Unbound

https://unbound.docs.nlnetlabs.nl/en/latest/
Admin
Unbound is a validating, recursive, caching DNS resolver designed to be fast, lean, and incorporate...
Tokens:64,647
Snippets:828
Trust Score:10
Update:1 month ago
Show doc for...
Tokens:
Raw
### Start Unbound using Homebrew Services

Source: https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/local-stub.html

If Unbound was installed via Homebrew, use `brew services` to start it. This command automatically handles the necessary system service registration.

```bash
sudo brew services start unbound

```

--------------------------------

### Shell: Example Program Output

Source: https://unbound.docs.nlnetlabs.nl/en/latest/developer/libunbound-tutorial/setup-context.html

This is the expected output when running the C example program that sets up the Unbound context and resolves a hostname.

```shell
$ example_2
The address is 213.154.224.1

```

--------------------------------

### Install wget using Homebrew

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs the wget utility using Homebrew, which is used to download the Unbound source code.

```bash
brew install wget
```

--------------------------------

### Start Unbound Service

Source: https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/home-resolver.html

Command to start the Unbound service using its control utility.

```bash
unbound-control start
```

--------------------------------

### Install Bison and Flex on Ubuntu

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs Bison and Flex, tools used by Unbound's build system, on Ubuntu.

```bash
sudo apt-get install -y bison
sudo apt-get install -y flex

```

--------------------------------

### Install OpenSSL Development Libraries on Ubuntu

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs the development files for OpenSSL, a required dependency for compiling Unbound.

```bash
sudo apt install -y libssl-dev

```

--------------------------------

### Install Unbound after Compilation

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs the compiled Unbound program and its components to the system using root privileges.

```bash
sudo make install

```

--------------------------------

### Install Unbound

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs the compiled Unbound software on the system, making it available for use. This command typically requires superuser privileges.

```bash
sudo make install
```

--------------------------------

### Install Build Essentials on Ubuntu

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs necessary build tools like compilers and make on Ubuntu, required for compiling software from source.

```bash
sudo apt update
sudo apt install -y build-essential

```

--------------------------------

### Example Program Output

Source: https://unbound.docs.nlnetlabs.nl/en/latest/developer/libunbound-tutorial/lookup-threads.html

This shows the typical output when running the threaded DNS lookup example. Note that the order of output lines from different threads may vary due to concurrent execution.

```bash
$ example_5
Thread1: address of www.nlnetlabs.nl is 213.154.224.1
Thread2: address of www.google.nl is 64.233.183.147

```

--------------------------------

### Install Required Libraries using Homebrew

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs OpenSSL and Expat libraries using Homebrew, which are dependencies for compiling Unbound.

```bash
brew install openssl@1.1
brew install expat
```

--------------------------------

### Minimal Unbound Configuration Example

Source: https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html

A sample configuration file demonstrating basic server settings, chroot, and access control.

```text
# unbound.conf(5) config file for unbound(8).
server:
    directory: "/usr/local/etc/unbound"
    username: unbound
    # make sure unbound can access entropy from inside the chroot.
    # e.g. on linux the use these commands (on BSD, devfs(8) is used):
    #      mount --bind -n /dev/urandom /usr/local/etc/unbound/dev/urandom
    # and  mount --bind -n /dev/log /usr/local/etc/unbound/dev/log
    chroot: "/usr/local/etc/unbound"
    # logfile: "/usr/local/etc/unbound/unbound.log"  #uncomment to use logfile.
    pidfile: "/usr/local/etc/unbound/unbound.pid"
    # verbosity: 1      # uncomment and increase to get more logging.
    # listen on all interfaces, answer queries from the local subnet.
    interface: 0.0.0.0
    interface: ::0
    access-control: 10.0.0.0/8 allow
    access-control: 2001:db8::/64 allow
```

--------------------------------

### Verify Unbound Installation

Source: https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/local-stub.html

Run this command to check if Unbound is installed and to display its version number. This is a prerequisite for configuration.

```bash
unbound -V

