155

 forward-addr: 8.8.4.4

 forward-addr: 8.8.8.8



remote-control:

 control-enable: yes

 control-interface: 192.168.20.29

 control-port: 953

 server-key-file: "/etc/unbound/unbound_server.key"

 server-cert-file: "/etc/unbound/unbound_server.pem"

 control-key-file: "/etc/unbound/unbound_control.key"

 control-cert-file: "/etc/unbound/unbound_control.pem"

sesuaikan saja

terus

root@ubuntu:~# /etc/init.d/unbound restart

root@sky:~# nslookup 192.168.20.29

Server: 192.168.20.29

Address: 192.168.20.29#53



29.20.168.192.in-addr.arpa name = sky.net.id.



root@sky:~# nslookup sky.net.id.

Server: 192.168.20.29

Address: 192.168.20.29#53



Name: sky.net.id

Address: 192.168.20.29

pemakaian resouce pun lebih hemat dibanding bind



maap klo repost....

sumber