DNSPROXY(1) BSD General Commands Manual DNSPROXY(1)NAME
dnsproxy -- DNS proxy
SYNOPSIS
dnsproxy [-dhV] [-c file]
DESCRIPTION
The dnsproxy daemon waits for nameserver queries on a user specified address, dispatches these queries to authoritative and recursive name-
servers and forwards the received answers back to the original client.
The options are as follows:
-c file Read configuration from file.
-d Detach from current terminal and run as background process.
-h Show usage.
-V Show version.
If a client from an internal IP address does a recursive lookup the query is forwarded to a recursive DNS server. Authoritative queries and
queries coming from clients in foreign networks are forwarded to an authoritative DNS server.
CONFIGURATION FILE
At startup dnsproxy reads a configuration file specified via the -c option or at the default location of /etc/dnsproxy.conf.
The following keywords are recognized:
authoritative IP
Address of the authoritative nameserver [required].
recursive IP
Address of the recursive nameserver [required].
listen IP
Local address (defaults to 0.0.0.0).
port number
Local port number (defaults to 53).
chroot path
A path to chroot to before starting to answer queries.
user name
A user to change to before starting to answer queries.
authoritative-timeout seconds
Time in seconds when authoritative queries time out (defaults to 10).
recursive-timeout seconds
Time in seconds when recursive queries time out (defaults to 90).
authoritative-port number
Port number on authoritative nameserver (defaults to 53).
recursive-port number
Port number on recursive nameserver (defaults to 53).
statistics seconds
Period between output of statistics (defaults to 3600). Use 0 to disable output of statistics completely.
internal network
Declare networks recognized as internal and thus eligible to do recursive queries. One network in CIDR notation per keyword.
EXAMPLE
authoritative 10.1.1.1
recursive 127.0.0.1
recursive-port 10053
listen 192.168.1.1
port 53
chroot /var/empty
user nobody
internal 192.168.1.0/24
internal 127.0.0.1
STATISTICS
Every hour (by default) dnsproxy logs the collected statistics about its usage to standard error (or syslog when running detached). Statis-
tics look like
ActiveQr AuthorQr RecursQr AllQuery Answered
0 0 0 0 0
TimeoutQ DroppedQ DroppedA LateAnsw HashColl
0 0 0 0 0
and have the following meaning:
ActiveQr
Number of currently active queries proxied to the servers.
AuthorQr
Accumulated number of authoritative queries.
RecursQr
Accumulated number of recursive queries.
AllQuery
Accumulated number of all queries ever received.
Answered
Accumulated number of answered queries.
TimeoutQ
Accumulated number of queries that did not receive an answer in time.
DroppedQ
Accumulated number of dropped queries (e.g. transmission errors).
DroppedA
Accumulated number of dropped answers.
LateAnsw
Accumulated number of answers received after the timeout period.
HashColl
Accumulated number of hash collisions in the query list.
SEE ALSO named(1)VERSION
This manual page describes dnsproxy version 1.16.
AUTHORS
Armin Wolfermann <armin@wolfermann.org>
The dnsproxy homepage is at http://www.wolfermann.org/dnsproxy.html.
LOCAL November 29, 2003 LOCAL
Check Out this Related Man Page
unbound(8) unbound 1.5.1 unbound(8)NAME
unbound - Unbound DNS validating resolver 1.5.1.
SYNOPSIS
unbound [-h] [-d] [-v] [-c cfgfile]
DESCRIPTION
Unbound is a caching DNS resolver.
It uses a built in list of authoritative nameservers for the root zone (.), the so called root hints. On receiving a DNS query it will ask
the root nameservers for an answer and will in almost all cases receive a delegation to a top level domain (TLD) authoritative nameserver.
It will then ask that nameserver for an answer. It will recursively continue until an answer is found or no answer is available (NXDO-
MAIN). For performance and efficiency reasons that answer is cached for a certain time (the answer's time-to-live or TTL). A second query
for the same name will then be answered from the cache. Unbound can also do DNSSEC validation.
To use a locally running Unbound for resolving put
nameserver 127.0.0.1
into resolv.conf(5).
If authoritative DNS is needed as well using nsd(8), careful setup is required because authoritative nameservers and resolvers are using
the same port number (53).
The available options are:
-h Show the version and commandline option help.
-c cfgfile
Set the config file with settings for unbound to read instead of reading the file at the default location,
/var/unbound/unbound.conf. The syntax is described in unbound.conf(5).
-d Debug flag: do not fork into the background, but stay attached to the console. This flag will also delay writing to the log file
until the thread-spawn time, so that most config and setup errors appear on stderr. If given twice or more, logging does not switch
to the log file or to syslog, but the log messages are printed to stderr all the time.
-v Increase verbosity. If given multiple times, more information is logged. This is in addition to the verbosity (if any) from the
config file.
SEE ALSO unbound.conf(5), unbound-checkconf(8), nsd(8).
AUTHORS
Unbound developers are mentioned in the CREDITS file in the distribution.
NLnet Labs Dec 8, 2014 unbound(8)