1. Package installation

Amri zifuatazo zinasakinisha unbound chelezo usanidi wako wa DNS na uambie mfumo utumie kisuluhishi cha mahali pale:

# apt install unbound
# cp /etc/resolv.conf /etc/resolv.conf.backup
# echo nameserver 127.0.0.1 > /etc/resolv.conf

2. Lock changes in

Kuzuia mabadiliko ya usanidi usiyohitajika (kwa mfano na mteja wa DHCP):

# chattr +i /etc/resolv.conf

3. QNAME minimisation

The latest versions of unbound have qname-minimisation enabled by default. However, it is advisable to verify this setting, as older versions did not enable it automatically.

To check and configure it, open the unbound configuration file, located at /etc/unbound/unbound.conf, look for the following entry and change it if necessary:

server:
    ...
    qname-minimisation: yes
    ...

If the setting is missing, it should still be enabled by default. Kisuluhushi cha Unbound ulichosakinisha pia hufanya uthibitishaji wa DNSSEC.

4. Start the service

To enable and start the unbound service, run:

# systemctl enable --now unbound

Ikiwa unaendesha systemd-resolved na mskilizaji wake mgumu utahitaji kufanya zaidi ya hayo. Tafadhali rejelea resolved.conf manpage.