Unbound - Authoritative Recursive Caching DNS Server

[rgnldo]

ready to compete with Unbound Manager.

Don't worry about any possible competition. There is no such thing. I am excited about the progress this has made. His study and knowledge of the unbound is admirable.
Consider that my stimulus worked for you to fall in love with unbound. I was here alone.
Feel free.
I've been busy lately.

 

[rgnldo]

It gets on my nerves to login into snbforuns with re-captcha (aka google maps A.I) enabled for some countries. Zen foro and its access rules.

 

[L&LD]

I'm taking a hiatus. You'll see the odd bug fix here there, but that's it for a while.

A well-deserved one! Take all the time you need to recharge (and of course you don't need anyone's permission, let alone mine), as I have no doubt that the wait will be worth it.

 

[rgnldo]

As a precaution, I recommend organizing only the basic options with a customized settings box where the user adds advanced options, just like in pfsense.

 

[Skeptical.me]

@rgnldo I hope this is the correct thread as you suggested.

I'm wondering if this looks normal. Unbound appears to use the most RAM

Mem total:903572 anon:108892 map:19728 free:358420
 slab:290284 buf:1008 cache:55668 dirty:8 write:0
Swap total:2097148 free:2097148
  PID^^^VSZ^VSZRW   RSS (SHR) DIRTY (SHR) STACK COMMAND
20536 67712 60800 22040  3192 17736     0   196 unbound -c /opt/v
 1253 60596 42680  3484  2724   760     0   132 amas_lib
 1084 54540 50128 52056  2220 50028   192   132 dnsmasq --log-asy
 2153 49384 43628  6732  3388  2700     0   132 pixelserv-tls 192
  321 18524 16724   876   660   112     0   132 /bin/swmdk
 1238 17160  4428  2872  1824   740     0   132 cfg_server
 1160 15800  7356 10988  3480  6968     0   132 httpds -s -i br0
 6098 14692 10700  1356   992   192     0   132 dcd -i 3600 -p 43
 1219 14620  3024  3136  2588   540     0   132 conn_diag
 1081 14620  3024  2920  2396   524     0   132 /sbin/netool
 2627 13592  4736  3056  1044  1588     0   132 wred -B
    1 13588  1996  4828  2844  1760     0   140 /sbin/init
 1171 12572   980  3320  2728   576     0   132 watchdog
 1057 12572   980  3172  2608   564     0   132 /sbin/wanduck
 1207 12572   980  3132  2580   552     0   132 pctime
 1172 12572   980  3068  2532   536     0   132 check_watchdog
 1788 12572   980  3308  2756   532     0   132 disk_monitor
 1203 12572   980  3068  2540   528     0   132 hour_monitor
 2893 12572   980  3400  2860   528     0   132 bwdpi_wred_alive
 1456 12572   980  3236  2712   524     0   132 usbled
 1117 12572   980  2928  2412   516     0   132 wpsaide
 1176 12572   980  3108  2592   516     0   132 sw_devled
  944 12572   980  2680  2168   512     0   132 console
 1202 12572   980  2992  2480   512     0   132 bwdpi_check
 2901 11944   736  3048  2232   404    12   132 /usr/sbin/smbd -D
 2892 11776   568  2568  2276   196    12   132 /usr/sbin/nmbd -D
 1190 11748  4968  2536  2188   420   128   132 vis-dcon
 1079 11180  2704  1680  1368   304     0   132 nt_monitor
 1201  9652  1328  2320  1896   384     0   132 mastiff

Edit:

• router model: RT-AX88U

• firmware version: 385.15

• services enabled in the firmware: OpenVPN Client 1, and 3

• services installed with AMTM: Diversion standard, Skynet, Unbound_Manager, uiDivstats

• WAN configured connectivity mode (PPPoE, DHCP, DNS): My RT-AX88U is connected via Ethernet to my ISP's Modem/Router

• error or difficulty encountered: Unbound appears to be using a lot of RAM (I am not very knowledgeable about memory usage. I am checking to see if I have a problem).

