named.conf
— configuration file for named
named.conf
named.conf is the configuration file
for
named. Statements are enclosed
in braces and terminated with a semi-colon. Clauses in
the statements are also semi-colon terminated. The usual
comment styles are supported:
C style: /* */
C++ style: // to end of line
Unix style: # to end of line
controls {
inet ( ipv4_address | ipv6_address |
* ) [ port ( integer | * ) ] allow
{ address_match_element; ... } [
keys { string; ... } ];
unix quoted_string perm integer
owner integer group integer [
keys { string; ... } ];
};
logging {
category string { string; ... };
channel string {
file quoted_string [ versions ( "unlimited" | integer )
] [ size size ];
null;
print-category boolean;
print-severity boolean;
print-time boolean;
severity log_severity;
stderr;
syslog [ syslog_facility ];
};
};
lwres {
listen-on [ port integer ] [ dscp integer ] { ( ipv4_address
| ipv6_address ) [ port integer ] [ dscp integer ]; ... };
ndots integer;
search { string; ... };
view string [ class ];
};
masters string [ port integer ] [ dscp
integer ] { ( masters | ipv4_address [
port integer ] | ipv6_address [ port
integer ] ) [ key string ]; ... };
options {
acache-cleaning-interval integer;
acache-enable boolean;
additional-from-auth boolean;
additional-from-cache boolean;
allow-new-zones boolean;
allow-notify { address_match_element; ... };
allow-query { address_match_element; ... };
allow-query-cache { address_match_element; ... };
allow-query-cache-on { address_match_element; ... };
allow-query-on { address_match_element; ... };
allow-recursion { address_match_element; ... };
allow-recursion-on { address_match_element; ... };
allow-transfer { address_match_element; ... };
allow-update { address_match_element; ... };
allow-update-forwarding { address_match_element; ... };
also-notify [ port integer ] [ dscp integer ] { ( masters |
ipv4_address [ port integer ] | ipv6_address [ port
integer ] ) [ key string ]; ... };
alt-transfer-source ( ipv4_address | * ) [ port ( integer | * )
] [ dscp integer ];
alt-transfer-source-v6 ( ipv6_address | * ) [ port ( integer |
* ) ] [ dscp integer ];
attach-cache string;
auth-nxdomain boolean; // default changed
auto-dnssec ( allow | maintain | off );
automatic-interface-scan boolean;
avoid-v4-udp-ports { portrange; ... };
avoid-v6-udp-ports { portrange; ... };
bindkeys-file quoted_string;
blackhole { address_match_element; ... };
cache-file quoted_string;
check-dup-records ( fail | warn | ignore );
check-integrity boolean;
check-mx ( fail | warn | ignore );
check-mx-cname ( fail | warn | ignore );
check-names ( master | slave | response
) ( fail | warn | ignore );
check-sibling boolean;
check-spf ( warn | ignore );
check-srv-cname ( fail | warn | ignore );
check-wildcard boolean;
cleaning-interval integer;
clients-per-query integer;
coresize ( default | unlimited | sizeval );
datasize ( default | unlimited | sizeval );
deny-answer-addresses { address_match_element; ... } [
except-from { quoted_string; ... } ];
deny-answer-aliases { quoted_string; ... } [ except-from {
quoted_string; ... } ];
dialup ( notify | notify-passive | passive | refresh | boolean );
directory quoted_string;
disable-algorithms string { string;
... };
disable-ds-digests string { string;
... };
disable-empty-zone string;
dns64 netprefix {
break-dnssec boolean;
clients { address_match_element; ... };
exclude { address_match_element; ... };
mapped { address_match_element; ... };
recursive-only boolean;
suffix ipv6_address;
};
dns64-contact string;
dns64-server string;
dnssec-accept-expired boolean;
dnssec-dnskey-kskonly boolean;
dnssec-enable boolean;
dnssec-loadkeys-interval integer;
dnssec-lookaside ( string trust-anchor
string | auto | no );
dnssec-must-be-secure string boolean;
dnssec-secure-to-insecure boolean;
dnssec-update-mode ( maintain | no-resign );
dnssec-validation ( yes | no | auto );
dscp integer;
dual-stack-servers [ port integer ] { ( quoted_string [ port
integer ] [ dscp integer ] | ipv4_address [ port
integer ] [ dscp integer ] | ipv6_address [ port
integer ] [ dscp integer ] ); ... };
dump-file quoted_string;
edns-udp-size integer;
empty-contact string;
empty-server string;
empty-zones-enable boolean;
fetch-quota-params integer fixedpoint
fixedpoint fixedpoint;
fetches-per-server integer [ ( drop | fail ) ];
fetches-per-zone integer [ ( drop | fail ) ];
files ( default | unlimited | sizeval );
filter-aaaa { address_match_element; ... };
filter-aaaa-on-v4 ( break-dnssec | boolean );
filter-aaaa-on-v6 ( break-dnssec | boolean );
flush-zones-on-shutdown boolean;
forward ( first | only );
forwarders [ port integer ] [ dscp integer ] { ( ipv4_address
| ipv6_address ) [ port integer ] [ dscp integer ]; ... };
geoip-directory ( quoted_string | none );
heartbeat-interval integer;
hostname ( quoted_string | none );
inline-signing boolean;
interface-interval integer;
ixfr-from-differences ( master | slave | boolean );
key-directory quoted_string;
lame-ttl integer;
listen-on [ port integer ] [ dscp
integer ] {
address_match_element; ... };
listen-on-v6 [ port integer ] [ dscp
integer ] {
address_match_element; ... };
managed-keys-directory quoted_string;
masterfile-format ( map | raw | text );
match-mapped-addresses boolean;
max-acache-size size_no_default;
max-cache-size size_no_default;
max-cache-ttl integer;
max-clients-per-query integer;
max-journal-size size_no_default;
max-ncache-ttl integer;
max-records integer;
max-recursion-depth integer;
max-recursion-queries integer;
max-refresh-time integer;
max-retry-time integer;
max-rsa-exponent-size integer;
max-transfer-idle-in integer;
max-transfer-idle-out integer;
max-transfer-time-in integer;
max-transfer-time-out integer;
max-udp-size integer;
max-zone-ttl ( unlimited | ttlval );
memstatistics boolean;
memstatistics-file quoted_string;
min-refresh-time integer;
min-retry-time integer;
minimal-responses boolean;
multi-master boolean;
no-case-compress { address_match_element; ... };
nosit-udp-size integer;, experimental
notify ( explicit | master-only | boolean );
notify-delay integer;
notify-source ( ipv4_address | * ) [ port ( integer | * ) ] [
dscp integer ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ]
[ dscp integer ];
notify-to-soa boolean;
pid-file ( quoted_string | none );
port integer;
preferred-glue string;
prefetch integer [ integer ];
provide-ixfr boolean;
query-source ( ( [ address ] ( ipv4_address | * ) [ port (
integer | * ) ] ) | ( [ [ address ] ( ipv4_address | * ) ]
port ( integer | * ) ) ) [ dscp integer ];
query-source-v6 ( ( [ address ] ( ipv6_address | * ) [ port (
integer | * ) ] ) | ( [ [ address ] ( ipv6_address | * ) ]
port ( integer | * ) ) ) [ dscp integer ];
querylog boolean;
random-device quoted_string;
rate-limit {
all-per-second integer;
errors-per-second integer;
exempt-clients { address_match_element; ... };
ipv4-prefix-length integer;
ipv6-prefix-length integer;
log-only boolean;
max-table-size integer;
min-table-size integer;
nodata-per-second integer;
nxdomains-per-second integer;
qps-scale integer;
referrals-per-second integer;
responses-per-second integer;
slip integer;
window integer;
};
recursing-file quoted_string;
recursion boolean;
recursive-clients integer;
request-ixfr boolean;
request-nsid boolean;
request-sit boolean;, experimental
reserved-sockets integer;
resolver-query-timeout integer;
response-policy { zone quoted_string [ policy ( cname | disabled
| drop | given | no-op | nodata | nxdomain | passthru |
