priming and dnskey

T.Suzuki tss at reflection.co.jp
Fri Aug 4 01:14:19 UTC 2017


On Thu, 3 Aug 2017 16:04:56 +0200
"W.C.A. Wijngaards via Unbound-users" <unbound-users at unbound.net> wrote:

> Hi T.Suzuki,
> 
> I don't know why it is querying for the root DNSKEY for you.  It should
> not do that, unless a client asked for it.

There is no client at startup.

> Do you have verbosity 5 debug logs?  Perhaps this config file is not the
> actual config file used by your resolver?

The config is the server's. B
Because I got verbosity 5 debug log by changing the config file.
And, I got root.key again :-)

Thank you.

# /usr/local/etc/rc.d/unbound start
Obtaining a trust anchor:.
Starting unbound.
[1501809138] unbound[11716:0] debug: creating udp4 socket 127.0.0.2 53
[1501809138] unbound[11716:0] debug: creating tcp4 socket 127.0.0.2 53
[1501809138] unbound[11716:0] debug: creating tcp6 socket ::1 8953
[1501809138] unbound[11716:0] debug: creating tcp4 socket 127.0.0.1 8953
[1501809138] unbound[11716:0] debug: setup SSL certificates
root at meme:/usr/local/etc/unbound # cat unbound.log 
[1501809138] unbound[11717:0] debug: module config: "iterator"
[1501809138] unbound[11717:0] notice: init module 0: iterator
[1501809138] unbound[11717:0] debug: target fetch policy for level 0 is 3
[1501809138] unbound[11717:0] debug: target fetch policy for level 1 is 2
[1501809138] unbound[11717:0] debug: target fetch policy for level 2 is 1
[1501809138] unbound[11717:0] debug: target fetch policy for level 3 is 0
[1501809138] unbound[11717:0] debug: target fetch policy for level 4 is 0
[1501809138] unbound[11717:0] debug: total of 59485 outgoing ports available
[1501809138] unbound[11717:0] debug: start threads
[1501809138] unbound[11717:0] debug: mini-event internal user select method.
[1501809138] unbound[11717:0] debug: no config, using builtin root hints.
[1501809138] unbound[11717:0] debug: cache memory msg=66072 rrset=66072 infra=5224 val=0
[1501809138] unbound[11717:0] info: start of service (unbound 1.6.3).

-- 
------------------------------------------------------------------------------
T.Suzuki 



More information about the Unbound-users mailing list