Install Unbound ( Dns Resolver ) di Ubuntu 14.04 LTS

Unbound Berguna untuk mempercepat dns resolve.
Langkah berikut adalah cara install unbound di ubuntu server 14.04 LTS
Install dulu paket yang diperlukan :
#sudo apt-get update ( selalu jalankan ini untuk mengecek list server terbaru )
Setelah itu
# apt-get install unbound
# killall unbound
# dig +bufsize=1200 +norec NS . @a.root-servers.net > /etc/unbound/named.cache
Lalu tambahkan ini di /etc/unbound/unbound.conf :

# Unbound configuration file for Debian. # # See the unbound.conf(5) man page. # # See /usr/share/doc/unbound/examples/unbound.conf for a commented # reference config file. # # The following line includes additional configuration files from the # /etc/unbound/unbound.conf.d directory. #include: "/etc/unbound/unbound.conf.d/*.conf" server: verbosity: 1 statistics-interval: 120 #Tergantung berapa core CPU anda num-threads: 2 statistics-cumulative: yes interface: 0.0.0.0 port: 53 outgoing-range: 950 num-queries-per-thread: 1024 #kalikan 2 dgn num-threads msg-cache-slabs: 4 rrset-cache-slabs: 4 infra-cache-slabs: 4 key-cache-slabs: 4 msg-cache-size: 50m rrset-cache-size: 100m so-rcvbuf: 4m so-sndbuf: 4m cache-min-ttl: 600 cache-max-ttl: 86400 access-control: 192.168.0.0/16 allow access-control: ::1 allow chroot: "" username: "unbound" directory: "/etc/unbound" #logfile: "/etc/unbound/unbound.log" use-syslog: no pidfile: "/var/run/unbound.pid" root-hints: "/etc/unbound/named.cache" identity: "DNS" version: "1.4" hide-identity: yes hide-version: yes harden-glue: yes harden-dnssec-stripped: yes do-not-query-address: 127.0.0.1/8 do-not-query-localhost: yes module-config: "iterator" forward-zone: name: "." forward-addr: 120.89.95.245 forward-addr: 120.89.95.246 forward-addr: 8.8.8.8 forward-addr: 8.8.4.4 # enable remote-control remote-control: control-enable: yes control-interface: 127.0.0.1 control-port: 953 server-key-file: "/etc/unbound/unbound_server.key" server-cert-file: "/etc/unbound/unbound_server.pem" control-key-file: "/etc/unbound/unbound_control.key" control-cert-file: "/etc/unbound/unbound_control.pem"
# Setelah itu anda klik save
Cek configurasi unbound :

#unbound-checkconf /etc/unbound/unbound.conf

Jika tidak ada error jalan unbound-control-setup :
#unbound-control-setup
Setelah itu jalan Unbound kembali :
#unbound-control start

Setting ubuntu agar mengunakan DNS unbound :
edit file di /etc/network/interfaces :
# nano /etc/network/interfaces
ganti dns-nameservers :
dns-nameserver 127.0.0.1

Setelah itu update resolv.conf :
#resolvconf -u

Edit squid.conf di line "dns_nameserver" menjadi :
dns_nameservers 127.0.0.1

reboot cpu server....
untuk mengecek DNS unbound sudah jalan ada beberapa cara :
#/etc/init.d/unbound status

atau dengan mengecek port 53 :
#lsof -i :53

# ps -fp 1055 ( 1055 adalah PID unbound yang didapat dari output lsof -i :53 )

Error yang biasa dihadapi ketika install unbound :
root@proxyku:~# /etc/init.d/unbound restart
* Restarting recursive DNS server unbound
[1335536129] unbound[17221:0] error: bind: address already in use
[1335536129] unbound[17221:0] fatal error: could not open ports        [fail]

solusinya : cek line ini di /etc/init.d/unbound

NAME=unbound
DESC="recursive DNS server"
DAEMON=/usr/local/sbin/unbound
PIDFILE="/etc/unbound/unbound.pid" <============ ini
CONFIG="/etc/unbound/unbound.conf" <============ sama ini

harus sama dgn yang diatas. Lalu reboot

Kalau masih error coba :
#apt-get autoremove bind9
atau :

#service dnsmasq stop

Coba test dns lookup nya 

# nslookup 192.168.0.200
Server: 127.0.0.1
Address: 127.0.0.1#53

200.0.168.192.in-addr.arpa name = regent.net 

Untuk memflush isi dns bisa lihat menu disini :
#unbound-control -h

Untuk melihat statistiknya :

#unbound-control stats

Isinya akan seperti ini :

thread0.num.queries=38
thread0.num.cachehits=7
thread0.num.cachemiss=31
thread0.num.recursivereplies=31
thread0.requestlist.avg=0.129032
thread0.requestlist.max=1
thread0.requestlist.overwritten=0
thread0.requestlist.exceeded=0
thread0.requestlist.current.all=0
thread0.requestlist.current.user=0
thread0.recursion.time.avg=0.088811
thread0.recursion.time.median=0.0185685
thread1.num.queries=10
thread1.num.cachehits=1
thread1.num.cachemiss=9
thread1.num.recursivereplies=9
thread1.requestlist.avg=0
thread1.requestlist.max=0
thread1.requestlist.overwritten=0
thread1.requestlist.exceeded=0
thread1.requestlist.current.all=0
thread1.requestlist.current.user=0
thread1.recursion.time.avg=0.049576
thread1.recursion.time.median=0.016384
total.num.queries=48
total.num.cachehits=8
total.num.cachemiss=40
total.num.recursivereplies=40
total.requestlist.avg=0.1
total.requestlist.max=1
total.requestlist.overwritten=0
total.requestlist.exceeded=0
total.requestlist.current.all=0
total.requestlist.current.user=0
total.recursion.time.avg=0.079984
total.recursion.time.median=0.0174763
time.now=1281681396.583885
time.up=7299.491047
time.elapsed=4177.655650

Kalau ditambahkan memakai mikrotik dan ubuntu sebagai proxy redirect dns supaya mengarah ke proxy . Disini ip proxy adalah 192.168.1.100. Tambahkan command berikut :
add action=dst-nat chain=dstnat comment=proxydns disabled=no dst-port=53 protocol=udp src-address=!192.168.1.100 to-addresses=192.168.1.100 to-ports=53