1. Package installation
Amri zifuatazo zinasakinisha unbound chelezo usanidi wako wa DNS na uambie mfumo utumie kisuluhishi cha mahali pale:
# dnf install unbound
# cp /etc/resolv.conf /etc/resolv.conf.backup
# echo nameserver 127.0.0.1 > /etc/resolv.conf
If you are using a legacy version of CentOS/RHEL, using yum instead of dnf may be more suitable.
2. Lock changes in
Ili kuzuia mabadiliko ya usanidi usiyohitajika (kwa mfano na mteja wa DHCP):
# chattr +i /etc/resolv.conf
3. QNAME minimisation
The latest versions of unbound have qname-minimisation enabled by default. However, it is advisable to verify this setting, as older versions did not enable it automatically.
To check and configure it, open the unbound configuration file, located at /etc/unbound/unbound.conf, look for the following entry and change it if necessary:
server:
...
qname-minimisation: yes
...
If the setting is missing, it should still be enabled by default.
Kisuluhushi cha Unbound ulichosakinisha pia hufanya uthibitishaji wa DNSSEC.
4. Start the service
To enable and start the unbound service, run:
# systemctl enable --now unbound
Ikiwa unaendesha systemd-resolved na mskilizaji wake mgumu utahitaji kufanya zaidi ya hayo. Tafadhali rejelea resolved.conf manpage.