tcp-only quoted_string ) ] [ recursive-only boolean ] [
max-policy-ttl integer ]; ... } [ recursive-only boolean ]
[ break-dnssec boolean ] [ max-policy-ttl integer ] [
min-ns-dots integer ] [ qname-wait-recurse boolean ];
root-delegation-only [ exclude { quoted_string; ... } ];
rrset-order { [ class string ] [ type string ] [ name
quoted_string ] string string; ... };
secroots-file quoted_string;
serial-query-rate integer;
serial-update-method ( increment | unixtime );
server-id ( quoted_string | none | hostname );
session-keyalg string;
session-keyfile ( quoted_string | none );
session-keyname string;
sig-signing-nodes integer;
sig-signing-signatures integer;
sig-signing-type integer;
sig-validity-interval integer [ integer ];
sit-secret string;, experimental
sortlist { address_match_element; ... };
stacksize ( default | unlimited | sizeval );
statistics-file quoted_string;
tcp-clients integer;
tcp-listen-queue integer;
tkey-dhkey quoted_string integer;
tkey-domain quoted_string;
tkey-gssapi-credential quoted_string;
tkey-gssapi-keytab quoted_string;
transfer-format ( many-answers | one-answer );
transfer-source ( ipv4_address | * ) [ port ( integer | * ) ] [
dscp integer ];
transfer-source-v6 ( ipv6_address | * ) [ port ( integer | * )
] [ dscp integer ];
transfers-in integer;
transfers-out integer;
transfers-per-ns integer;
trust-anchor-telemetry boolean; // experimental
try-tcp-refresh boolean;
update-check-ksk boolean;
use-alt-transfer-source boolean;
use-v4-udp-ports { portrange; ... };
use-v6-udp-ports { portrange; ... };
version ( quoted_string | none );
zero-no-soa-ttl boolean;
zero-no-soa-ttl-cache boolean;
zone-statistics ( full | terse | none | boolean );
};
server netprefix {
bogus boolean;
edns boolean;
edns-udp-size integer;
keys server_key;
max-udp-size integer;
notify-source ( ipv4_address | * ) [ port ( integer | * ) ] [
dscp integer ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ]
[ dscp integer ];
provide-ixfr boolean;
query-source ( ( [ address ] ( ipv4_address | * ) [ port (
integer | * ) ] ) | ( [ [ address ] ( ipv4_address | * ) ]
port ( integer | * ) ) ) [ dscp integer ];
query-source-v6 ( ( [ address ] ( ipv6_address | * ) [ port (
integer | * ) ] ) | ( [ [ address ] ( ipv6_address | * ) ]
port ( integer | * ) ) ) [ dscp integer ];
request-ixfr boolean;
request-nsid boolean;
request-sit boolean;, experimental
tcp-only boolean;
transfer-format ( many-answers | one-answer );
transfer-source ( ipv4_address | * ) [ port ( integer | * ) ] [
dscp integer ];
transfer-source-v6 ( ipv6_address | * ) [ port ( integer | * )
] [ dscp integer ];
transfers integer;
};
statistics-channels {
inet ( ipv4_address | ipv6_address |
* ) [ port ( integer | * ) ] [
allow { address_match_element; ...
} ];
};
view string [ class ] {
acache-cleaning-interval integer;
acache-enable boolean;
additional-from-auth boolean;
additional-from-cache boolean;
allow-new-zones boolean;
allow-notify { address_match_element; ... };
allow-query { address_match_element; ... };
allow-query-cache { address_match_element; ... };
allow-query-cache-on { address_match_element; ... };
allow-query-on { address_match_element; ... };
allow-recursion { address_match_element; ... };
allow-recursion-on { address_match_element; ... };
allow-transfer { address_match_element; ... };
allow-update { address_match_element; ... };
allow-update-forwarding { address_match_element; ... };
also-notify [ port integer ] [ dscp integer ] { ( masters |
ipv4_address [ port integer ] | ipv6_address [ port
integer ] ) [ key string ]; ... };
alt-transfer-source ( ipv4_address | * ) [ port ( integer | * )
] [ dscp integer ];
alt-transfer-source-v6 ( ipv6_address | * ) [ port ( integer |
* ) ] [ dscp integer ];
attach-cache string;
auth-nxdomain boolean; // default changed
auto-dnssec ( allow | maintain | off );
cache-file quoted_string;
check-dup-records ( fail | warn | ignore );
check-integrity boolean;
check-mx ( fail | warn | ignore );
check-mx-cname ( fail | warn | ignore );
check-names ( master | slave | response
) ( fail | warn | ignore );
check-sibling boolean;
check-spf ( warn | ignore );
check-srv-cname ( fail | warn | ignore );
check-wildcard boolean;
cleaning-interval integer;
clients-per-query integer;
deny-answer-addresses { address_match_element; ... } [
except-from { quoted_string; ... } ];
deny-answer-aliases { quoted_string; ... } [ except-from {
quoted_string; ... } ];
dialup ( notify | notify-passive | passive | refresh | boolean );
disable-algorithms string { string;
... };
disable-ds-digests string { string;
... };
disable-empty-zone string;
dlz string {
database string;
search boolean;
};
dns64 netprefix {
break-dnssec boolean;
clients { address_match_element; ... };
exclude { address_match_element; ... };
mapped { address_match_element; ... };
recursive-only boolean;
suffix ipv6_address;
};
dns64-contact string;
dns64-server string;
dnssec-accept-expired boolean;
dnssec-dnskey-kskonly boolean;
dnssec-enable boolean;
dnssec-loadkeys-interval integer;
dnssec-lookaside ( string trust-anchor
string | auto | no );
dnssec-must-be-secure string boolean;
dnssec-secure-to-insecure boolean;
dnssec-update-mode ( maintain | no-resign );
dnssec-validation ( yes | no | auto );
dual-stack-servers [ port integer ] { ( quoted_string [ port
integer ] [ dscp integer ] | ipv4_address [ port
integer ] [ dscp integer ] | ipv6_address [ port
integer ] [ dscp integer ] ); ... };
edns-udp-size integer;
empty-contact string;
empty-server string;
empty-zones-enable boolean;
fetch-quota-params integer fixedpoint
fixedpoint fixedpoint;
fetches-per-server integer [ ( drop | fail ) ];
fetches-per-zone integer [ ( drop | fail ) ];
filter-aaaa { address_match_element; ... };
filter-aaaa-on-v4 ( break-dnssec | boolean );
filter-aaaa-on-v6 ( break-dnssec | boolean );
forward ( first | only );
forwarders [ port integer ] [ dscp integer ] { ( ipv4_address
| ipv6_address ) [ port integer ] [ dscp integer ]; ... };
inline-signing boolean;
ixfr-from-differences ( master | slave | boolean );
key string {
algorithm string;
secret string;
};
key-directory quoted_string;
lame-ttl integer;
managed-keys { string string
integer integer integer
quoted_string; ... };
masterfile-format ( map | raw | text );
match-clients { address_match_element; ... };
match-destinations { address_match_element; ... };
match-recursive-only boolean;
max-acache-size size_no_default;
max-cache-size size_no_default;
max-cache-ttl integer;
max-clients-per-query integer;
max-journal-size size_no_default;
max-ncache-ttl integer;
max-records integer;
max-recursion-depth integer;
max-recursion-queries integer;
max-refresh-time integer;
max-retry-time integer;
max-transfer-idle-in integer;
max-transfer-idle-out integer;
max-transfer-time-in integer;
max-transfer-time-out integer;
max-udp-size integer;
max-zone-ttl ( unlimited | ttlval );
min-refresh-time integer;
min-retry-time integer;
minimal-responses boolean;
multi-master boolean;
no-case-compress { address_match_element; ... };
nosit-udp-size integer;, experimental
notify ( explicit | master-only | boolean );
notify-delay integer;
notify-source ( ipv4_address | * ) [ port ( integer | * ) ] [
dscp integer ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ]
[ dscp integer ];
notify-to-soa boolean;
preferred-glue string;
prefetch integer [ integer ];
provide-ixfr boolean;
query-source ( ( [ address ] ( ipv4_address | * ) [ port (
integer | * ) ] ) | ( [ [ address ] ( ipv4_address | * ) ]