```

--------------------------------

### Start and Stop Unbound Server

Source: https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html

Commands to start the Unbound server using a specific configuration file and to stop it using the PID file.

```bash
$ unbound -c /usr/local/etc/unbound/unbound.conf
```

```bash
$ kill `cat /usr/local/etc/unbound/unbound.pid`
```

--------------------------------

### Start Unbound Service (Compiled)

Source: https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/local-stub.html

Starts the Unbound service after it has been compiled and enabled. Ensure any previous instances are stopped before starting.

```bash
systemctl start unbound

```

--------------------------------

### Unbound Launchd Plist Configuration

Source: https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/local-stub.html

Create a `launchd` plist file for manually compiled Unbound installations to ensure it starts on system boot. This XML defines the service label, keep-alive, and program arguments.

```xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
    <dict>
    <key>Label</key>
    <string>nl.nlnetlabs.unbound</string>
    <key>KeepAlive</key>
    <true/>
    <key>RunAtLoad</key>
    <true/>
    <key>ProgramArguments</key>
    <array>
        <string>/usr/local/sbin/unbound</string>
        <string>-c</string>
        <string>/usr/local/etc/unbound/unbound.conf</string>
    </array>
    <key>UserName</key>
    <string>root</string>
    <key>StandardErrorPath</key>
    <string>/dev/null</string>
    <key>StandardOutPath</key>
    <string>/dev/null</string>
    </dict>
</plist>

```

--------------------------------

### Output of Asynchronous Lookup Example

Source: https://unbound.docs.nlnetlabs.nl/en/latest/developer/libunbound-tutorial/async-lookup.html

Example output demonstrating the interleaved 'time passed' messages and the final DNS resolution result, showing the program's responsiveness during the lookup.

```shell
$ example_4
time passed (0) ..
time passed (1) ..
time passed (2) ..
The address of www.nlnetlabs.nl is 213.154.224.1
done

```

--------------------------------

### Install Expat Development Libraries on Ubuntu

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs the development files for the Expat XML parsing library, another required dependency for Unbound.

```bash
sudo apt install -y libexpat1-dev

```

--------------------------------

### Example Zone with Wildcard Record

Source: https://unbound.docs.nlnetlabs.nl/en/latest/topics/privacy/aggressive-nsec.html

This zone configuration includes a wildcard record (*.example.net) and other records. It demonstrates the structure for generating wildcard answers.

```dns
example.net.          IN SOA [..]
                      IN NS alfa.example.net.
*.example.net.        IN TXT "A wildcard record"
alfa.example.net.     IN A 198.51.100.52
sierra.example.net.   IN A 198.51.100.98


```

--------------------------------

### Threaded DNS Lookup Example

Source: https://unbound.docs.nlnetlabs.nl/en/latest/developer/libunbound-tutorial/lookup-threads.html

