<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Aan Choto 阿安國德 &#187; DNS</title>
	<atom:link href="http://aanchoto.com/category/server/dns/feed/" rel="self" type="application/rss+xml" />
	<link>http://aanchoto.com</link>
	<description></description>
	<lastBuildDate>Fri, 04 May 2012 16:18:56 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>DNS Unbound High Performance</title>
		<link>http://aanchoto.com/2011/04/dns-unbound-high-performance/</link>
		<comments>http://aanchoto.com/2011/04/dns-unbound-high-performance/#comments</comments>
		<pubDate>Sun, 24 Apr 2011 10:50:16 +0000</pubDate>
		<dc:creator>Aan Choto 阿安國德</dc:creator>
				<category><![CDATA[DNS]]></category>
		<category><![CDATA[Mikrotik]]></category>
		<category><![CDATA[Networking]]></category>
		<category><![CDATA[Server]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://aanchoto.com/?p=1128</guid>
		<description><![CDATA[Tested on OS ubuntu ram 1Gb, (include servis squid, apache2, &#38; mrtg squid Install Paket Yang dibutuhkan apt-get install build-essential libssl-dev Setelah selesai install paket selanjutnya Selanjutnya buat user dan grup untuk Unbound groupadd unbound useradd -d /var/unbound -m -g unbound -s /bin/false unbound dan sesuaikan config /etc/unbound/unbound.conf, dan servis dns lainnya (bind/dnsmasq dll) harus&#8230;]]></description>
			<content:encoded><![CDATA[<p><img class="alignleft size-full wp-image-1227" title="unbound" src="http://aanchoto.com/wp-content/uploads/2011/04/unbound.png" alt="" width="250" height="125" />Tested on OS ubuntu ram 1Gb, (include servis squid, apache2, &amp; mrtg squid</p>
<p>Install Paket Yang dibutuhkan</p>
<blockquote><p>apt-get install build-essential libssl-dev</p></blockquote>
<p>Setelah selesai install paket selanjutnya</p>
<pre class="brush: css; title: ; notranslate">
apt-get install unbound
cd /etc/unbound
wget  ftp://FTP.INTERNIC.NET/domain/named.cache
unbound-control-setup
</pre>
<p>Selanjutnya buat user dan grup untuk Unbound</p>
<blockquote><p>groupadd unbound<br />
useradd -d /var/unbound -m -g unbound -s /bin/false unbound</p></blockquote>
<p>dan sesuaikan config /etc/unbound/unbound.conf, dan servis dns lainnya (bind/dnsmasq dll) harus di stop agar tidak bentrok)</p>
<blockquote><p>vi /etc/init.d/unbound</p></blockquote>
<p><span id="more-1128"></span></p>
<pre class="brush: css; title: ; notranslate">

server:
 verbosity: 1
 statistics-interval: 120
 num-threads: 1
 interface: 0.0.0.0

outgoing-range: 512
 num-queries-per-thread: 1024

msg-cache-size: 16m
 rrset-cache-size: 32m

msg-cache-slabs: 4
 rrset-cache-slabs: 4

cache-max-ttl: 86400
 infra-host-ttl: 60
 infra-lame-ttl: 120

infra-cache-numhosts: 10000
 infra-cache-lame-size: 10k

do-ip4: yes
 do-ip6: no
 do-udp: yes
 do-tcp: yes
 do-daemonize: yes

#access-control: 0.0.0.0/0 allow
 access-control: 192.168.0.0/16 allow
 access-control: 172.16.0.0/12 allow
 access-control: 10.0.0.0/8 allow
 access-control: 127.0.0.0/8 allow
 access-control: 0.0.0.0/0 refuse

chroot: “/etc/unbound”
 username: “unbound”
 directory: “/etc/unbound”
 #logfile: “/etc/unbound/unbound.log”
 #use-syslog: yes
 logfile: “”
 use-syslog: no
 pidfile: “/etc/unbound/unbound.pid”
 root-hints: “/etc/unbound/named.cache”

identity: “DNS”
 version: “1.4″
 hide-identity: yes
 hide-version: yes
 harden-glue: yes
 do-not-query-address: 127.0.0.1/8
 do-not-query-localhost: yes
 module-config: “iterator”

#zone localhost
 local-zone: “localhost.” static
 local-data: “localhost. 10800 IN NS localhost.”
 local-data: “localhost. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800″
 local-data: “localhost. 10800 IN A 127.0.0.1″

local-zone: “127.in-addr.arpa.” static
 local-data: “127.in-addr.arpa. 10800 IN NS localhost.”
 local-data: “127.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 2 3600 1200 604800 10800″
 local-data: “1.0.0.127.in-addr.arpa. 10800 IN PTR localhost.”