port ( integer | * ) ) ) [ dscp integer ];
query-source-v6 ( ( [ address ] ( ipv6_address | * ) [ port (
integer | * ) ] ) | ( [ [ address ] ( ipv6_address | * ) ]
port ( integer | * ) ) ) [ dscp integer ];
rate-limit {
all-per-second integer;
errors-per-second integer;
exempt-clients { address_match_element; ... };
ipv4-prefix-length integer;
ipv6-prefix-length integer;
log-only boolean;
max-table-size integer;
min-table-size integer;
nodata-per-second integer;
nxdomains-per-second integer;
qps-scale integer;
referrals-per-second integer;
responses-per-second integer;
slip integer;
window integer;
};
recursion boolean;
request-ixfr boolean;
request-nsid boolean;
request-sit boolean;, experimental
resolver-query-timeout integer;
response-policy { zone quoted_string [ policy ( cname | disabled
| drop | given | no-op | nodata | nxdomain | passthru |
tcp-only quoted_string ) ] [ recursive-only boolean ] [
max-policy-ttl integer ]; ... } [ recursive-only boolean ]
[ break-dnssec boolean ] [ max-policy-ttl integer ] [
min-ns-dots integer ] [ qname-wait-recurse boolean ];
root-delegation-only [ exclude { quoted_string; ... } ];
rrset-order { [ class string ] [ type string ] [ name
quoted_string ] string string; ... };
serial-update-method ( increment | unixtime );
server netprefix {
bogus boolean;
edns boolean;
edns-udp-size integer;
keys server_key;
max-udp-size integer;
notify-source ( ipv4_address | * ) [ port ( integer | *
) ] [ dscp integer ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer
| * ) ] [ dscp integer ];
provide-ixfr boolean;
query-source ( ( [ address ] ( ipv4_address | * ) [ port
( integer | * ) ] ) | ( [ [ address ] (
ipv4_address | * ) ] port ( integer | * ) ) ) [
dscp integer ];
query-source-v6 ( ( [ address ] ( ipv6_address | * ) [
port ( integer | * ) ] ) | ( [ [ address ] (
ipv6_address | * ) ] port ( integer | * ) ) ) [
dscp integer ];
request-ixfr boolean;
request-nsid boolean;
request-sit boolean;, experimental
tcp-only boolean;
transfer-format ( many-answers | one-answer );
transfer-source ( ipv4_address | * ) [ port ( integer |
* ) ] [ dscp integer ];
transfer-source-v6 ( ipv6_address | * ) [ port (
integer | * ) ] [ dscp integer ];
transfers integer;
};
sig-signing-nodes integer;
sig-signing-signatures integer;
sig-signing-type integer;
sig-validity-interval integer [ integer ];
sortlist { address_match_element; ... };
transfer-format ( many-answers | one-answer );
transfer-source ( ipv4_address | * ) [ port ( integer | * ) ] [
dscp integer ];
transfer-source-v6 ( ipv6_address | * ) [ port ( integer | * )
] [ dscp integer ];
trust-anchor-telemetry boolean; // experimental
trusted-keys { string integer
integer integer quoted_string;
... };
try-tcp-refresh boolean;
update-check-ksk boolean;
use-alt-transfer-source boolean;
zero-no-soa-ttl boolean;
zero-no-soa-ttl-cache boolean;
zone string [ class ] {
allow-notify { address_match_element; ... };
allow-query { address_match_element; ... };
allow-query-on { address_match_element; ... };
allow-transfer { address_match_element; ... };
allow-update { address_match_element; ... };
allow-update-forwarding { address_match_element; ... };
also-notify [ port integer ] [ dscp integer ] { (
masters | ipv4_address [ port integer ] |
ipv6_address [ port integer ] ) [ key string ];
... };
alt-transfer-source ( ipv4_address | * ) [ port (
integer | * ) ] [ dscp integer ];
alt-transfer-source-v6 ( ipv6_address | * ) [ port (
integer | * ) ] [ dscp integer ];
auto-dnssec ( allow | maintain | off );
check-dup-records ( fail | warn | ignore );
check-integrity boolean;
check-mx ( fail | warn | ignore );
check-mx-cname ( fail | warn | ignore );
check-names ( fail | warn | ignore );
check-sibling boolean;
check-spf ( warn | ignore );
check-srv-cname ( fail | warn | ignore );
check-wildcard boolean;
database string;
delegation-only boolean;
dialup ( notify | notify-passive | passive | refresh |
boolean );
dlz string;
dnssec-dnskey-kskonly boolean;
dnssec-loadkeys-interval integer;
dnssec-secure-to-insecure boolean;
dnssec-update-mode ( maintain | no-resign );
file quoted_string;
forward ( first | only );
forwarders [ port integer ] [ dscp integer ] { (
ipv4_address | ipv6_address ) [ port integer ] [
dscp integer ]; ... };
in-view string;
inline-signing boolean;
ixfr-from-differences boolean;
journal quoted_string;
key-directory quoted_string;
masterfile-format ( map | raw | text );
masters [ port integer ] [ dscp integer ] { ( masters
| ipv4_address [ port integer ] | ipv6_address [
port integer ] ) [ key string ]; ... };
max-ixfr-log-size ( default | unlimited |
max-journal-size size_no_default;
max-records integer;
max-refresh-time integer;
max-retry-time integer;
max-transfer-idle-in integer;
max-transfer-idle-out integer;
max-transfer-time-in integer;
max-transfer-time-out integer;
max-zone-ttl ( unlimited | ttlval );
min-refresh-time integer;
min-retry-time integer;
multi-master boolean;
notify ( explicit | master-only | boolean );
notify-delay integer;
notify-source ( ipv4_address | * ) [ port ( integer | *
) ] [ dscp integer ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer
| * ) ] [ dscp integer ];
notify-to-soa boolean;
pubkey integer
integer
integer
request-ixfr boolean;
serial-update-method ( increment | unixtime );
server-addresses { ( ipv4_address | ipv6_address ) [
port integer ]; ... };
server-names { quoted_string; ... };
sig-signing-nodes integer;
sig-signing-signatures integer;
sig-signing-type integer;
sig-validity-interval integer [ integer ];
transfer-source ( ipv4_address | * ) [ port ( integer |
* ) ] [ dscp integer ];
transfer-source-v6 ( ipv6_address | * ) [ port (
integer | * ) ] [ dscp integer ];
try-tcp-refresh boolean;
type ( delegation-only | forward | hint | master | redirect
| slave | static-stub | stub );
update-check-ksk boolean;
update-policy ( local | { ( deny | grant ) string (
6to4-self | external | krb5-self | krb5-subdomain |
ms-self | ms-subdomain | name | self | selfsub |
selfwild | subdomain | tcp-self | wildcard | zonesub )
[ string ] rrtypelist; ... };
use-alt-transfer-source boolean;
zero-no-soa-ttl boolean;
zone-statistics ( full | terse | none | boolean );
};
zone-statistics ( full | terse | none | boolean );
};
zone string [ class ] {
allow-notify { address_match_element; ... };
allow-query { address_match_element; ... };
allow-query-on { address_match_element; ... };
allow-transfer { address_match_element; ... };
allow-update { address_match_element; ... };
allow-update-forwarding { address_match_element; ... };
also-notify [ port integer ] [ dscp integer ] { ( masters |
ipv4_address [ port integer ] | ipv6_address [ port
integer ] ) [ key string ]; ... };
alt-transfer-source ( ipv4_address | * ) [ port ( integer | * )
] [ dscp integer ];
alt-transfer-source-v6 ( ipv6_address | * ) [ port ( integer |
* ) ] [ dscp integer ];
auto-dnssec ( allow | maintain | off );
check-dup-records ( fail | warn | ignore );
check-integrity boolean;
check-mx ( fail | warn | ignore );
check-mx-cname ( fail | warn | ignore );
check-names ( fail | warn | ignore );
check-sibling boolean;
check-spf ( warn | ignore );
check-srv-cname ( fail | warn | ignore );
check-wildcard boolean;
database string;
delegation-only boolean;
dialup ( notify | notify-passive | passive | refresh | boolean );
dlz string;
dnssec-dnskey-kskonly boolean;
dnssec-loadkeys-interval integer;
dnssec-secure-to-insecure boolean;
dnssec-update-mode ( maintain | no-resign );
file quoted_string;
