Configuring Unbound for whole network

Last modified by Yu Pang Law on 2023/01/02 19:55
  1. Install and config unbound as usual. For basic, remote set up check unbound remote resolver setup
  2. Install bgpq4
  3. Generate prefix list filter for your AS or AS SET
    bgpq4 -4A -h whois.radb.net -F 'access-control: %n/%l allow\n' AS-SET > /usr/local/etc/unbound/prefix.txt
  4. Edit unbound.conf, under server:, add
    include: /usr/local/etc/unbound/prefix.txt
  5. Set up cron job to update prefix list and restart unbound periodically

Posted by Yu Pang Law · Categories: · Permalink

Tags:
 
Copyrighted by Pangnet.net