{"id":12541,"date":"2023-06-24T12:18:01","date_gmt":"2023-06-24T03:18:01","guid":{"rendered":"https:\/\/lab4ict.com\/system\/?p=12541"},"modified":"2024-01-06T16:46:05","modified_gmt":"2024-01-06T07:46:05","slug":"unbound%e3%81%a7dns%e3%82%b5%e3%83%bc%e3%83%90%e3%82%92%e6%a7%8b%e7%af%89%e3%81%99%e3%82%8b%ef%bc%81%ef%bc%88rocky-linux-9%ef%bc%89","status":"publish","type":"post","link":"https:\/\/lab4ict.com\/system\/archives\/12541","title":{"rendered":"Unbound\u3067DNS\u30b5\u30fc\u30d0\u3092\u69cb\u7bc9\u3059\u308b\uff01\uff08Rocky Linux 9\uff09"},"content":{"rendered":"<p>Rocky Linux 9\u3092\u4f7f\u7528\u3057\u3066\u3001Unbound\u3067DNS\u30b5\u30fc\u30d0\u3092\u69cb\u7bc9\u3057\u307e\u3059\u3002\u5b85\u5185\u306e\u5c0f\u898f\u6a21\u306a\u74b0\u5883\u306e\u540d\u524d\u89e3\u6c7a\u7528\u306e\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002<br \/>\n<!--more--><\/p>\n<h2>\u30b5\u30fc\u30d0\u3092\u69cb\u7bc9\u3059\u308b\u74b0\u5883\u3092\u78ba\u8a8d\u3059\u308b\uff01<\/h2>\n<p>\u30b5\u30fc\u30d0\u3092\u69cb\u7bc9\u3059\u308bOS\u74b0\u5883\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; highlight: [1]; title: ; notranslate\" title=\"\">\r\n# hostnamectl\r\n Static hostname: vmsnms01.loc.lab4ict.com\r\n       Icon name: computer-vm\r\n         Chassis: vm\r\n      Machine ID: 39f2f77b642b4abe96b05142172223f9\r\n         Boot ID: 23d6cfd6e0b04ac2a454055aaa3c937e\r\n  Virtualization: oracle\r\nOperating System: Rocky Linux 9.1 (Blue Onyx)      \r\n     CPE OS Name: cpe:\/o:rocky:rocky:9::baseos\r\n          Kernel: Linux 5.14.0-162.6.1.el9_1.x86_64\r\n    Architecture: x86-64\r\n Hardware Vendor: innotek GmbH\r\n  Hardware Model: VirtualBox\r\n<\/pre>\n<h2>Firewalld\u306e\u901a\u4fe1\u8a31\u53ef\u8a2d\u5b9a\u3092\u884c\u3046\uff01<\/h2>\n<p>DNS\u306e\u554f\u3044\u5408\u308f\u305b\u306b\u5bfe\u3059\u308b\u901a\u4fe1\u8a31\u53ef\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; highlight: [1,2,3]; title: ; notranslate\" title=\"\">\r\n# firewall-cmd --add-service=dns --zone=public --permanent\r\n# firewall-cmd --reload\r\n# firewall-cmd --list-services\r\ncockpit dhcpv6-client dns ssh\r\n<\/pre>\n<h2>Unbound\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\uff01<\/h2>\n<p>Unbound\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; highlight: [1]; title: ; notranslate\" title=\"\">\r\n# dnf -y install unbound\r\n...\r\n========================================================================================================================\r\n Package                       Architecture            Version                         Repository                  Size\r\n========================================================================================================================\r\nInstalling:\r\n unbound                       x86_64                  1.16.2-3.el9                    appstream                  963 k\r\nInstalling dependencies:\r\n unbound-libs                  x86_64                  1.16.2-3.el9                    appstream                  547 k\r\n\r\nTransaction Summary\r\n========================================================================================================================\r\nInstall  2 Packages\r\n...\r\nComplete!