forward ( first | only );
forwarders [ port integer ] [ dscp integer ] { ( ipv4_address
| ipv6_address ) [ port integer ] [ dscp integer ]; ... };
in-view string;
inline-signing boolean;
ixfr-from-differences boolean;
journal quoted_string;
key-directory quoted_string;
masterfile-format ( map | raw | text );
masters [ port integer ] [ dscp integer ] { ( masters |
ipv4_address [ port integer ] | ipv6_address [ port
integer ] ) [ key string ]; ... };
max-journal-size size_no_default;
max-records integer;
max-refresh-time integer;
max-retry-time integer;
max-transfer-idle-in integer;
max-transfer-idle-out integer;
max-transfer-time-in integer;
max-transfer-time-out integer;
max-zone-ttl ( unlimited | ttlval );
min-refresh-time integer;
min-retry-time integer;
multi-master boolean;
notify ( explicit | master-only | boolean );
notify-delay integer;
notify-source ( ipv4_address | * ) [ port ( integer | * ) ] [
dscp integer ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ]
[ dscp integer ];
notify-to-soa boolean;
pubkey integer integer
request-ixfr boolean;
serial-update-method ( increment | unixtime );
server-addresses { ( ipv4_address | ipv6_address ) [ port
integer ]; ... };
server-names { quoted_string; ... };
sig-signing-nodes integer;
sig-signing-signatures integer;
sig-signing-type integer;
sig-validity-interval integer [ integer ];
transfer-source ( ipv4_address | * ) [ port ( integer | * ) ] [
dscp integer ];
transfer-source-v6 ( ipv6_address | * ) [ port ( integer | * )
] [ dscp integer ];
try-tcp-refresh boolean;
type ( delegation-only | forward | hint | master | redirect | slave
| static-stub | stub );
update-check-ksk boolean;
update-policy ( local | { ( deny | grant ) string ( 6to4-self |
external | krb5-self | krb5-subdomain | ms-self | ms-subdomain
| name | self | selfsub | selfwild | subdomain | tcp-self |
wildcard | zonesub ) [ string ] rrtypelist; ... };
use-alt-transfer-source boolean;
zero-no-soa-ttl boolean;
zone-statistics ( full | terse | none | boolean );
};
domain_name {string;string;string [ port integer ] {masters | ipv4_address [port integer] |ipv6_address [port integer] ) [ key string ]; ...ipv4_address[/prefixlen] | ipv6_address[/prefixlen] ) {boolean;boolean;integer;integer;boolean;boolean;boolean;server_key;integer;ipv4_address | * )integer | * ) ];ipv6_address | * )integer | * ) ];boolean; // obsoletedomain_name flags protocol algorithm key; ...domain_name initial-key flags protocol algorithm key; ...
controls {
inet ( ipv4_address | ipv6_address | * )
[ port ( integer | * ) ]
allow { address_match_element; ... }
[ keys { string; ... } ];
unix unsupported; // not implemented
d150 1
a150 1
string {log_file;optional_facility;log_severity;boolean;boolean;boolean;string { string; ... };integer ] {ipv4_address | ipv6_address ) [ port integer ]; ...string optional_class;string; ... };integer;port; ... };port; ... };size;size;size;boolean; // not implementednumber; // not implementedinteger ] { address_match_element; ... };integer ] { address_match_element; ... };quoted_string;integer;quoted_string | hostname | none );size;integer; // not yet implementedquoted_string;integer;quoted_string | none );address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... }; // not implementedboolean; // default changedboolean;boolean;string ] [ type string ]quoted_string ] string string; ...boolean;boolean;boolean; // not yet implementedboolean;boolean;ipv4_address | * ) | [ address ( ipv4_address | * ) ] ) [ port ( integer | * ) ];ipv6_address | * ) | [ address ( ipv6_address | * ) ] ) [ port ( integer | * ) ];boolean;integer;integer;integer;integer;integer; // not implementedinteger;integer;integer;size;size;number;number;boolean;quoted_string; // test optionboolean; // not yet implementedstring;integer ] {quoted_string [port integer] |ipv4_address [port integer] |ipv6_address [port integer] ); ...integer;integer;quoted_string; ... } ];string { string; ... };string { string; ... };boolean;boolean;auto | no | domain trust-anchor domain );string boolean;boolean;string;string;prefix {boolean;boolean;ipv6_address;string;string;boolean;string;dialuptype;ixfrdiff;address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };boolean;notifytype;ipv4_address | * ) [ port ( integer | * ) ];ipv6_address | * ) [ port ( integer | * ) ];seconds;boolean;integer ] { ( ipv4_address | ipv6_address )integer ]; ...keyname ] ... };address_match_element; ... };integer ] {ipv4_address | ipv6_address ) [ port integer ]; ...size_no_default;integer;integer;integer;integer;integer;integer;integer;integer;integer;boolean;integer;integer;integer;integer;integer;ipv4_address | * )integer | * ) ];ipv6_address | * )integer | * ) ];ipv4_address | * )integer | * ) ];ipv6_address | * )integer | * ) ];boolean;quoted_string;quoted_string;allow|maintain|off;boolean;boolean;boolean;address_match_listnamelist } ];namelistnamelist } ];boolean; // testing onlyaddress_match_element; ... }; // obsoleteboolean; // obsoleteboolean; // obsoleteboolean; // obsoleteboolean; // obsoleteboolean; // obsoletesize; // obsoleteboolean; // obsoletequoted_string; // obsoleteinteger; // obsoleteboolean; // obsoleteboolean; // obsoleteboolean; // obsoletestring optional_class {address_match_element; ... };address_match_element; ... };boolean;string {string;string;string optional_class {ipv4_address[/prefixlen] | ipv6_address[/prefixlen] ) {string integer integer integer quoted_string;domain_name initial-key flags protocol algorithm key;address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... }; // not implementedboolean; // default changedboolean;boolean;string ] [ type string ]quoted_string ] string string; ...boolean; // not yet implementedipv4_address | * ) | [ address ( ipv4_address | * ) ] ) [ port ( integer | * ) ];ipv6_address | * ) | [ address ( ipv6_address | * ) ] ) [ port ( integer | * ) ];boolean;integer;integer;integer;integer;integer; // not implementedinteger;integer;integer;size;size;number;number;boolean;quoted_string; // test optionboolean; // not yet implementedstring;integer ] {quoted_string [port integer] |ipv4_address [port integer] |ipv6_address [port integer] ); ...integer;integer;quoted_string; ... } ];string { string; ... };string { string; ... };boolean;boolean;auto | no | domain trust-anchor domain );string boolean;boolean;string;string;prefix {string;string;dialuptype;ixfrdiff;address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };boolean;boolean;notifytype;ipv4_address | * ) [ port ( integer | * ) ];ipv6_address | * ) [ port ( integer | * ) ];seconds;boolean;integer ] { ( ipv4_address | ipv6_address )integer ]; ...keyname ] ... };address_match_element; ... };integer ] {ipv4_address | ipv6_address ) [ port integer ]; ...integer;integer;integer;integer;integer;integer;ipv4_address | * )integer | * ) ];ipv6_address | * )integer | * ) ];ipv4_address | * )integer | * ) ];ipv6_address | * )integer | * ) ];boolean;boolean;quoted_string;boolean;address_match_element; ... }; // obsoleteboolean; // obsoleteboolean; // obsoletesize; // obsoletestring optional_class {quoted_string;integer ] {masters |ipv4_address [port integer] |ipv6_address [ port integer ] ) [ key string ]; ...string;boolean;boolean;dialuptype;boolean;quoted_string;boolean;boolean;local | {
( grant | deny ) string
( name | subdomain | wildcard | self | selfsub | selfwild |
krb5-self | ms-self | krb5-subdomain | ms-subdomain |
tcp-self | zonesub | 6to4-self ) string
rrtypelist;
[...]
