Unbound

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 08:32, 10 July 2018 (edit)
Mile-Lile (Talk | contribs)

← Previous diff
Revision as of 03:21, 16 July 2018 (edit) (undo)
Ian5142 (Talk | contribs)
(Added Section headers and Basic tutorials Category.)
Next diff →
Line 1: Line 1:
[https://www.unbound.net/ Unbound] is a validating, '''recursive''', and caching DNS resolver. [https://www.unbound.net/ Unbound] is a validating, '''recursive''', and caching DNS resolver.
 +
 +==Introduction==
 +
Unbound has supplanted the Berkeley Internet Name Domain (BIND) as the default, base-system name server in several open source projects, where it is perceived as smaller, more modern, and more secure for most applications. Unbound has supplanted the Berkeley Internet Name Domain (BIND) as the default, base-system name server in several open source projects, where it is perceived as smaller, more modern, and more secure for most applications.
-On dd-wrt it works just out of the box. The only thing you have to do is to tick Recursive DNS Resolving on index.asp page (Setup>Basic Setup tab) of your dd-wrt. +On dd-wrt it works just out of the box.
 + 
 +==Setup==
 +The only thing you have to do is to tick Recursive DNS Resolving on index.asp page (Setup>Basic Setup tab) of your dd-wrt.
Make sure you have working time/date (ntp client) otherwise Unbound will not work after reboot (DNSSEC validateing needs correct local time). It is important that you use Server IP for router NTP Client not hostname (e.g. 193.25.222.240 instead of 0.europe.pool.ntp.org). Make sure you have working time/date (ntp client) otherwise Unbound will not work after reboot (DNSSEC validateing needs correct local time). It is important that you use Server IP for router NTP Client not hostname (e.g. 193.25.222.240 instead of 0.europe.pool.ntp.org).
Line 9: Line 15:
Whether your DNS is leaking you can check [http://dnsleak.com/ here] Whether your DNS is leaking you can check [http://dnsleak.com/ here]
 +
 +[[Category:Basic tutorials]]

Revision as of 03:21, 16 July 2018

Unbound is a validating, recursive, and caching DNS resolver.

Introduction

Unbound has supplanted the Berkeley Internet Name Domain (BIND) as the default, base-system name server in several open source projects, where it is perceived as smaller, more modern, and more secure for most applications. On dd-wrt it works just out of the box.

Setup

The only thing you have to do is to tick Recursive DNS Resolving on index.asp page (Setup>Basic Setup tab) of your dd-wrt. Make sure you have working time/date (ntp client) otherwise Unbound will not work after reboot (DNSSEC validateing needs correct local time). It is important that you use Server IP for router NTP Client not hostname (e.g. 193.25.222.240 instead of 0.europe.pool.ntp.org).

A default configuration is stored under /tmp/unbound.conf

You can check whether your Unbound resolver validates DNSSEC signatures on this link

Whether your DNS is leaking you can check here