 

[rgnldo]

I hope this is the correct thread as you suggested.

Try it like this:

1. uninstall Unbound, Diversion and Skynet.
2. Reboot.
3. Install Unbound, Diversion without pixelserv, standard mode, without plus list, and Skynet.

Come back here and report the result

 

[dave14305]

An update in lieu of taking my wife out for Valentine's Day...

Suggestions for things to add/remove would be appreciated as I'm getting the hang of this now.

 

[rgnldo]

An update in lieu of taking my wife out for Valentine's Day...

Suggestions for things to add/remove would be appreciated as I'm getting the hang of this now.

Great work

 

[Skeptical.me]

Try it like this:

1. uninstall Unbound, Diversion and Skynet.
2. Reboot.
3. Install Unbound, Diversion without pixelserv, standard mode, without plus list, and Skynet.

Come back here and report the result

Thanks.

I have done as you advised:

Mem total:903572 anon:59180 map:18456 free:412996
 slab:289692 buf:928 cache:51660 dirty:24 write:0
Swap total:2097148 free:2097148
  PID^^^VSZ^VSZRW   RSS (SHR) DIRTY (SHR) STACK COMMAND
21166 63708 56796 17236   952 13028     0   200 unbound -c /opt/v
 1252 60588 42672  3472  2716   756     0   132 amas_lib
 1160 21296 12952 15796  3372 12348     0   132 httpds -s -i br0
  321 18524 16724   876   664   108     0   132 /bin/swmdk
 1219 14620  3024  3160  2612   540     0   132 conn_diag
 1081 14620  3024  2900  2376   524     0   132 /sbin/netool
 2135 13668  8788  1188   952   184     0   132 dcd -i 3600 -p 43
    1 13592  2000  4888  2892  1768     0   140 /sbin/init
 2146 13592  4728  3036  1052  1560     0   132 wred -B
 1171 12572   980  3336  2756   576     0   132 watchdog
 1057 12572   980  3172  2608   564     0   132 /sbin/wanduck
 1204 12572   980  3136  2580   556     0   132 pctime
 1172 12572   980  3048  2512   536     0   132 check_watchdog
 1777 12572   980  3308  2772   532     0   132 disk_monitor
 1203 12572   980  3040  2512   528     0   132 hour_monitor
 2343 12572   980  3380  2844   528     0   132 bwdpi_wred_alive
 1443 12572   980  3156  2632   524     0   132 usbled
 1177 12572   980  3144  2624   520     0   132 sw_devled
 1198 12572   980  2996  2480   516     0   132 bwdpi_check
  944 12572   980  2608  2096   512     0   132 console
 1117 12572   980  2872  2360   512     0   132 wpsaide
 1237 12040  2016  2700  1824   564     0   132 cfg_server
 2067 11944   736  2980  2184   404    12   132 /usr/sbin/smbd -D
 2065 11776   568  2632  2280   196    12   132 /usr/sbin/nmbd -D
 1190 11748  4968  2456  2112   416   128   132 vis-dcon
 1079 11180  2704  1708  1396   304     0   132 nt_monitor
 1197  9652  1328  2304  1880   384     0   132 mastiff
 1161  9424  1080  3896  3444   452     0   132 httpd -i br0
 1094  9292  1692  2304  1524   404     0   132 nt_center
 1194  9156  4680  5880  1484  4340     0   132 networkmap --boot
21801  9004  4592  6552  2248  4408   116   132 dnsmasq --log-asy
 1444  7700  3456  1584  1276   272     0   132 u2ec
 4321  7400   824  4420  3804   616     0   132 {vpnclient2} /etc
 1113  7088   396  2456  2116   332     0   132 hostapd -B /tmp/w
 1116  7088   396  2440  2108   328     0   132 hostapd -B /tmp/w
 4150  6928   660  4200  3684   516     0   132 {vpnclient1} /etc
 1165  5476   488  2012  1816   324   128   132 vis-dcon
 1080  5476  1508  1196   964   216     0   132 protect_srv
 1167  4880   488  1940  1648   232     0   132 vis-datacollector
21802  4780   368  1464  1372   208   116   132 dnsmasq --log-asy
 1211  4748  1368  1140   976   140     0   132 nt_actMail

 

[Kingp1n]

An update in lieu of taking my wife out for Valentine's Day...