};boolean;notifytype;ipv4_address | * ) [ port ( integer | * ) ];ipv6_address | * ) [ port ( integer | * ) ];seconds;boolean;integer ] { ( ipv4_address | ipv6_address )integer ]; ...keyname ] ... };address_match_element; ... };integer ] {ipv4_address | ipv6_address ) [ port integer ]; ...integer;integer;integer;integer;integer;integer;ipv4_address | * )integer | * ) ];ipv6_address | * )integer | * ) ];ipv4_address | * )integer | * ) ];ipv6_address | * )integer | * ) ];boolean;boolean;quoted_string;boolean; // testing onlyquoted_string; // obsoletequoted_string; // obsoleteboolean; // obsoletesize; // obsoleteinteger integer integer quoted_string; // obsoleteipv4_address | ipv6_address |integer | * ) ] allowaddress_match_element; ... } [string; ... } ];quoted_string perm integerinteger group integer [string; ... } ];string {string;boolean;string {string;string;string { string; ... };string {quoted_string [ versions ( "unlimited" | integer )size ];boolean;boolean;boolean;log_severity;syslog_facility ];integer ] [ dscp integer ] { ( ipv4_addressipv6_address ) [ port integer ] [ dscp integer ]; ... };integer;string; ... };string [ class ];string string integerinteger integer quoted_string; ... };string [ port integer ] [ dscpinteger ] { ( masters | ipv4_address [integer ] | ipv6_address [ portinteger ] ) [ key string ]; ... };integer;boolean;boolean;boolean;boolean;address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };integer ] [ dscp integer ] { ( masters |ipv4_address [ port integer ] | ipv6_address [ portinteger ] ) [ key string ]; ... };ipv4_address | * ) [ port ( integer | * )integer ];ipv6_address | * ) [ port ( integer |integer ];string;boolean; // default changedboolean;portrange; ... };portrange; ... };quoted_string;quoted_string;boolean;boolean;boolean;integer;integer;sizeval );sizeval );address_match_element; ... } [quoted_string; ... } ];quoted_string; ... } [ except-from {quoted_string; ... } ];boolean );string { string;string { string;string;netprefix {boolean;address_match_element; ... };address_match_element; ... };address_match_element; ... };boolean;ipv6_address;string;string;boolean;boolean;boolean;integer;string trust-anchorstring | auto | no );string boolean;boolean;integer;integer ] { ( quoted_string [ portinteger ] [ dscp integer ] | ipv4_address [ portinteger ] [ dscp integer ] | ipv6_address [ portinteger ] [ dscp integer ] ); ... };integer;string;string;boolean;integer fixedpointfixedpoint fixedpoint;integer [ ( drop | fail ) ];integer [ ( drop | fail ) ];sizeval );address_match_element; ... };boolean );boolean );boolean;integer ] [ dscp integer ] { ( ipv4_addressipv6_address ) [ port integer ] [ dscp integer ]; ... };quoted_string | none );boolean;boolean );quoted_string;integer;integer ] [ dscpinteger ] {address_match_element; ... };integer ] [ dscpinteger ] {address_match_element; ... };quoted_string;size_no_default;size_no_default;integer;integer;size_no_default;integer;integer;integer;integer;integer;integer;integer;integer;integer;integer;integer;integer;ttlval );boolean;integer;integer;boolean;boolean;address_match_element; ... };integer;, experimentalboolean );integer;ipv4_address | * ) [ port ( integer | * ) ] [integer ];ipv6_address | * ) [ port ( integer | * ) ]integer ];boolean;string;integer [ integer ];boolean;ipv4_address | * ) [ port (integer | * ) ] ) | ( [ [ address ] ( ipv4_address | * ) ]integer | * ) ) ) [ dscp integer ];ipv6_address | * ) [ port (integer | * ) ] ) | ( [ [ address ] ( ipv6_address | * ) ]integer | * ) ) ) [ dscp integer ];integer;integer;address_match_element; ... };integer;integer;boolean;integer;integer;integer;integer;integer;integer;integer;integer;integer;quoted_string;boolean;boolean;boolean;boolean;, experimentalinteger;integer;quoted_string [ policy ( cname | disabledquoted_string ) ] [ recursive-only boolean ] [integer ]; ... } [ recursive-only boolean ]boolean ] [ max-policy-ttl integer ] [integer ] [ qname-wait-recurse boolean ];quoted_string; ... } ];string ] [ type string ] [ namequoted_string ] string string; ... };quoted_string;quoted_string | none | hostname );string;quoted_string | none );string;integer;integer;integer;integer [ integer ];string;, experimentaladdress_match_element; ... };sizeval );quoted_string;ipv4_address | * ) [ port ( integer | * ) ] [integer ];ipv6_address | * ) [ port ( integer | * )integer ];integer;boolean; // experimentalboolean;portrange; ... };portrange; ... };quoted_string | none );boolean );netprefix {boolean;boolean;integer;server_key;integer;ipv4_address | * ) [ port ( integer | * ) ] [integer ];ipv6_address | * ) [ port ( integer | * ) ]integer ];ipv4_address | * ) [ port (integer | * ) ] ) | ( [ [ address ] ( ipv4_address | * ) ]integer | * ) ) ) [ dscp integer ];ipv6_address | * ) [ port (integer | * ) ] ) | ( [ [ address ] ( ipv6_address | * ) ]integer | * ) ) ) [ dscp integer ];boolean;boolean;, experimentalboolean;ipv4_address | * ) [ port ( integer | * ) ] [integer ];ipv6_address | * ) [ port ( integer | * )integer ];integer;
statistics-channels {
inet ( ipv4_address | ipv6_address |
* ) [ port ( integer | * ) ] [
allow { address_match_element; ...