#zone warnet-sudiro.net
 local-zone: “warnet-sudiro.net.” static
 local-data: “warnet-sudiro.net. 86400 IN NS ns1.warnet-sudiro.net.”
 local-data: “warnet-sudiro.net. 86400 IN SOA warnet-sudiro.net. hostmaster.warnet-sudiro.net.  3 3600 1200 604800 86400″
 local-data: “warnet-sudiro.net. 86400 IN A 192.168.100.2″
 local-data: “www.warnet-sudiro.net. 86400 IN A 192.168.100.2″
 local-data: “ns1.warnet-sudiro.net. 86400 IN A 192.168.100.2″

local-data: “mail.warnet-sudiro.net. 86400 IN A 192.168.100.5″
 local-data: “warnet-sudiro.net. 86400 IN MX 10 mail.warnet-sudiro.net.”
 local-data: “warnet-sudiro.net. 86400 IN TXT v=spf1 a mx ~all”

local-zone: “100.168.192.in-addr.arpa.” static
 local-data: “100.168.192.in-addr.arpa. 10800 IN NS warnet-sudiro.net.”
 local-data: “100.168.192.in-addr.arpa. 10800 IN SOA warnet-sudiro.net. hostmaster.warnet-sudiro.net. 4 3600 1200 604800 864000″
 local-data: “2.100.168.192.in-addr.arpa. 10800 IN PTR warnet-sudiro.net.”

forward-zone:
 name: “.”
 forward-addr: 202.134.1.10
 forward-addr: 222.124.204.34
 forward-addr: 202.134.0.155

remote-control:
 control-enable: yes
 control-interface: 127.0.0.1
 control-port: 953
 server-key-file: “/etc/unbound/unbound_server.key”
 server-cert-file: “/etc/unbound/unbound_server.pem”
 control-key-file: “/etc/unbound/unbound_control.key”
 control-cert-file: “/etc/unbound/unbound_control.pem”
</pre>
<p>root@ubuntu:~# /etc/init.d/unbound restart<br />
root@ubuntu:~# nslookup 192.168.100.2</p>
<pre class="brush: css; title: ; notranslate">Server: 127.0.0.1
 Address: 127.0.0.1#53
2.00.168.192.in-addr.arpa name = warnet-sudiro.net.</pre>
<p>root@ubuntu:~# nslookup warnet-sudiro.net</p>
<pre class="brush: css; title: ; notranslate">Server: 127.0.0.1
 Address: 127.0.0.1#53

Name: warnet-sudiro.net
 Address: 192.168.100.2
</pre>
<p>root@ubuntu:~#unbound-control stats</p>
<pre class="brush: css; title: ; notranslate">

 thread0.num.queries=38
 thread0.num.cachehits=7
 thread0.num.cachemiss=31
 thread0.num.recursivereplies=31
 thread0.requestlist.avg=0.129032
 thread0.requestlist.max=1
 thread0.requestlist.overwritten=0
 thread0.requestlist.exceeded=0
 thread0.requestlist.current.all=0
 thread0.requestlist.current.user=0
 thread0.recursion.time.avg=0.088811
 thread0.recursion.time.median=0.0185685
 thread1.num.queries=10
 thread1.num.cachehits=1
 thread1.num.cachemiss=9
 thread1.num.recursivereplies=9
 thread1.requestlist.avg=0
 thread1.requestlist.max=0
 thread1.requestlist.overwritten=0
 thread1.requestlist.exceeded=0
 thread1.requestlist.current.all=0
 thread1.requestlist.current.user=0
 thread1.recursion.time.avg=0.049576
 thread1.recursion.time.median=0.016384
 total.num.queries=48
 total.num.cachehits=8
 total.num.cachemiss=40
 total.num.recursivereplies=40
 total.requestlist.avg=0.1
 total.requestlist.max=1
 total.requestlist.overwritten=0
 total.requestlist.exceeded=0
 total.requestlist.current.all=0
 total.requestlist.current.user=0
 total.recursion.time.avg=0.079984
 total.recursion.time.median=0.0174763
 time.now=1281681396.583885
 time.up=7299.491047
 time.elapsed=4177.655650
</pre>
<p style="text-align: center;"><img class="aligncenter size-full wp-image-1228" title="unbound02" src="http://aanchoto.com/wp-content/uploads/2011/04/unbound02.png" alt="" width="603" height="362" /></p>
<p>Source : ForumMikrotik.Com</p>
<div style="float: right; margin-left: 10px;"><a href="http://twitter.com/share?url=http://aanchoto.com/2011/04/dns-unbound-high-performance/&via=aanchoto&text=DNS Unbound High Performance&related=:&lang=en&count=horizontal" class="twitter-share-button">Tweet</a><script type="text/javascript" src="http://platform.twitter.com/widgets.js"></script></div><div style="float: right; margin-left: 10px;"><a href="http://twitter.com/share?url=http://aanchoto.com/2011/04/dns-unbound-high-performance/&via=aanchoto&text=DNS Unbound High Performance&related=:&lang=en&count=horizontal" class="twitter-share-button">Tweet</a><script type="text/javascript" src="http://platform.twitter.com/widgets.js"></script></div>]]></content:encoded>
			<wfw:commentRss>http://aanchoto.com/2011/04/dns-unbound-high-performance/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