\r\n<\/pre>\n<h2>Unbound\u306b\u3088\u308b\u540d\u524d\u89e3\u6c7a\u306e\u8a2d\u5b9a\u3092\u884c\u3046\uff01<\/h2>\n<p>Unbound\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306f\u3001\u300c\/etc\/unbound\/unbound.conf\u300d\u3067\u3059\u3002\u540d\u524d\u89e3\u6c7a\u306e\u30ec\u30b3\u30fc\u30c9\u3082\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306b\u8a18\u8ff0\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; highlight: [1]; title: ; notranslate\" title=\"\">\r\n# vi \/etc\/unbound\/unbound.conf\r\n<\/pre>\n<p>\u30ea\u30c3\u30b9\u30f3\u3059\u308b\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306e\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002\u30eb\u30fc\u30d7\u30d0\u30c3\u30af\u3068\u3001DNS\u30b5\u30fc\u30d0\u81ea\u8eab\u306e\u30a2\u30c9\u30ec\u30b9\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">\r\ninterface: 127.0.0.1\r\ninterface: 10.1.20.1\r\n<\/pre>\n<p>\u540d\u524d\u89e3\u6c7a\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u53d7\u3051\u4ed8\u3051\u308b\u30a2\u30c9\u30ec\u30b9\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002\u30eb\u30fc\u30d7\u30d0\u30c3\u30af\u3068\u3001\u81ea\u8eab\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30c9\u30ec\u30b9\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">\r\naccess-control: 127.0.0.1 allow\r\naccess-control: 10.1.0.0\/16 allow\r\n<\/pre>\n<p>\u540d\u524d\u89e3\u6c7a\u3092\u884c\u3046\u305f\u3081\u306eA\u30ec\u30b3\u30fc\u30c9\u3092\u8a18\u8ff0\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">\r\nlocal-data: &quot;router01.loc.lab4ict.com. IN A 10.1.0.1&quot;\r\n<\/pre>\n<h2>Unbound\u306e\u8d77\u52d5\u8a2d\u5b9a\u3092\u884c\u3046\uff01<\/h2>\n<p>Unbound\u306e\u8d77\u52d5\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; highlight: [1,3]; title: ; notranslate\" title=\"\">\r\n# systemctl enable --now unbound.service\r\nCreated symlink \/etc\/systemd\/system\/multi-user.target.wants\/unbound.service \u2192 \/usr\/lib\/systemd\/system\/unbound.service.\r\n# systemctl status unbound.service \r\n\u25cf unbound.service - Unbound recursive Domain Name Server\r\n     Loaded: loaded (\/usr\/lib\/systemd\/system\/unbound.service; enabled; vendor preset: disabled)\r\n     Active: active (running) since Sat 2023-06-24 12:13:16 JST; 36s ago\r\n    Process: 1888 ExecStartPre=\/usr\/sbin\/unbound-checkconf (code=exited, status=0\/SUCCESS)\r\n    Process: 1889 ExecStartPre=\/bin\/bash -c if &#x5B; ! &quot;$DISABLE_UNBOUND_ANCHOR&quot; == &quot;yes&quot; ]; then \/usr\/sbin\/unbound-anchor &gt;\r\n   Main PID: 1892 (unbound)\r\n      Tasks: 4 (limit: 11062)\r\n     Memory: 33.8M\r\n        CPU: 89ms\r\n     CGroup: \/system.slice\/unbound.service\r\n             \u2514\u25001892 \/usr\/sbin\/unbound -d\r\n...\r\n<\/pre>\n<h2>\u540d\u524d\u89e3\u6c7a\u306e\u78ba\u8a8d\u3092\u884c\u3046\uff01<\/h2>\n<p>\u540d\u524d\u89e3\u6c7a\u304c\u3067\u304d\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"brush: plain; highlight: [1]; title: ; notranslate\" title=\"\">\r\n# nslookup\r\n&gt; server 127.0.0.1\r\nDefault server: 127.0.0.1\r\nAddress: 127.0.0.1#53\r\n&gt; router01.loc.lab4ict.com\r\nServer:\t\t127.0.0.1\r\nAddress:\t127.0.0.1#53\r\n\r\nName:\trouter01.loc.lab4ict.com\r\nAddress: 10.1.0.1\r\n&gt; server 10.1.20.1\r\nDefault server: 10.1.20.1\r\nAddress: 10.1.20.1#53\r\n&gt; router01.loc.lab4ict.com\r\nServer:\t\t10.1.20.1\r\nAddress:\t10.1.20.1#53\r\n\r\nName:\trouter01.loc.lab4ict.com\r\nAddress: 10.1.0.1\r\n&gt; www.google.com\r\nServer:\t\t10.1.20.1\r\nAddress:\t10.1.20.1#53\r\n\r\nNon-authoritative answer:\r\nName:\twww.google.com\r\nAddress: 142.250.207.4\r\nName:\twww.google.com\r\nAddress: 2404:6800:4004:820::2004\r\n<\/pre>\n<h2>\u304a\u308f\u308a\u306b<\/h2>\n<p>Unbound\u3092\u4f7f\u7528\u3059\u308b\u3068\u3001bind\u306e\u3088\u3046\u306b\u30be\u30fc\u30f3\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u6210\u3057\u306a\u304f\u3066\u3082\u3001\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306b\u76f4\u63a5\u540d\u524d\u89e3\u6c7a\u306e\u30ec\u30b3\u30fc\u30c9\u3092\u8a18\u8ff0\u3059\u308b\u65b9\u6cd5\u3067\u3001\u540d\u524d\u89e3\u6c7a\u3092\u884c\u3046\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<h2>\u95a2\u9023\u8a18\u4e8b<\/h2>\n<div