Arunabha DasandGitHub
5c6f56f8f1
When the scrubber synthesizes a CNAME from a DNAME (authority omits CNAME), apply cache-min-ttl/cache-max-ttl to both DNAME and synthesized CNAME in msg_parse so they stay equal and respect config (RFC 6672). - iterator/iter_scrub.c: In synth_cname_rrset(), clamp TTL to [MIN_TTL, MAX_TTL] when !SERVE_ORIGINAL_TTL and write back to both synth CNAME and DNAME rrset. Removes FIXME.
Unbound
Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. If you have any feedback, we would love to hear from you. Don’t hesitate to create an issue on Github or post a message on the Unbound mailing list. You can learn more about Unbound by reading our documentation.
Compiling
Make sure you have the C toolchain, OpenSSL and its include files, and libexpat installed. If building from the repository source you also need flex and bison installed. Unbound can be compiled and installed using:
./configure && make && make install
You can use libevent if you want. libevent is useful when using many (e.g.,
10000) outgoing ports.
Use the --with-libevent configure option to compile Unbound with libevent
support.
If not, the default builtin alternative opens max 256 ports at the same time and is equally capable and a little faster.
Unbound configuration
All of Unbound's configuration options are described in the unbound.conf(5)
man page, which will be installed and is also available on the Unbound
documentation page
for the latest version.
An example configuration file, with minimal documentation, is located in doc/example.conf.