Suggestions for things to add/remove would be appreciated as I'm getting the hang of this now.

Under performance tuning should buffer size default read 1472 vs 4096 color coded orange?

 

[SuperDuke]

An update in lieu of taking my wife out for Valentine's Day...

Suggestions for things to add/remove would be appreciated as I'm getting the hang of this now.

Gotta say, your wife might not appreciate this on this here Valentine's Day.....but I sure as heck do..... This looks awesome!

My wife just joked last night that I was spending too much time screwing around with the laptop/router etc....haha...…

Now enough of the dev work and go have yourself a fine dinner (and with some luck, luck)

 

[dave14305]

Under performance tuning should buffer size default read 1472 vs 4096 color coded orange?

I'm basing it on unbound built-in defaults, which is 4096. OpenWRT default is 1280. Our starting point had been 1472 since early on, so that's how I set mine. You can choose your own adventure.

 

[dave14305]

My wife just joked last night that I was spending too much time screwing around with the laptop/router etc....haha...…

At least it was an inanimate object and not a person.

Now enough of the dev work and go have yourself a fine dinner (and with some luck, luck)

My odds are better with the router.

 

[Skeptical.me]

Thank you very much for your assistance @rgnldo much appreciated.

Try it like this:

1. uninstall Unbound, Diversion and Skynet.
2. Reboot.
3. Install Unbound, Diversion without pixelserv, standard mode, without plus list, and Skynet.

Come back here and report the result

@rgnldo I hope this is the correct thread as you suggested.

I'm wondering if this looks normal. Unbound appears to use the most RAM

Mem total:903572 anon:108892 map:19728 free:358420
 slab:290284 buf:1008 cache:55668 dirty:8 write:0
Swap total:2097148 free:2097148
  PID^^^VSZ^VSZRW   RSS (SHR) DIRTY (SHR) STACK COMMAND
20536 67712 60800 22040  3192 17736     0   196 unbound -c /opt/v
 1253 60596 42680  3484  2724   760     0   132 amas_lib
 1084 54540 50128 52056  2220 50028   192   132 dnsmasq --log-asy
 2153 49384 43628  6732  3388  2700     0   132 pixelserv-tls 192
  321 18524 16724   876   660   112     0   132 /bin/swmdk
 1238 17160  4428  2872  1824   740     0   132 cfg_server
 1160 15800  7356 10988  3480  6968     0   132 httpds -s -i br0
 6098 14692 10700  1356   992   192     0   132 dcd -i 3600 -p 43
 1219 14620  3024  3136  2588   540     0   132 conn_diag
 1081 14620  3024  2920  2396   524     0   132 /sbin/netool
 2627 13592  4736  3056  1044  1588     0   132 wred -B
    1 13588  1996  4828  2844  1760     0   140 /sbin/init
 1171 12572   980  3320  2728   576     0   132 watchdog
 1057 12572   980  3172  2608   564     0   132 /sbin/wanduck
 1207 12572   980  3132  2580   552     0   132 pctime
 1172 12572   980  3068  2532   536     0   132 check_watchdog
 1788 12572   980  3308  2756   532     0   132 disk_monitor
 1203 12572   980  3068  2540   528     0   132 hour_monitor
 2893 12572   980  3400  2860   528     0   132 bwdpi_wred_alive
 1456 12572   980  3236  2712   524     0   132 usbled
 1117 12572   980  2928  2412   516     0   132 wpsaide
 1176 12572   980  3108  2592   516     0   132 sw_devled
  944 12572   980  2680  2168   512     0   132 console
 1202 12572   980  2992  2480   512     0   132 bwdpi_check
 2901 11944   736  3048  2232   404    12   132 /usr/sbin/smbd -D
 2892 11776   568  2568  2276   196    12   132 /usr/sbin/nmbd -D
 1190 11748  4968  2536  2188   420   128   132 vis-dcon
 1079 11180  2704  1680  1368   304     0   132 nt_monitor
 1201  9652  1328  2320  1896   384     0   132 mastiff