} ];
};
view string [ class ] {
acache-cleaning-interval integer;
acache-enable boolean;
d452 19
a470 23
allow-new-zones boolean;
allow-notify { address_match_element; ... };
allow-query { address_match_element; ... };
allow-query-cache { address_match_element; ... };
allow-query-cache-on { address_match_element; ... };
allow-query-on { address_match_element; ... };
allow-recursion { address_match_element; ... };
allow-recursion-on { address_match_element; ... };
allow-transfer { address_match_element; ... };
allow-update { address_match_element; ... };
allow-update-forwarding { address_match_element; ... };
also-notify [ port integer ] [ dscp integer ] { ( masters |
ipv4_address [ port integer ] | ipv6_address [ port
integer ] ) [ key string ]; ... };
alt-transfer-source ( ipv4_address | * ) [ port ( integer | * )
] [ dscp integer ];
alt-transfer-source-v6 ( ipv6_address | * ) [ port ( integer |
* ) ] [ dscp integer ];
attach-cache string;
auth-nxdomain boolean; // default changed
auto-dnssec ( allow | maintain | off );
cache-file quoted_string;
check-dup-records ( fail | warn | ignore );
a471 1
check-mx ( fail | warn | ignore );
a472 4
check-names ( master | slave | response
) ( fail | warn | ignore );
check-sibling boolean;
check-spf ( warn | ignore );
d474 7
a480 16
check-wildcard boolean;
cleaning-interval integer;
clients-per-query integer;
deny-answer-addresses { address_match_element; ... } [
except-from { quoted_string; ... } ];
deny-answer-aliases { quoted_string; ... } [ except-from {
quoted_string; ... } ];
dialup ( notify | notify-passive | passive | refresh | boolean );
disable-algorithms string { string;
... };
disable-ds-digests string { string;
... };
disable-empty-zone string;
dlz string {
database string;
search boolean;
d482 17
a498 1
dns64 netprefix {
a499 3
clients { address_match_element; ... };
exclude { address_match_element; ... };
mapped { address_match_element; ... };
d503 2
a504 17
dns64-contact string;
dns64-server string;
dnssec-accept-expired boolean;
dnssec-dnskey-kskonly boolean;
dnssec-enable boolean;
dnssec-loadkeys-interval integer;
dnssec-lookaside ( string trust-anchor
string | auto | no );
dnssec-must-be-secure string boolean;
dnssec-secure-to-insecure boolean;
dnssec-update-mode ( maintain | no-resign );
dnssec-validation ( yes | no | auto );
dual-stack-servers [ port integer ] { ( quoted_string [ port
integer ] [ dscp integer ] | ipv4_address [ port
integer ] [ dscp integer ] | ipv6_address [ port
integer ] [ dscp integer ] ); ... };
edns-udp-size integer;
a505 1
empty-server string;
d507 26
a532 7
fetch-quota-params integer fixedpoint
fixedpoint fixedpoint;
fetches-per-server integer [ ( drop | fail ) ];
fetches-per-zone integer [ ( drop | fail ) ];
filter-aaaa { address_match_element; ... };
filter-aaaa-on-v4 ( break-dnssec | boolean );
filter-aaaa-on-v6 ( break-dnssec | boolean );
d534 2
a535 7
forwarders [ port integer ] [ dscp integer ] { ( ipv4_address
| ipv6_address ) [ port integer ] [ dscp integer ]; ... };
inline-signing boolean;
ixfr-from-differences ( master | slave | boolean );
key string {
algorithm string;
secret string;
d537 1
a537 13
key-directory quoted_string;
lame-ttl integer;
managed-keys { string string
integer integer integer
quoted_string; ... };
masterfile-format ( map | raw | text );
match-clients { address_match_element; ... };
match-destinations { address_match_element; ... };
match-recursive-only boolean;
max-acache-size size_no_default;
max-cache-size size_no_default;
max-cache-ttl integer;
max-clients-per-query integer;
a538 1
max-ncache-ttl integer;
d540 2
a541 4
max-recursion-depth integer;
max-recursion-queries integer;
max-refresh-time integer;
max-retry-time integer;
d544 3
a546 4
max-transfer-time-in integer;
max-transfer-time-out integer;
max-udp-size integer;
max-zone-ttl ( unlimited | ttlval );
a547 2
min-retry-time integer;
minimal-responses boolean;
d549 14
a562 94
no-case-compress { address_match_element; ... };
nosit-udp-size integer;, experimental
notify ( explicit | master-only | boolean );
notify-delay integer;
notify-source ( ipv4_address | * ) [ port ( integer | * ) ] [
dscp integer ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ]
[ dscp integer ];
notify-to-soa boolean;
preferred-glue string;
prefetch integer [ integer ];
provide-ixfr boolean;
query-source ( ( [ address ] ( ipv4_address | * ) [ port (
integer | * ) ] ) | ( [ [ address ] ( ipv4_address | * ) ]
port ( integer | * ) ) ) [ dscp integer ];
query-source-v6 ( ( [ address ] ( ipv6_address | * ) [ port (
integer | * ) ] ) | ( [ [ address ] ( ipv6_address | * ) ]
port ( integer | * ) ) ) [ dscp integer ];
rate-limit {
all-per-second integer;
errors-per-second integer;
exempt-clients { address_match_element; ... };
ipv4-prefix-length integer;
ipv6-prefix-length integer;
log-only boolean;
max-table-size integer;
min-table-size integer;
nodata-per-second integer;
nxdomains-per-second integer;
qps-scale integer;
referrals-per-second integer;
responses-per-second integer;
slip integer;
window integer;
};
recursion boolean;
request-ixfr boolean;
request-nsid boolean;
request-sit boolean;, experimental
resolver-query-timeout integer;
response-policy { zone quoted_string [ policy ( cname | disabled
| drop | given | no-op | nodata | nxdomain | passthru |
tcp-only quoted_string ) ] [ recursive-only boolean ] [
max-policy-ttl integer ]; ... } [ recursive-only boolean ]
[ break-dnssec boolean ] [ max-policy-ttl integer ] [
min-ns-dots integer ] [ qname-wait-recurse boolean ];
root-delegation-only [ exclude { quoted_string; ... } ];
rrset-order { [ class string ] [ type string ] [ name
quoted_string ] string string; ... };
serial-update-method ( increment | unixtime );
server netprefix {
bogus boolean;
edns boolean;
edns-udp-size integer;
keys server_key;
max-udp-size integer;
notify-source ( ipv4_address | * ) [ port ( integer | *
) ] [ dscp integer ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer
| * ) ] [ dscp integer ];
provide-ixfr boolean;
query-source ( ( [ address ] ( ipv4_address | * ) [ port
( integer | * ) ] ) | ( [ [ address ] (
ipv4_address | * ) ] port ( integer | * ) ) ) [
dscp integer ];
query-source-v6 ( ( [ address ] ( ipv6_address | * ) [
port ( integer | * ) ] ) | ( [ [ address ] (
ipv6_address | * ) ] port ( integer | * ) ) ) [
dscp integer ];
request-ixfr boolean;
request-nsid boolean;
request-sit boolean;, experimental
tcp-only boolean;
transfer-format ( many-answers | one-answer );
transfer-source ( ipv4_address | * ) [ port ( integer |
* ) ] [ dscp integer ];
transfer-source-v6 ( ipv6_address | * ) [ port (
integer | * ) ] [ dscp integer ];
transfers integer;
};
sig-signing-nodes integer;
sig-signing-signatures integer;
sig-signing-type integer;
sig-validity-interval integer [ integer ];
sortlist { address_match_element; ... };
transfer-format ( many-answers | one-answer );
transfer-source ( ipv4_address | * ) [ port ( integer | * ) ] [
dscp integer ];
transfer-source-v6 ( ipv6_address | * ) [ port ( integer | * )
] [ dscp integer ];
trust-anchor-telemetry boolean; // experimental
trusted-keys { string integer
integer integer quoted_string;
... };
d564 1
a564 2
update-check-ksk boolean;
use-alt-transfer-source boolean;
d567 6
a572 98
zone string [ class ] {
allow-notify { address_match_element; ... };
allow-query { address_match_element; ... };
allow-query-on { address_match_element; ... };