This C code demonstrates concurrent DNS lookups from multiple threads using libunbound. It requires libpthread to be linked during compilation. The example initializes a libunbound context, creates two threads to resolve different hostnames, and then waits for them to complete.

```c
#include <stdio.h>
#include <string.h>
#include <errno.h>
#include <arpa/inet.h>
#include <unbound.h>

#include <pthread.h>

/* The main function of the first thread */
void* thread_one(void* threadarg)
{
        struct ub_ctx* ctx = (struct ub_ctx*)threadarg;
        struct ub_result* result;
        int retval;
        /* query for webserver */
        retval = ub_resolve(ctx, "www.nlnetlabs.nl",
                1 /* TYPE A (IPv4 address) */,
                1 /* CLASS IN (internet) */, &result);
        if(retval != 0) {
                printf("resolve error: %s\n", ub_strerror(retval));
                return NULL;
        }

        /* show first result */
        if(result->havedata)
                printf("Thread1: address of %s is %s\n", result->qname,
                        inet_ntoa(*(struct in_addr*)result->data[0]));

        /* exit thread */
        ub_resolve_free(result);
        return NULL;
}

/* The main function of the second thread */
void* thread_two(void* threadarg)
{
        struct ub_ctx* ctx = (struct ub_ctx*)threadarg;
        struct ub_result* result;
        int retval;
        /* query for webserver */
        retval = ub_resolve(ctx, "www.google.nl",
                1 /* TYPE A (IPv4 address) */,
                1 /* CLASS IN (internet) */, &result);
        if(retval != 0) {
                printf("resolve error: %s\n", ub_strerror(retval));
                return NULL;
        }

        /* show first result */
        if(result->havedata)
                printf("Thread2: address of %s is %s\n", result->qname,
                        inet_ntoa(*(struct in_addr*)result->data[0]));

        /* exit thread */
        ub_resolve_free(result);
        return NULL;
}

int main(void)
{
        struct ub_ctx* ctx;
        int retval;
        pthread_t t1, t2;

        /* create context */
        ctx = ub_ctx_create();
        if(!ctx) {
                printf("error: could not create unbound context\n");
                return 1;
        }
        /* read /etc/resolv.conf for DNS proxy settings (from DHCP) */
        if( (retval=ub_ctx_resolvconf(ctx, "/etc/resolv.conf")) != 0) {
                printf("error reading resolv.conf: %s. errno says: %s\n",
                        ub_strerror(retval), strerror(errno));
                return 1;
        }
        /* read /etc/hosts for locally supplied host addresses */
        if( (retval=ub_ctx_hosts(ctx, "/etc/hosts")) != 0) {
                printf("error reading hosts: %s. errno says: %s\n",
                        ub_strerror(retval), strerror(errno));
                return 1;
        }

        /* start two threads, uses pthreads */
        pthread_create(&t1, NULL, thread_one, ctx);
        pthread_create(&t2, NULL, thread_two, ctx);
        /* wait for both threads to complete */
        pthread_join(t1, NULL);
        pthread_join(t2, NULL);

        ub_ctx_delete(ctx);
        return 0;
}

```

--------------------------------

### RPZ Zone File Example

Source: https://unbound.docs.nlnetlabs.nl/en/latest/topics/filtering/rpz.html

An example RPZ zone file demonstrating various triggers and actions, including QNAME triggers, client IP triggers, and specific name server overrides. This file defines policies for DNS responses.

```dns
$ORIGIN rpz.nlnetlabs.nl.

# QNAME trigger with local data action
example.com.rpz.nlnetlabs.nl.    TXT  "trigger for example.com"
*.example.com               CNAME   .

# IPv4 subnet (192.0.2.0/28) which drops clients and IPv6 subnet
(2001:db8::3/128) which is not subject to policy
28.0.2.0.192.rpz-client-ip      CNAME rpz-drop.
128.3.zz.db8.2001.rpz-client-ip CNAME rpz-passthru.
# Clients at 192.2.0.64 only get responses over TCP.
64.2.0.192.rpz-client-ip        CNAME rpz-tcp-only.

# Fills the responses for these queries with NXDOMAIN and the correct
# answers respectively
24.0.2.0.192.rpz-ip         CNAME   .
32.2.2.0.192.rpz-ip         CNAME   rpz-passthru.

# Answers queries for the nlnetlabs.nl nameserver with NXDOMAIN
ns.nlnetlabs.nl.rpz-nsdname CNAME   .

```

--------------------------------

### Compile libngtcp2 from Source

Source: https://unbound.docs.nlnetlabs.nl/en/latest/topics/privacy/dns-over-quic.html

Compile the libngtcp2 library from source, linking against a specific OpenSSL installation. Ensure necessary build tools like autoconf are installed.

```bash
git clone --depth 1 -b v1.13.0 https://github.com/ngtcp2/ngtcp2 ngtcp2
cd ngtcp2
git submodule update --init --recursive
autoreconf -i
./configure PKG_CONFIG_PATH=/path/to/openssl_install/lib64/pkgconfig LDFLAGS="-Wl,-rpath,/path/to/openssl_install/lib64" --prefix=/path/to/ngtcp2_install
make -j && make install
```

--------------------------------

### Remove Default Block for IPv6 Example Prefix

Source: https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html

Disables the default block for the example IPv6 prefix zone.

```text
local-zone: 8.B.D.0.1.0.0.2.ip6.arpa. nodefault
```

--------------------------------

### Start Unbound Service

Source: https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/local-stub.html

