unbound uses the remote Root DNS servers and does not encrypt DNS up-stream requests, so your ISP is technically able to track all of your DNS requests i.e. DNS profiling.
admin@RT-AC86U-6160:/jffs/scripts# amtm
This updates and upgrades Entware packages
_____________________________________________
Continue? [1=Yes e=Exit] 1
Downloading http://bin.entware.net/aarch64-k3.10/Packages.gz
Updated list of available packages in /opt/var/opkg-lists/entware
Upgrading syslog-ng on root from 3.27.1-1 to 3.27.1-2...
Downloading http://bin.entware.net/aarch64-k3.10/syslog-ng_3.27.1-2_aarch64-3.10.ipk
Upgrading column on root from 2.35.1-2 to 2.36-1...
Downloading http://bin.entware.net/aarch64-k3.10/column_2.36-1_aarch64-3.10.ipk
Upgrading libc on root from 2.27-9 to 2.27-10...
Downloading http://bin.entware.net/aarch64-k3.10/libc_2.27-10_aarch64-3.10.ipk
Upgrading libpthread on root from 2.27-9 to 2.27-10...
Downloading http://bin.entware.net/aarch64-k3.10/libpthread_2.27-10_aarch64-3.10.ipk
Upgrading glib2 on root from 2.58.3-5 to 2.65.2-1...
Downloading http://bin.entware.net/aarch64-k3.10/glib2_2.65.2-1_aarch64-3.10.ipk
Removing obsolete file /opt/lib/libgobject-2.0.so.0.5800.3.
Removing obsolete file /opt/lib/libgio-2.0.so.0.5800.3.
Removing obsolete file /opt/lib/libglib-2.0.so.0.5800.3.
Removing obsolete file /opt/lib/libgmodule-2.0.so.0.5800.3.
Removing obsolete file /opt/lib/libgthread-2.0.so.0.5800.3.
Upgrading libcurl on root from 7.70.0-1 to 7.72.0-2...
Downloading http://bin.entware.net/aarch64-k3.10/libcurl_7.72.0-2_aarch64-3.10.ipk
Upgrading libcap on root from 2.33-2 to 2.43-1...
Downloading http://bin.entware.net/aarch64-k3.10/libcap_2.43-1_aarch64-3.10.ipk
Removing obsolete file /opt/lib/libcap.so.2.33.
Upgrading libpcre on root from 8.43-2 to 8.44-2...
Downloading http://bin.entware.net/aarch64-k3.10/libpcre_8.44-2_aarch64-3.10.ipk
Removing obsolete file /opt/lib/libpcreposix.so.0.0.6.
Removing obsolete file /opt/lib/libpcre.so.1.2.11.
Upgrading grep on root from 3.4-1 to 3.4-2...
Downloading http://bin.entware.net/aarch64-k3.10/grep_3.4-2_aarch64-3.10.ipk
Upgrading oniguruma on root from 6.9.5_rev1-2 to 6.9.5_rev1-3...
Downloading http://bin.entware.net/aarch64-k3.10/oniguruma_6.9.5_rev1-3_aarch64-3.10.ipk
Upgrading libdbi on root from 0.9.0-4 to 0.9.0-5...
Downloading http://bin.entware.net/aarch64-k3.10/libdbi_0.9.0-5_aarch64-3.10.ipk
Upgrading ntpd on root from 4.2.8p13-4 to 4.2.8p15-2...
Downloading http://bin.entware.net/aarch64-k3.10/ntpd_4.2.8p15-2_aarch64-3.10.ipk
Upgrading sqlite3-cli on root from 3320100-1 to 3330000-1...
Downloading http://bin.entware.net/aarch64-k3.10/sqlite3-cli_3330000-1_aarch64-3.10.ipk
Upgrading logrotate on root from 3.15.0-2 to 3.16.0-2...
Downloading http://bin.entware.net/aarch64-k3.10/logrotate_3.16.0-2_aarch64-3.10.ipk
Upgrading libstdcpp on root from 8.4.0-9 to 8.4.0-10...
Downloading http://bin.entware.net/aarch64-k3.10/libstdcpp_8.4.0-10_aarch64-3.10.ipk
Upgrading libjson-c on root from 0.13.1-2 to 0.14-2...
Downloading http://bin.entware.net/aarch64-k3.10/libjson-c_0.14-2_aarch64-3.10.ipk
Removing obsolete file /opt/lib/libjson-c.so.4.0.0.
Removing obsolete file /opt/lib/libjson-c.so.4.
Upgrading libgcc on root from 8.4.0-9 to 8.4.0-10...
Downloading http://bin.entware.net/aarch64-k3.10/libgcc_8.4.0-10_aarch64-3.10.ipk
Upgrading libuuid on root from 2.35.1-2 to 2.36-1...
Downloading http://bin.entware.net/aarch64-k3.10/libuuid_2.36-1_aarch64-3.10.ipk
Upgrading libsmartcols on root from 2.35.1-2 to 2.36-1...
Downloading http://bin.entware.net/aarch64-k3.10/libsmartcols_2.36-1_aarch64-3.10.ipk
Upgrading librt on root from 2.27-9 to 2.27-10...
Downloading http://bin.entware.net/aarch64-k3.10/librt_2.27-10_aarch64-3.10.ipk
Upgrading findutils on root from 4.7.0-1 to 4.7.0-2...
Downloading http://bin.entware.net/aarch64-k3.10/findutils_4.7.0-2_aarch64-3.10.ipk
Upgrading htop on root from 2.2.0-2 to 3.0.1-1...