class=\"sc_getpost\"><a class=\"clearfix\" href=\"https:\/\/lab4ict.com\/system\/archives\/10355\" ><div class=\"sc_getpost_thumb post-box-thumbnail__wrap\"><img decoding=\"async\" src=\"data:image\/gif;base64,R0lGODdhAQABAPAAAN3d3QAAACwAAAAAAQABAAACAkQBADs=\" width=\"150\" height=\"150\" alt=\"\u3010\u8a18\u4e8b\u4e00\u89a7\u3011 \u30b5\u30fc\u30d0\u74b0\u5883\u3092\u69cb\u7bc9\u3059\u308b\uff01\" loading=\"lazy\" data-src=\"https:\/\/lab4ict.com\/system\/wp-content\/uploads\/2022\/11\/eyecatch_serverapps_01-150x150.png\" class=\"lazyload\"><\/div><div class=\"title\">\u3010\u8a18\u4e8b\u4e00\u89a7\u3011 \u30b5\u30fc\u30d0\u74b0\u5883\u3092\u69cb\u7bc9\u3059\u308b\uff01<\/div><div class=\"substr\">\u5404\u7a2e\u30b5\u30fc\u30d0\u74b0\u5883\u3092\u69cb\u7bc9\u3059\u308b\u305f\u3081\u306e\u8a18\u4e8b\u4e00\u89a7\u3092\u63b2\u8f09\u3057\u307e\u3059\u3002...<\/div><\/a><\/div>\n<div class=\"sc_getpost\"><a class=\"clearfix\" href=\"https:\/\/lab4ict.com\/system\/archives\/4965\" ><div class=\"sc_getpost_thumb post-box-thumbnail__wrap\"><img decoding=\"async\" src=\"data:image\/gif;base64,R0lGODdhAQABAPAAAN3d3QAAACwAAAAAAQABAAACAkQBADs=\" width=\"150\" height=\"150\" alt=\"\u3010\u8a18\u4e8b\u4e00\u89a7\u3011RHEL\u7cfb\u306eOS\u3092\u4f7f\u3044\u3053\u306a\u3059\uff01\" loading=\"lazy\" data-src=\"https:\/\/lab4ict.com\/system\/wp-content\/uploads\/2022\/04\/fi_rhel_01-150x150.png\" class=\"lazyload\"><\/div><div class=\"title\">\u3010\u8a18\u4e8b\u4e00\u89a7\u3011RHEL\u7cfb\u306eOS\u3092\u4f7f\u3044\u3053\u306a\u3059\uff01<\/div><div class=\"substr\">RHEL\u7cfb\u306eOS\u3092\u4f7f\u3044\u3053\u306a\u3059\u305f\u3081\u306e\u8a18\u4e8b\u4e00\u89a7\u3092\u63b2\u8f09\u3057\u307e\u3059\u3002...<\/div><\/a><\/div>\n<h2>\u53c2\u8003\u66f8\u7c4d\uff08Amazon\uff09<\/h2>\n<p><iframe sandbox=\"allow-popups allow-scripts allow-modals allow-forms allow-same-origin\" style=\"width:120px;height:240px;\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" frameborder=\"0\" src=\"\/\/rcm-fe.amazon-adsystem.com\/e\/cm?lt1=_blank&bc1=000000&IS2=1&bg1=FFFFFF&fc1=000000&lc1=0000FF&t=infotecr-22&language=ja_JP&o=9&p=8&l=as4&m=amazon&f=ifr&ref=as_ss_li_til&asins=B0B3QSS8DT&linkId=084bc293878287f1edff8e093bf34311\"><\/iframe><\/p>\n<hr \/>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Rocky Linux 9\u3092\u4f7f\u7528\u3057\u3066\u3001Unbound\u3067DNS\u30b5\u30fc\u30d0\u3092\u69cb\u7bc9\u3057\u307e\u3059\u3002\u5b85\u5185\u306e\u5c0f\u898f\u6a21\u306a\u74b0\u5883\u306e\u540d\u524d\u89e3\u6c7a\u7528\u306e\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n","protected":false},"author":1,"featured_media":14987,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[232],"tags":[602,600,308,467,469,603,52],"class_list":["post-12541","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server-applications","tag-alma-linux","tag-dns","tag-rhel","tag-rocky-linux","tag-rocky-linux-9","tag-unbound","tag-52"],"_links":{"self":[{"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/posts\/12541","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/comments?post=12541"}],"version-history":[{"count":18,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/posts\/12541\/revisions"}],"predecessor-version":[{"id":15743,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/posts\/12541\/revisions\/15743"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/media\/14987"}],"wp:attachment":[{"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/media?parent=12541"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/categories?post=12541"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lab4ict.com\/system\/wp-json\/wp\/v2\/tags?post=12541"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}