Starts the Unbound service using systemd. Ensure Unbound is stopped before executing this command if it was previously running manually.

```bash
systemctl start unbound.service

```

--------------------------------

### Install Unbound on Ubuntu via Package Manager

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs Unbound using the apt package manager on Ubuntu. This is the simplest method for users new to Unbound.

```bash
sudo apt update
sudo apt install unbound

```

--------------------------------

### Example Output of DNS Resolution

Source: https://unbound.docs.nlnetlabs.nl/en/latest/developer/libunbound-tutorial/resolve-a-name.html

Shows the expected output when the basic DNS resolution C program is executed.

```bash
$ example_1
The address is 213.154.224.1

```

--------------------------------

### Install Xcode Command Line Tools

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs the necessary development tools for compiling software on macOS. This can be done via the App Store or the terminal.

```bash
xcode-select --install
```

--------------------------------

### Examine Existing Domain Results

Source: https://unbound.docs.nlnetlabs.nl/en/latest/developer/libunbound-tutorial/examine-results.html

This example demonstrates how to examine the results for an existing domain, showing its canonical name, IP addresses, and a NOERROR RCODE.

```bash
$ example_3 www.google.nl
The query is for: www.google.nl
The result has:
qname: www.google.nl
qtype: 1
qclass: 1
canonical name: www.l.google.com.
has data
not an nxdomain (name exists)
not validated as secure
not a security failure (not bogus)
DNS rcode: 0

result data element 0 has length 4
result data element 0 is: 64.233.183.99
result data element 1 has length 4
result data element 1 is: 64.233.183.104
result data element 2 has length 4
result data element 2 is: 64.233.183.147
result has 3 data element(s)


```

--------------------------------

### Enable Unbound Service

Source: https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/local-stub.html

Enables the Unbound service to start automatically on system boot. This ensures persistence after restarts.

```bash
systemctl enable unbound.service

```

--------------------------------

### Enable Pyunbound Support

Source: https://unbound.docs.nlnetlabs.nl/en/latest/developer/python-modules.html

Enable pyunbound functionality during the Unbound installation configuration.

```bash
./configure --with-pyunbound

```

--------------------------------

### Examine Non-Existent Domain Results

Source: https://unbound.docs.nlnetlabs.nl/en/latest/developer/libunbound-tutorial/examine-results.html

This example shows how to examine the results for a non-existent domain, indicating no data, an NXDOMAIN RCODE, and zero data elements.

```bash
$ example_3 bla.bla.nl
The query is for: bla.bla.nl
The result has:
qname: bla.bla.nl
qtype: 1
qclass: 1
canonical name: <none>
has no data
nxdomain (name does not exist)
not validated as secure
not a security failure (not bogus)
DNS rcode: 3

result has 0 data element(s)


```

--------------------------------

### Setup Unbound Control Keys

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/configuration.html

Generate the necessary cryptographic keys for the unbound-control command. This command creates key and certificate files in the default Unbound directory.

```bash
unbound-control-setup

```

--------------------------------

### Load Unbound Plist with launchctl

Source: https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/local-stub.html

Load the Unbound plist file using `launchctl` to register it with the system's service manager, ensuring Unbound starts on boot.

```bash
sudo launchctl load /Library/LaunchDaemons/nl.nlnetlabs.unbound.plist

```

--------------------------------

### Configure Unbound with libngtcp2 and OpenSSL

Source: https://unbound.docs.nlnetlabs.nl/en/latest/topics/privacy/dns-over-quic.html

Build Unbound with DoQ support, specifying the paths to libngtcp2 and OpenSSL installations. This ensures Unbound can handle QUIC transport encryption.

```bash
./configure <other flags> --with-libngtcp2 --prefix=/path/to/unbound_install
make
```

--------------------------------

### Configure Authority Zone URL

Source: https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html

Example of a URL pointing to a zone file for an authority zone.

```text
http://www.example.com/example.org.zone
```

--------------------------------

### Configure Local TXT Data

Source: https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html

Example of configuring a TXT record using single quotes for the record string.

```text
local-data: 'example. TXT "text"'
```