Downloading http://bin.entware.net/aarch64-k3.10/htop_3.0.1-1_aarch64-3.10.ipk
Upgrading libssp on root from 8.4.0-9 to 8.4.0-10...
Downloading http://bin.entware.net/aarch64-k3.10/libssp_8.4.0-10_aarch64-3.10.ipk
Upgrading libsqlite3 on root from 3320100-1 to 3330000-1...
Downloading http://bin.entware.net/aarch64-k3.10/libsqlite3_3330000-1_aarch64-3.10.ipk
Upgrading ntp-utils on root from 4.2.8p13-4 to 4.2.8p15-2...
Downloading http://bin.entware.net/aarch64-k3.10/ntp-utils_4.2.8p15-2_aarch64-3.10.ipk
Configuring libgcc.
Configuring libc.
Configuring libssp.
Configuring libpthread.
Configuring librt.
Configuring libpcre.
Configuring glib2.
Configuring libdbi.
Configuring libjson-c.
Configuring libcurl.
Configuring libuuid.
Configuring syslog-ng.
Configuring libsmartcols.
Configuring column.
Configuring grep.
Configuring oniguruma.
Configuring libcap.
Configuring ntp-utils.
Configuring ntpd.
Configuring libsqlite3.
Configuring sqlite3-cli.
Configuring logrotate.
Configuring libstdcpp.
Configuring findutils.
Configuring htop.
Collected errors:
* resolve_conffiles: Existing conffile /opt/etc/syslog-ng.conf is different from the conffile in the new package. The new conffile will be placed at /opt/etc/syslog-ng.conf-opkg.
_____________________________________________
Enter option 7
_____________________________________________
This installs unbound Manager - Manager/Installer utility for unbound
on your router.
Author: Martineau
https://www.snbforums.com/threads/61669
Contributors: rgnldo, dave14305, SomeWhereOverTheRainbow, Cam, Xentrk, thelonelycoder
_____________________________________________
Continue? [1=Yes e=Exit] 1
Creating 'unbound_manager' alias
+======================================================================+
| Welcome to the unbound Manager/Installation script (Asuswrt-Merlin) |
| |
| Version 3.19 by Martineau |
| |
| Requirements: USB drive with Entware installed |
| |
| 1 = Install unbound DNS Server |
| o1. Enable unbound Logging |
| o2. Integrate with Stubby (Advanced Users) |
| o3. Install Ad and Tracker Blocking |
| o4. Customise CPU/Memory usage |
| o5. Disable Firefox DNS-over-HTTPS (DoH) (USA users) |
| o6. Install Graphical Statistics GUI (Add-ons) TAB |
| o7. Integrate with DoT (Advanced Users) |
| o8. Enable DNS Firewall |
| o9. Install YouTube Ad Blocking |
| |
| |
| See SNBForums thread https://tinyurl.com/s89z3mm for legacy |
| user tips on unbound usage/configuration. |
+======================================================================+
1 = Begin unbound Installation Process 5 = n/a Install Ad and Tracker blocker (Ad Block)
2 = Remove unbound/unbound_manager 6 = n/a Install Graphical Statistics GUI Add-on TAB
3 = n/a Start unbound 7 = n/a Enable DNS Firewall
4 = n/a Show unbound statistics 8 = n/a Install YouTube Ad blocker
? = About Configuration
e = Exit Script [?]
E:Option ==> 1
Initialising 'unbound-control-setup' to generate SSL Keys
/opt/sbin/unbound-control-setup: line 104: getopts: not found
setup in directory /opt/var/lib/unbound
<snip>Initialising 'unbound-control-setup' to generate SSL Keys
/opt/sbin/unbound-control-setup: line 104: getopts: not found
Segmentation fault
Segmentation fault
***ERROR INVALID unbound configuration - use option 'vx' to correct 'unbound.conf' or 'rl' to load a valid configuration file
or 'e' exit; then issue debug command
unbound -dvunbound -dv
[1600008525] unbound[10039:0] notice: Start of unbound 1.11.0.
Sep 13 14:48:45 unbound[10039:0] warning: setrlimit: Operation not permitted
Sep 13 14:48:45 unbound[10039:0] warning: cannot increase max open fds from 1024 to 1080259191
Sep 13 14:48:45 unbound[10039:0] fatal error: too much tcp. not enough fds.getting something similar. updated entware packages, and now seeing:
unbound-checkconf: error while loading shared libraries: libevent-2.1.so.7: cannot open shared object file: No such file or directory
***ERROR INVALID unbound configuration - use option 'vx' to correct 'unbound.conf' or 'rl' to load a valid configuration file
or 'e' exit; then issue debug command
unbound -dvopkg remove libunbound-light
Yes , your solution solved it
opkg remove libunbound-light --force-depends && opkg install libunbound
They eliminated the light and heavy variants in OpenWRT and made regular unbound-daemon a blend of the two.Beat me to it, I was going to recommend:
rather that having to reinstall unbound altogether. I was noticing the conflict for unbound-checkconf.Code:opkg remove libunbound-light --force-depends && opkg install libunbound
Was surprised when it became 'libunbound-light' at the last package update (from 1.9.6 was it?), just looks like we're back to 'libunbound' again now
github.com
The eliminated the light and heavy variants in OpenWRT and made regular unbound-daemon a blend of the two.
net/unbound: sync with openwrt, 2020.09 · Entware/entware-packages@48601ad
Modified OpenWrt feed. Contribute to Entware/entware-packages development by creating an account on GitHub.
In theory, HND users should have better multi-thread capabilities now, if Entware compiled it that way (can’t check on my non-HND router).
Run
unbound -V to see if libevent is linked.
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!