allow-transfer { address_match_element; ... };
allow-update { address_match_element; ... };
allow-update-forwarding { address_match_element; ... };
also-notify [ port integer ] [ dscp integer ] { (
masters | ipv4_address [ port integer ] |
ipv6_address [ port integer ] ) [ key string ];
... };
alt-transfer-source ( ipv4_address | * ) [ port (
integer | * ) ] [ dscp integer ];
alt-transfer-source-v6 ( ipv6_address | * ) [ port (
integer | * ) ] [ dscp integer ];
auto-dnssec ( allow | maintain | off );
check-dup-records ( fail | warn | ignore );
check-integrity boolean;
check-mx ( fail | warn | ignore );
check-mx-cname ( fail | warn | ignore );
check-names ( fail | warn | ignore );
check-sibling boolean;
check-spf ( warn | ignore );
check-srv-cname ( fail | warn | ignore );
check-wildcard boolean;
database string;
delegation-only boolean;
dialup ( notify | notify-passive | passive | refresh |
boolean );
dlz string;
dnssec-dnskey-kskonly boolean;
dnssec-loadkeys-interval integer;
dnssec-secure-to-insecure boolean;
dnssec-update-mode ( maintain | no-resign );
file quoted_string;
forward ( first | only );
forwarders [ port integer ] [ dscp integer ] { (
ipv4_address | ipv6_address ) [ port integer ] [
dscp integer ]; ... };
in-view string;
inline-signing boolean;
ixfr-from-differences boolean;
journal quoted_string;
key-directory quoted_string;
masterfile-format ( map | raw | text );
masters [ port integer ] [ dscp integer ] { ( masters
| ipv4_address [ port integer ] | ipv6_address [
port integer ] ) [ key string ]; ... };
max-ixfr-log-size ( default | unlimited |
max-journal-size size_no_default;
max-records integer;
max-refresh-time integer;
max-retry-time integer;
max-transfer-idle-in integer;
max-transfer-idle-out integer;
max-transfer-time-in integer;
max-transfer-time-out integer;
max-zone-ttl ( unlimited | ttlval );
min-refresh-time integer;
min-retry-time integer;
multi-master boolean;
notify ( explicit | master-only | boolean );
notify-delay integer;
notify-source ( ipv4_address | * ) [ port ( integer | *
) ] [ dscp integer ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer
| * ) ] [ dscp integer ];
notify-to-soa boolean;
pubkey integer
integer
integer
request-ixfr boolean;
serial-update-method ( increment | unixtime );
server-addresses { ( ipv4_address | ipv6_address ) [
port integer ]; ... };
server-names { quoted_string; ... };
sig-signing-nodes integer;
sig-signing-signatures integer;
sig-signing-type integer;
sig-validity-interval integer [ integer ];
transfer-source ( ipv4_address | * ) [ port ( integer |
* ) ] [ dscp integer ];
transfer-source-v6 ( ipv6_address | * ) [ port (
integer | * ) ] [ dscp integer ];
try-tcp-refresh boolean;
type ( delegation-only | forward | hint | master | redirect
| slave | static-stub | stub );
update-check-ksk boolean;
update-policy ( local | { ( deny | grant ) string (
6to4-self | external | krb5-self | krb5-subdomain |
ms-self | ms-subdomain | name | self | selfsub |
selfwild | subdomain | tcp-self | wildcard | zonesub )
[ string ] rrtypelist; ... };
use-alt-transfer-source boolean;
zero-no-soa-ttl boolean;
zone-statistics ( full | terse | none | boolean );
};
zone-statistics ( full | terse | none | boolean );
d578 1
a578 1
string [ class ] {address_match_element; ... };integer ] [ dscp integer ] { ( masters |ipv4_address [ port integer ] | ipv6_address [ portinteger ] ) [ key string ]; ... };ipv4_address | * ) [ port ( integer | * )integer ];ipv6_address | * ) [ port ( integer |integer ];boolean;boolean;boolean;string;boolean;boolean );string;integer;boolean;quoted_string;integer ] [ dscp integer ] { ( ipv4_addressipv6_address ) [ port integer ] [ dscp integer ]; ... };string;boolean;boolean;quoted_string;quoted_string;integer ] [ dscp integer ] { ( masters |ipv4_address [ port integer ] | ipv6_address [ portinteger ] ) [ key string ]; ... };integer;integer;integer;integer;ttlval );integer;boolean );integer;ipv4_address | * ) [ port ( integer | * ) ] [integer ];ipv6_address | * ) [ port ( integer | * ) ]integer ];boolean;integer integeripv4_address | ipv6_address ) [ portinteger ]; ... };quoted_string; ... };integer;integer;integer;integer [ integer ];ipv4_address | * ) [ port ( integer | * ) ] [integer ];ipv6_address | * ) [ port ( integer | * )integer ];boolean;string ( 6to4-self |string ] rrtypelist; ... };boolean;boolean;boolean );named.conf — configuration file for named
named.conf
named.conf is the configuration file
d57 1
a57 1
d60 1 a60 1
d63 1 a63 1
d66 3 a68 2
d75 3
a77 2
d86 3
a88 2
d97 3
a99 2
d108 1
d122 3
a124 2
d132 3
a134 2
d142 3
a144 2
d156 3
a158 2
d176 3
a178 2
d191 3
a193 2
d340 1
d402 3
a404 2
d431 5
d539 1
d575 3
a577 2
d638 1
d675 3
a677 2
/etc/named.conf
d682 3
a684 2
named(8), named-checkconf(8), rndc(8), d698 2 a699 1
named.conf
— configuration file for named
named.conf
named.conf is the configuration file
d41 1
a41 1
d44 1 a44 1
d47 1 a47 1
d50 2 a51 3
d57 2
a58 3
d66 2
a67 3
d75 2
a76 3
a83 1
tcp-only boolean;
d97 2
a98 3
d105 2
a106 3
d113 2
a114 3
d125 2
a126 3
d143 2
a144 3
d156 2
a157 3
a302 1
max-records integer;
d364 2
a365 3
a390 5
managed-keys {
domain_name initial-key flags protocol algorithm key;
[...]
};
a493 1
max-records integer;
d529 2
a530 3
a589 1
max-records integer;
d626 2
a627 3
/etc/named.conf
d631 2
a632 3
named(8) , named-checkconf(8) , rndc(8) , d639 1 a639 2
domain_name flags protocol algorithm key; ... domain_name initial-key flags protocol algorithm key; ... boolean;domain_name flags protocol algorithm key; ...domain_name initial-key flags protocol algorithm key; ...boolean;boolean; // obsoletedomain_name flags protocol algorithm key; ...domain_name initial-key flags protocol algorithm key; ...boolean;boolean; // obsolete
named.conf
— configuration file for named
named.conf
named.conf is the configuration file
d41 1
a41 1
d44 1 a44 1
d47 1 a47 1
d50 2 a51 3
d57 2
a58 3
d66 2
a67 3
d75 2
a76 3
a83 1
tcp-only boolean;
d97 2
a98 3
d105 2
a106 3
d113 2
a114 3
d125 2
a126 3
d143 2
a144 3
d156 2
a157 3
a302 1
max-records integer;
d364 2
a365 3
a390 5
managed-keys {
domain_name initial-key flags protocol algorithm key;
[...]
};
a493 1
max-records integer;
d529 2
a530 3
a589 1
max-records integer;
d626 2
a627 3
/etc/named.conf
d631 2
a632 3
named(8) , named-checkconf(8) , rndc(8) , d639 1 a639 2
named.conf
— configuration file for named
named.conf
named.conf is the configuration file
d41 1
a41 1
d44 1 a44 1
d47 1 a47 1
d50 2 a51 3
d57 2
a58 3
d66 2
a67 3
d75 2
a76 3
a83 1
tcp-only boolean;
d97 2
a98 3
d105 2
a106 3
d113 2
a114 3
d125 2
a126 3
d143 2
a144 3
d156 2
a157 3
a302 1
max-records integer;
d364 2
a365 3
a390 5
managed-keys {
domain_name initial-key flags protocol algorithm key;
[...]
};
a493 1
max-records integer;
d529 2
a530 3
a589 1
max-records integer;
d626 2
a627 3
/etc/named.conf
d631 2
a632 3
named(8) , named-checkconf(8) , rndc(8) , d639 1 a639 2
domain_name flags protocol algorithm key; ...domain_name initial-key flags protocol algorithm key; ...boolean;boolean; // obsolete
named.conf
— configuration file for named
named.conf
named.conf is the configuration file
d41 1
a41 1
d44 1 a44 1
d47 1 a47 1
d50 2 a51 3
d57 2
a58 3
d66 2
a67 3
d75 2
a76 3
a83 1
tcp-only boolean;
d97 2
a98 3
d105 2
a106 3
d113 2
a114 3
d125 2
a126 3
d143 2
a144 3
d156 2
a157 3
a302 1
max-records integer;
d364 2
a365 3
a390 5
managed-keys {
domain_name initial-key flags protocol algorithm key;
[...]
