Output of query log

Hi unbound users

environment:
  unbound 1.8.1
  OS RHEL7.5

I want to output querylog immediately to a file different from other logs. It seems that it can not be set in unbound.conf.

I would like to know examples of solving the above.

Require the following performance.
・ 30000qps/host, cache hit rate 90%
I'm concerned about the loss the querylog at high load.

Any help is greatly appreciated.

Regards, Mamoru

Hi.

  • Capture DNS queries by dnstap (must be enabled at Unbound compile time)
  • Run tcpdump on your server.

Create traffic mirror port on your switch and capture DNS packets by other hosts
if you concern about performance impact.

Mamoru KIMOTO via Unbound-users <unbound-users@nlnetlabs.nl>:

Hi,

Thank you for information.
I made it using dnstap

Built Environment
· OS: RHEL 7
· Additional: fstrm, protobuf, protobaf-c, go-lang, golang-dnstap

regards, Mamoru