add unbound

Author: icymind

src/renderer/lib/openwrt.js

@@ -212,6 +212,45 @@ class Openwrt {
  return this.execute(cmd)
  }
 
+ configUnbound (port = '5353', dnsServers = ['8.8.8.8', '8.8.4.4']) {
+ let cfg = String.raw`
+server:
+ port: ${port}
+ outgoing-range: 60
+ outgoing-num-tcp: 1
+ incoming-num-tcp: 1
+ msg-buffer-size: 8192
+ msg-cache-size: 100k
+ msg-cache-slabs: 1
+ num-queries-per-thread: 30
+ rrset-cache-size: 100k
+ rrset-cache-slabs: 1
+ infra-cache-slabs: 1
+ infra-cache-numhosts: 200
+ tcp-upstream: yes
+ access-control: 0.0.0.0/0 allow
+ access-control: ::0/0 allow
+ username: ""
+ pidfile: "/var/run/unbound.pid"
+ root-hints: "/etc/unbound/named.cache"
+ target-fetch-policy: "2 1 0 0 0 0"
+ harden-short-bufsize: yes
+ harden-large-queries: yes
+ auto-trust-anchor-file: "/etc/unbound/root.key"
+ key-cache-size: 100k
+ key-cache-slabs: 1
+ neg-cache-size: 10k
+forward-zone:
+ name: "."
+ forward-first: no
+`
+ dnsServers.forEach(ip => {
+ cfg += ` forward-addr: ${ip}`
+ })
+ const cmd = `echo ${cfg} > /etc/unbound/unbound.conf`
+ return this.execute(cmd)
+ }
+
  // shadowsocks
  async installSs (targzFPath) {
  // need move out of asar file

src/renderer/lib/vrouter.js

@@ -90,7 +90,7 @@ function installPackage (serialTcpPort, waitForOutput = 20000) {
  const subCmds = []
  subCmds.push(`sed -i 's/downloads.openwrt.org/mirrors.tuna.tsinghua.edu.cn\\/openwrt/g' /etc/opkg/distfeeds.conf`)
  subCmds.push('opkg update')
- subCmds.push('opkg remove dnsmasq && opkg install dnsmasq-full ipset openssh-sftp-server libopenssl rng-tools iptables-mod-tproxy ip')
+ subCmds.push('opkg remove dnsmasq && opkg install dnsmasq-full ipset openssh-sftp-server libopenssl rng-tools iptables-mod-tproxy ip unbound')
  subCmds.push('/etc/init.d/dropbear restart')
  subCmds.push('echo "done" > /tmp/log/vrouter')
  const cmd = subCmds.join(' && ')
@@ -217,6 +217,9 @@ class VRouter extends Openwrt {
  process.emit('init', '配置 Dnsmasq')
  await this.configDnsmasq()
 
+ process.emit('init', '配置 unbound')
+ await this.configUnbound()
+
  process.emit('init', '修改虚拟机时区')
  await this.changeTZ(this.name)