1. Package installation
Amri zifuatazo zinasakinisha unbound
chelezo usanidi wako wa DNS na uambie mfumo utumie kisuluhishi cha mahali pale:
# apt install unbound
# cp /etc/resolv.conf /etc/resolv.conf.backup
# echo nameserver 127.0.0.1 > /etc/resolv.conf
2. Lock changes in
Kuzuia mabadiliko ya usanidi usiyohitajika (kwa mfano na mteja wa DHCP):
# chattr +i /etc/resolv.conf
3. QNAME minimisation
The latest versions of unbound
have qname-minimisation
enabled by default. However, it is advisable to verify this setting, as older versions did not enable it automatically.
To check and configure it, open the unbound configuration file, located at /etc/unbound/unbound.conf
, look for the following entry and change it if necessary:
server:
...
qname-minimisation: yes
...
If the setting is missing, it should still be enabled by default.
Kisuluhushi cha Unbound ulichosakinisha pia hufanya uthibitishaji wa DNSSEC.
4. Start the service
To enable and start the unbound
service, run:
# systemctl enable --now unbound
Ikiwa unaendesha systemd-resolved na mskilizaji wake mgumu utahitaji kufanya zaidi ya hayo. Tafadhali rejelea resolved.conf manpage.