Edit:

• router model: RT-AX88U

• firmware version: 385.15

• services enabled in the firmware: OpenVPN Client 1, and 3

• services installed with AMTM: Diversion standard, Skynet, Unbound_Manager, uiDivstats

• WAN configured connectivity mode (PPPoE, DHCP, DNS): My RT-AX88U is connected via Ethernet to my ISP's Modem/Router

• error or difficulty encountered: Unbound appears to be using a lot of RAM (I am not very knowledgeable about memory usage. I am checking to see if I have a problem).

 

[Delusion]

An update in lieu of taking my wife out for Valentine's Day...

Suggestions for things to add/remove would be appreciated as I'm getting the hang of this now.

Spoiler

This will be a great addition :

num-threads:
msg-cache-slabs:
rrset-cache-slabs:
infra-cache-slabs:
key-cache-slabs:
# tiny memory cache
key-cache-size:
msg-cache-size:
rrset-cache-size:
cache-max-ttl:

incoming-num-tcp:
outgoing-num-tcp:
ip-ratelimit:

 

[dave14305]

This will be a great addition :

num-threads:
msg-cache-slabs:
rrset-cache-slabs:
infra-cache-slabs:
key-cache-slabs:
# tiny memory cache
key-cache-size:
msg-cache-size:
rrset-cache-size:
cache-max-ttl:

incoming-num-tcp:
outgoing-num-tcp:
ip-ratelimit:

The caches and num-tcp are derived from the size dropdown, based on the values suggested by OpenWRT. Interestingly, OpenWRT does not allow more than 1 thread if unbound is not compiled without libevent, which Entware is not, so I've currently followed this logic and removed number of threads since our Unbound isn't optimized to take advantage. I could be very wrong, but that's also why there will be an allowance for a custom include file.

If I get time to get fancy, I could try to add a "custom" option in the dropdown that would expose those fields for custom values.

Thanks for the feedback!

 

[Delusion]

The caches and num-tcp are derived from the size dropdown, based on the values suggested by OpenWRT. Interestingly, OpenWRT does not allow more than 1 thread if unbound is not compiled without libevent, which Entware is not, so I've currently followed this logic and removed number of threads since our Unbound isn't optimized to take advantage. I could be very wrong, but that's also why there will be an allowance for a custom include file.

If I get time to get fancy, I could try to add a "custom" option in the dropdown that would expose those fields for custom values.

Thanks for the feedback!

But if you run 'TOP' or check the log, you can see it creates more threads according to the 'num-threads' you enter

 

[rgnldo]

'num-threads' you enter

As I was used to unbound on other x86_x64 systems, I thought that threads would be enabled. In the case of ARM environments, the modes change according to the compilation.
The multi-thread function depends on the libevent library to organize itself. What you see in the LOG's is the unbound executing something in a vacuum, with no effect. In summary, there is no libevent support for unbound in the ENTWARE repository. It is not necessary.

 

[L&LD]

@dave14305, I would love to see a new page appear with the full unbound.conf file (even if in view-only mode).

 

[ika]

As I was used to unbound on other x86_x64 systems, I thought that threads would be enabled. In the case of ARM environments, the modes change according to the compilation.
The multi-thread function depends on the libevent library to organize itself. What you see in the LOG's is the unbound executing something in a vacuum, with no effect. In summary, there is no libevent support for unbound in the ENTWARE repository. It is not necessary.

I have always thought that "num-threads" are for software threads on a single core, and not for distributing unbound to multiply physical cores.