--------------------------------

### libunbound Option Management

Source: https://unbound.docs.nlnetlabs.nl/en/latest/manpages/libunbound.html

Set and get configuration options for the unbound context. Options control various aspects of the DNS resolution process.

```c
int ub_ctx_set_option(struct ub_ctx* ctx, char* opt, char* val);

int ub_ctx_get_option(struct ub_ctx* ctx, char* opt, char** val);
```

--------------------------------

### Define DNSCrypt Provider Name

Source: https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html

Example of the required format for the dnscrypt-provider option, which must end with a dot.

```text
2.dnscrypt-cert.example.com.
```

--------------------------------

### Compile a C program with libunbound

Source: https://unbound.docs.nlnetlabs.nl/en/latest/developer/libunbound-tutorial/resolve-a-name.html

Command to compile a C program that links against the libunbound library. Ensure Unbound is installed and its include/library paths are correctly specified.

```bash
gcc -o program program.c -I/usr/local/include -L/usr/local/lib -lunbound

```

--------------------------------

### Compile OpenSSL from Source

Source: https://unbound.docs.nlnetlabs.nl/en/latest/topics/privacy/dns-over-quic.html

Build OpenSSL version 3.5.0 from source, specifying installation path and build options. This is required if your system's OpenSSL is older.

```bash
tar -zxf openssl-3.5.0.tar.gz
cd openssl-3.5.0
./config enable-tls1_3 no-shared no-docs threads --prefix=/path/to/openssl_install
make -j && make install
```

--------------------------------

### Define RPZ NXDOMAIN record

Source: https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html

Example of an RPZ record that forces an NXDOMAIN response for a specific domain.

```text
example.com CNAME .
```

--------------------------------

### Configure Unbound with Manual Library Paths

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Configures Unbound compilation, manually specifying paths for OpenSSL and Expat if they are not found automatically. Ensure the version numbers match your installation.

```bash
./configure --with-ssl=/opt/homebrew/Cellar/openssl@1.1/1.1.1k/ \
            --with-libexpat=/opt/homebrew/Cellar/expat/2.3.0
```

--------------------------------

### Log message for buffer overrun

Source: https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html

Example of a log message that may appear when the so-sndbuf buffer is insufficient for traffic spikes.

```text
send: resource temporarily unavailable
```

--------------------------------

### Verify Default Ubuntu Resolver

Source: https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/home-resolver.html

Queries for 'example.com' without specifying a server to use the system's default DNS resolver. This is used as a baseline to confirm changes made to the default resolver.

```bash
dig example.com
```

--------------------------------

### Install Homebrew Package Installer

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs the Homebrew package installer on macOS. This is a prerequisite for installing other development tools.

```bash
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
```

--------------------------------

### Install Homebrew Package Manager on macOS

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs the Homebrew package manager on macOS, which is a prerequisite for installing Unbound via Brew.

```bash
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

```

--------------------------------

### Test Default Resolver with dig

Source: https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/local-stub.html

Use the dig command to query example.com and identify the default DNS server your machine is using. Look for the IP address 127.0.0.53 in the output.

```bash
dig example.com

```

--------------------------------

### C: Setup Unbound Context and Resolve Name

Source: https://unbound.docs.nlnetlabs.nl/en/latest/developer/libunbound-tutorial/setup-context.html

