Lines Matching +full:cpu +full:- +full:viewed

1 .TH "unbound-control" "8" "Jul 16, 2025" "NLnet Labs" "unbound 1.23.1"
3 .\" unbound-control.8 -- unbound remote control manual
11 .B unbound\-control,
12 .B unbound\-control\-setup
13 \- Unbound remote server control utility.
15 .B unbound\-control
16 .RB [ \-hq ]
17 .RB [ \-c
19 .RB [ \-s
23 .B Unbound\-control
30 .B \-h
33 .B \-c \fIcfgfile
37 .B \-s \fIserver[@port]
41 .B \-q
49 with the config file specified using \fI\-c\fR or the default config file.
89 access-control and similar options,
90 interface-action and similar options and
91 tcp-connection-limit.
93 define-tag
96 insecure-lan-zones,
97 domain-insecure,
98 trust-anchor-file,
99 trust-anchor,
100 trusted-keys-file,
101 auto-trust-anchor-file,
102 edns-client-string,
104 log-identity,
105 infra-cache-numhosts,
106 msg-cache-size,
107 rrset-cache-size,
108 key-cache-size,
109 ratelimit-size,
110 neg-cache-size,
111 num-queries-per-thread,
112 jostle-timeout,
113 use-caps-for-id,
114 unwanted-reply-threshold,
115 tls-use-sni,
116 outgoing-tcp-mss,
117 ip-dscp,
118 max-reuse-tcp-queries,
119 tcp-reuse-timeout,
120 tcp-auth-query-timeout,
121 delay-close.
125 outgoing-interface changes,
128 outgoing-port-permit,
129 outgoing-port-avoid,
130 msg-buffer-size,
131 any **\*-slabs** options and
132 statistics-interval changes.
135 dnstap-log-resolver-query-messages,
136 dnstap-log-resolver-response-messages,
137 dnstap-log-client-query-messages,
138 dnstap-log-client-response-messages,
139 dnstap-log-forwarder-query-messages and
140 dnstap-log-forwarder-response-messages.
143 dnstap-enable,
144 dnstap-bidirectional,
145 dnstap-socket-path,
146 dnstap-ip,
147 dnstap-tls,
148 dnstap-tls-server-name,
149 dnstap-tls-cert-bundle,
150 dnstap-tls-client-key-file and
151 dnstap-tls-client-cert-file.
154 dnstap-send-identity,
155 dnstap-send-version,
156 dnstap-identity, and
157 dnstap-version can be loaded
173 updated at the same time, so that they are viewed consistently, either old
183 that fast reload works on without the nopause option: val-bogus-ttl,
184 val-override-date, val-sig-skew-min, val-sig-skew-max, val-max-restart,
185 val-nsec3-keysize-iterations, target-fetch-policy, outbound-msg-retry,
186 max-sent-count, max-query-restarts, do-not-query-address,
187 do-not-query-localhost, private-address, private-domain, caps-exempt,
188 nat64-prefix, do-nat64, infra-host-ttl, infra-keep-probing, ratelimit,
189 ip-ratelimit, ip-ratelimit-cookie, wait-limit-netblock,
190 wait-limit-cookie-netblock, ratelimit-below-domain, ratelimit-for-domain.
198 When there are changes to the config tags, from the \fBdefine\-tag\fR option,
224 controlled using the \fBstatistics\-cumulative\fR config statement.
236 Add new local zone with name and type. Like \fBlocal\-zone\fR config statement.
244 Add new local data, the given resource record. Like \fBlocal\-data\fR
257 Add local zones read from stdin of unbound\-control. Input is read per line,
261 Remove local zones read from stdin of unbound\-control. Input is one name per
265 Add local data RRs read from stdin of unbound\-control. Input is one RR per
269 Remove local data RRs read from stdin of unbound\-control. Input is one name per
275 Not supported in remote Unbounds in multi-process operation.
284 Not supported in remote Unbounds in multi-process operation.
309 with serve\-expired enabled, it'll serve that information but schedule a
319 iterator last-resort lookup failures from the rrset cache.
354 The values that work are: statistics\-interval, statistics\-cumulative,
355 do\-not\-query\-localhost, harden\-short\-bufsize, harden\-large\-queries,
356 harden\-glue, harden\-dnssec\-stripped, harden\-below\-nxdomain,
357 harden\-referral\-path, prefetch, prefetch\-key, log\-queries,
358 hide\-identity, hide\-version, identity, version, val\-log\-level,
359 val\-log\-squelch, ignore\-cd\-flag, add\-holddown, del\-holddown,
360 keep\-missing, tcp\-upstream, ssl\-upstream, max\-udp\-size, ratelimit,
361 ip\-ratelimit, cache\-max\-ttl, cache\-min\-ttl, cache\-max\-negative\-ttl.
382 List the zones with domain\-insecure.
391 Add a \fBdomain\-insecure\fR for the given zone, like the statement in unbound.conf.
396 Removes domain\-insecure for the given zone.
400 \fIdomain\-insecure\fR for the zone (so it can resolve insecurely if you have
402 The addr can be IP4, IP6 or nameserver names, like \fIforward-zone\fR config
404 The +t option sets it to use tls upstream, like \fIforward\-tls\-upstream\fR: yes.
408 \fIdomain\-insecure\fR for the zone.
412 \fIdomain\-insecure\fR for the zone.  With +p the stub zone is set to prime,
414 names, like the \fIstub-zone\fR config in unbound.conf.
415 The +t option sets it to use tls upstream, like \fIstub\-tls\-upstream\fR: yes.
419 \fIdomain\-insecure\fR for the zone.
427 to is printed.  On startup this is from the forward\-zone "." configuration.
431 are used.  This can be used to avoid to avoid buggy or non\-DNSSEC supporting
464 you set Unbound to validate with for-upstream yes and that can be cleared with
525 \fBcookie\-secret\-file\fR option in the server section of the config file.
538 The unbound\-control program exits with status code 1 on error, 0 on success.
540 The setup requires a self\-signed certificate and private keys for both
541 the server and client.  The script \fIunbound\-control\-setup\fR generates
542 these in the default run directory, or with \-d in another directory.
544 who can use unbound\-control, by default owner and group but not all users.
548     sudo \-u unbound unbound\-control\-setup
554 After running the script as root, turn on \fBcontrol\-enable\fR in
575 number of queries removed due to discard-timeout by thread
578 number of queries removed due to wait-limit by thread
618 is only reported when sock-queue-timeout is enabled.
654 the time of the request.  This helps you spot if the incoming\-num\-tcp
792 Number of queries with query types 256\-65535.
798 num.query.class.other is printed for classes 256\-65535.
925 are CPU intensive and this cache allows Unbound to avoid recomputing the
936 The number of queries answered from auth\-zone data, upstream queries.
941 The number of queries for downstream answered from auth\-zone data.
970 Possible actions are: nxdomain, nodata, passthru, drop, tcp\-only, local\-data,
971 disabled, and cname\-override.
979 self\-signed certificates (unbound_server.pem and unbound_control.pem).