Unbound unbound_manager (Manager/Installer utility for unbound - Recursive DNS Server)

[thiggins]

Unless you can cite documentation/metrics to substantiate your proposal, with all due respect I suggest you keep your dubious hints and tips in your own thread.

Saying "with all due respect" does not negate the "dubious" slight in the remainder of the sentence.

This is an open thread, where all can post. Some suggestions may be less helpful than others.Be kinder in your responses.

 

[Centrifuge]

Just a question about unbound behavior. I've had an uptime of 9 days on the router, and I've collecting s+ stats during that time. In the script the unbound uptime is never over 24 hours. it looks like it resets around 5am.

Mar 13 05:00:25 RT-AC86U-AD98 S61unbound: Starting Unbound DNS server /opt/etc/init.d/S61unbound

Is this resetting the cache? I'm getting an average of around 65% hit rate. according to the stats report. Overall there has been a downward trend in the hit rate. Just wondering if this is operating correctly.

 

[dave14305]

Just a question about unbound behavior. I've had an uptime of 9 days on the router, and I've collecting s+ stats during that time. In the script the unbound uptime is never over 24 hours. it looks like it resets around 5am.

Mar 13 05:00:25 RT-AC86U-AD98 S61unbound: Starting Unbound DNS server /opt/etc/init.d/S61unbound

Is this resetting the cache? I'm getting an average of around 65% hit rate. according to the stats report. Overall there has been a downward trend in the hit rate. Just wondering if this is operating correctly.

The adblock script restarts Unbound when it runs. I wonder if it would be less impactful to just run unbound-control reload?

 

[SomeWhereOverTheRainBow]

The adblock script restarts Unbound when it runs. I wonder if it would be less impactful to just run unbound-control reload?

Unbound reload would be better. As it is only applying new changes and not starting a new instance.

 

[SomeWhereOverTheRainBow]

Just a question about unbound behavior. I've had an uptime of 9 days on the router, and I've collecting s+ stats during that time. In the script the unbound uptime is never over 24 hours. it looks like it resets around 5am.

Mar 13 05:00:25 RT-AC86U-AD98 S61unbound: Starting Unbound DNS server /opt/etc/init.d/S61unbound

Is this resetting the cache? I'm getting an average of around 65% hit rate. according to the stats report. Overall there has been a downward trend in the hit rate. Just wondering if this is operating correctly.

This is a very good question, keep in mind that 60 to 65 percent seems pretty consistant with what I have seen with other users examples mine ranges from 60 to 79 percent. Your browsing habits also come into play with the cache if you are not a repetitive surfer(I.e go to different websites vs using the same) this can play a factor to this. Here is mine for the last 24 hours

 

[juched]

This is a very good question, keep in mind that 60 to 65 percent seems pretty consistant with what I have seen with other users examples mine ranges from 60 to 79 percent. Your browsing habits also come into play with the cache if you are not a repetitive surfer(I.e go to different websites vs using the same) this can play a factor to this. Here is mine for the last 24 hours
View attachment 21905

Mine quickly gets back to 93-94%. Must be all the google home devices pounding the same 4 domains.

 

[Centrifuge]

The adblock script restarts Unbound when it runs.

The Diversion script or native unbound adblock? I'm using Diversion, w/stats.

 

[Centrifuge]

Your browsing habits

Yeah, but wondering about that hit every 24 hours. Also, there was a period prior to some unbound_manager updates, see March 6-7, where it was doing better, could be an artifact of local use I guess.

 

[juched]

Yeah, but wondering about that hit every 24 hours. Also, there was a period prior to some unbound_manager updates, see March 6-7, where it was doing better, could be an artifact of local use I guess.
View attachment 21910

Built in adblock does update nightly and the restart does cause a hit drop.

This drop is temporary and likely has a negligible impact on your browsing.

 

[juched]

The Diversion script or native unbound adblock? I'm using Diversion, w/stats.

Diversion should not. That is done ahead of unbound in dnsmasq. I am trying that and do not see a nightly drop.

 

[martinr]

Diversion should not. That is done ahead of unbound in dnsmasq. I am trying that and do not see a nightly drop.

I can confirm: no nightly drop with Diversion:

 

[dave14305]

The Diversion script or native unbound adblock? I'm using Diversion, w/stats.

Have you ever used Unbound Adblock? Maybe the cron job is still there?

 

[Ubimo]

@martinr & @Centrifuge
Your cache hits are kinda low. I get up to 98% in 24h. ~ 88.000 queries.

 

[bluzfanmr1]

@martinr & @Centrifuge
Your cache hits are kinda low. I get up to 98% in 24h. ~ 88.000 queries.

Care to share your unbound.conf file? My cache hits tend to be lower, and I do realize it depends on your own habits, but I'd like to tweak things if necessary for optimal effect.

 

[dave14305]

Care to share your unbound.conf file? My cache hits tend to be lower, and I do realize it depends on your own habits, but I'd like to tweak things if necessary for optimal effect.

For all my interest in Unbound, I only ever see about a 10% hit rate. But I’m still happy.

 

[juched]

The adblock script restarts Unbound when it runs. I wonder if it would be less impactful to just run unbound-control reload?

@Martineau, what do you think? Would a reload suffice? I think so, but would that cause a problem if I changed to use "unbound-control reload" during the install?

From my quick testing, a reload still causes a hit percentage to drop, and the cache file to drop in size. So, until we can confirm it is best to stay with restart.

 

[juched]

I have posted v1.0.5 of the adblock script:

- Output a version header so it is clear what version you are running
- Cleaned up text and wording to be more consistent
- Added counters to the out for which file is being downloaded (ie. downloading list 1 of 3) - Thank you @SomeWhereOverTheRainBow
- Added support for hosts or domain files which include # comments after the domain name - Thank you again @SomeWhereOverTheRainBow

An Example of this is https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt

This requires you to use the "i" command in unbound_manager to download the latest file.

 

[dave14305]

@Martineau, what do you think? Would a reload suffice? I think so, but would that cause a problem if I changed to use "unbound-control reload" during the install?

From my quick testing, a reload still causes a hit percentage to drop, and the cache file to drop in size. So, until we can confirm it is best to stay with restart.

It was more a suggestion to keep the uptime from resetting. You’d still want to dump and save the cache during a reload.

 

[Ubimo]

Care to share your unbound.conf file? My cache hits tend to be lower, and I do realize it depends on your own habits, but I'd like to tweak things if necessary for optimal effect.

I havn't configured anything special.
I just install unbound via unbound_manager, chose the "tweak my settings" (or something like that) and let it run.
That's all.

 

[juched]

It was more a suggestion to keep the uptime from resetting. You’d still want to dump and save the cache during a reload.

Ya, it is a good idea, but I find that dumping and reloading the cache seems to cause a hit percentage drop. My guess, although not researched yet, is that when you dump and reload all the "expired" entries get dropped. And unbound is configured to use expired entries and do a background update to keep things fast, but this would see a short hit after reload.