This C code demonstrates creating an Unbound context, configuring it with local DNS settings from resolv.conf and hosts files, resolving a hostname, and freeing the results and context. It's useful for applications needing efficient DNS resolution with local overrides.

```c
#include <stdio.h>
#include <string.h>
#include <errno.h>
#include <arpa/inet.h>
#include <unbound.h>

int main(void)
{
        struct ub_ctx* ctx;
        struct ub_result* result;
        int retval;

        /* create context */
        ctx = ub_ctx_create();
        if(!ctx) {
                printf("error: could not create unbound context\n");
                return 1;
        }
        /* read /etc/resolv.conf for DNS proxy settings (from DHCP) */
        if( (retval=ub_ctx_resolvconf(ctx, "/etc/resolv.conf")) != 0) {
                printf("error reading resolv.conf: %s. errno says: %s\n",
                        ub_strerror(retval), strerror(errno));
                return 1;
        }
        /* read /etc/hosts for locally supplied host addresses */
        if( (retval=ub_ctx_hosts(ctx, "/etc/hosts")) != 0) {
                printf("error reading hosts: %s. errno says: %s\n",
                        ub_strerror(retval), strerror(errno));
                return 1;
        }

        /* query for webserver */
        retval = ub_resolve(ctx, "www.nlnetlabs.nl",
                1 /* TYPE A (IPv4 address) */,
                1 /* CLASS IN (internet) */, &result);
        if(retval != 0) {
                printf("resolve error: %s\n", ub_strerror(retval));
                return 1;
        }

        /* show first result */
        if(result->havedata)
                printf("The address is %s\n",
                        inet_ntoa(*(struct in_addr*)result->data[0]));

        ub_resolve_free(result);
        ub_ctx_delete(ctx);
        return 0;
}

```

--------------------------------

### Basic DNS Resolution with libunbound

Source: https://unbound.docs.nlnetlabs.nl/en/latest/developer/libunbound-tutorial/resolve-a-name.html

A C program demonstrating how to create an Unbound context, resolve an IPv4 address for a given hostname, and display the result. It includes error handling for context creation and resolution.

```c
#include <stdio.h>      /* for printf */
#include <arpa/inet.h>  /* for inet_ntoa */
#include <unbound.h>    /* unbound API */

int main(void)
{
        struct ub_ctx* ctx;
        struct ub_result* result;
        int retval;

        /* create context */
        ctx = ub_ctx_create();
        if(!ctx) {
                printf("error: could not create unbound context\n");
                return 1;
        }

        /* query for webserver */
        retval = ub_resolve(ctx, "www.nlnetlabs.nl",
                1 /* TYPE A (IPv4 address) */,
                1 /* CLASS IN (internet) */, &result);
        if(retval != 0) {
                printf("resolve error: %s\n", ub_strerror(retval));
                return 1;
        }

        /* show first result */
        if(result->havedata)
                printf("The address is %s\n",
                        inet_ntoa(*(struct in_addr*)result->data[0]));

        ub_resolve_free(result);
        ub_ctx_delete(ctx);
        return 0;
}

```

--------------------------------

### Install Unbound on macOS via Homebrew

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Installs Unbound using the Homebrew package manager on macOS after Homebrew has been set up.

```bash
brew install unbound

```

--------------------------------

### Verify Unbound Installation

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Checks if the Unbound installation was successful by invoking the unbound command with the version flag. May require sudo.

```bash
unbound -V
```

--------------------------------

### Test Local Unbound Resolver

Source: https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/home-resolver.html

Tests the Unbound resolver by querying for 'example.com' against the local interface (127.0.0.1). This verifies that Unbound is running and responding to queries.

```bash
dig example.com @127.0.0.1
```

--------------------------------

### Verify GCC Compiler Installation

Source: https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html

Checks if the GCC compiler is installed correctly by displaying its version. This confirms that the Xcode Command Line Tools are functional.

```bash
gcc --version
```

--------------------------------

### Compile DoQ Client Test Tool

Source: https://unbound.docs.nlnetlabs.nl/en/latest/topics/privacy/dns-over-quic.html

Compile the DoQ client test tool from the Unbound source directory using 'make'.

```bash
make doqclient

```

--------------------------------

### Install Unbound on Ubuntu

Source: https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/home-resolver.html

Installs the Unbound DNS resolver package on Ubuntu 22.04 LTS. This command ensures you have a functional caching recursive DNS resolver out-of-the-box.

```bash
sudo apt update
sudo apt install unbound -y
```

--------------------------------

### Run DoQ Client Test Tool

Source: https://unbound.docs.nlnetlabs.nl/en/latest/topics/privacy/dns-over-quic.html

Execute the compiled DoQ client test tool to send a DNS query over QUIC. The server must be listening on port 2853 for DoQ queries.

```bash
./doqclient -s 127.0.0.1 -p 2853 www.example.com A IN

```
Tokens:
Raw