};
a493 1
max-records integer;
d529 2
a530 3
a589 1
max-records integer;
d626 2
a627 3
/etc/named.conf
d631 2
a632 3
named(8) , named-checkconf(8) , rndc(8) , d639 1 a639 2
allow|maintain|create|off;quoted_string | none );quoted_string | hostname | none );string { string; ... };allow|maintain|off;string { string; ... };string trust-anchor string;auto | domain trust-anchor domain );string trust-anchor string;auto | no | domain trust-anchor domain );auto | no | domain trust-anchor domain );boolean;quoted_string | hostname | none );string { string; ... };allow|maintain|off;string { string; ... };auto | no | domain trust-anchor domain );auto | no | domain trust-anchor domain );boolean;quoted_string | hostname | none );allow|maintain|off;domain_name flags protocol algorithm key; ...domain_name initial-key flags protocol algorithm key; ...boolean; // obsoletequoted_string | hostname | none );allow|maintain|off;domain_name flags protocol algorithm key; ...domain_name initial-key flags protocol algorithm key; ...boolean; // obsoletequoted_string | hostname | none );allow|maintain|off;domain_name flags protocol algorithm key; ...domain_name initial-key flags protocol algorithm key; ...boolean; // obsoleteinteger ]; ... };integer ]; ... };integer ]; ... };quoted_string;integer;string;string;prefix {boolean;boolean;ipv6_address;integer;string;string;prefix {boolean;boolean;ipv6_address;boolean;boolean;boolean;boolean;boolean;boolean;string integer integer integer quoted_string; ...stringrrtypelist; ...quoted_string | none |;
managed-keys {
domain_name initial-key flags protocol algorithm key; ...
};
auto | domain trust-anchor domain );boolean;allow|maintain|create|off;boolean;address_match_listnamelist } ];namelistnamelist } ];string integer integer integer quoted_string;boolean;boolean;boolean;local | {
d514 3
a516 4
tcp-self | zonesub | 6to4-self ) string
rrtypelist;
[...]
};boolean;boolean;boolean;boolean;boolean;boolean;boolean;quoted_string;quoted_string;integer;string;string;prefix {boolean;boolean;ipv6_address;integer;string;string;prefix {boolean;boolean;ipv6_address;integer ]; ...keyname ] ... };integer ]; ...keyname ] ... };integer ]; ...keyname ] ... };auto | no | domain trust-anchor domain );auto | no | domain trust-anchor domain );boolean;quoted_string | none );quoted_string | hostname | none );string { string; ... };allow|maintain|off;string { string; ... };domain_name flags protocol algorithm key; ...domain_name initial-key flags protocol algorithm key; ...boolean;boolean; // obsolete
named.conf
— configuration file for named
named.conf
named.conf is the configuration file
d41 1
a41 1
d44 1 a44 1
d47 1 a47 1
d50 2 a51 3
d57 2
a58 3
d66 2
a67 3
d75 2
a76 3
a83 1
tcp-only boolean;
d97 2
a98 3
d105 2
a106 3
d113 2
a114 3
d125 2
a126 3
d143 2
a144 3
d156 2
a157 3
a302 1
max-records integer;
d364 2
a365 3
a390 5
managed-keys {
domain_name initial-key flags protocol algorithm key;
[...]
};
a493 1
max-records integer;
d529 2
a530 3
a589 1
max-records integer;
d626 2
a627 3
/etc/named.conf
d631 2
a632 3
named(8) , named-checkconf(8) , rndc(8) , d639 1 a639 2
ipv4_address | ipv6_address |integer | * ) ] allowaddress_match_element; ... } [string; ... } ];quoted_string perm integerinteger group integer [string; ... } ];string {string;boolean;string {string;string;string { string; ... };string {quoted_string [ versions ( "unlimited" | integer )size ];boolean;boolean;boolean;log_severity;syslog_facility ];integer ] [ dscp integer ] { ( ipv4_addressipv6_address ) [ port integer ] [ dscp integer ]; ... };integer;string; ... };string [ class ];string string integerinteger integer quoted_string; ... };string [ port integer ] [ dscpinteger ] { ( masters | ipv4_address [integer ] | ipv6_address [ portinteger ] ) [ key string ]; ... };integer;boolean;boolean;boolean;boolean;address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };address_match_element; ... };integer ] [ dscp integer ] { ( masters |ipv4_address [ port integer ] | ipv6_address [ portinteger ] ) [ key string ]; ... };ipv4_address | * ) [ port ( integer | * )integer ];ipv6_address | * ) [ port ( integer |integer ];string;boolean; // default changedboolean;portrange; ... };portrange; ... };quoted_string;quoted_string;boolean;boolean;boolean;integer;integer;sizeval );sizeval );address_match_element; ... } [quoted_string; ... } ];quoted_string; ... } [ except-from {quoted_string; ... } ];boolean );string { string;string { string;string;netprefix {boolean;address_match_element; ... };address_match_element; ... };address_match_element; ... };boolean;ipv6_address;string;string;boolean;boolean;boolean;integer;string trust-anchorstring | auto | no );string boolean;boolean;integer;integer ] { ( quoted_string [ portinteger ] [ dscp integer ] | ipv4_address [ portinteger ] [ dscp integer ] | ipv6_address [ portinteger ] [ dscp integer ] ); ... };integer;string;string;boolean;integer fixedpointfixedpoint fixedpoint;integer [ ( drop | fail ) ];integer [ ( drop | fail ) ];sizeval );address_match_element; ... };boolean );boolean );boolean;integer ] [ dscp integer ] { ( ipv4_addressipv6_address ) [ port integer ] [ dscp integer ]; ... };quoted_string | none );boolean;boolean );quoted_string;integer;integer ] [ dscpinteger ] {address_match_element; ... };integer ] [ dscpinteger ] {address_match_element; ... };quoted_string;size_no_default;size_no_default;integer;integer;size_no_default;integer;integer;integer;integer;integer;integer;integer;integer;integer;integer;integer;integer;ttlval );boolean;integer;integer;boolean;boolean;address_match_element; ... };integer;, experimentalboolean );integer;ipv4_address | * ) [ port ( integer | * ) ] [integer ];ipv6_address | * ) [ port ( integer | * ) ]integer ];boolean;string;integer [ integer ];boolean;ipv4_address | * ) [ port (integer | * ) ] ) | ( [ [ address ] ( ipv4_address | * ) ]integer | * ) ) ) [ dscp integer ];ipv6_address | * ) [ port (integer | * ) ] ) | ( [ [ address ] ( ipv6_address | * ) ]integer | * ) ) ) [ dscp integer ];integer;integer;address_match_element; ... };integer;integer;boolean;integer;integer;integer;integer;integer;integer;integer;integer;integer;quoted_string;boolean;boolean;boolean;boolean;, experimentalinteger;integer;quoted_string [ policy ( cname | disabledquoted_string ) ] [ recursive-only boolean ] [integer ]; ... } [ recursive-only boolean ]boolean ] [ max-policy-ttl integer ] [integer ] [ qname-wait-recurse boolean ];quoted_string; ... } ];string ] [ type string ] [ namequoted_string ] string string; ... };quoted_string;quoted_string | none | hostname );string;quoted_string | none );string;integer;integer;integer;integer [ integer ];string;, experimentaladdress_match_element; ... };sizeval );quoted_string;ipv4_address | * ) [ port ( integer | * ) ] [integer ];ipv6_address | * ) [ port ( integer | * )integer ];integer;boolean; // experimentalboolean;portrange; ... };portrange; ... };quoted_string | none );boolean );netprefix {boolean;boolean;integer;server_key;integer;ipv4_address | * ) [ port ( integer | * ) ] [integer ];ipv6_address | * ) [ port ( integer | * ) ]integer ];ipv4_address | * ) [ port (integer | * ) ] ) | ( [ [ address ] ( ipv4_address | * ) ]integer | * ) ) ) [ dscp integer ];ipv6_address | * ) [ port (integer | * ) ] ) | ( [ [ address ] ( ipv6_address | * ) ]integer | * ) ) ) [ dscp integer ];boolean;boolean;, experimentalboolean;ipv4_address | * ) [ port ( integer | * ) ] [integer ];ipv6_address | * ) [ port ( integer | * )integer ];integer;
statistics-channels {
inet ( ipv4_address | ipv6_address |
* ) [ port ( integer | * ) ] [
allow { address_match_element; ...
} ];
};
view string [ class ] {
acache-cleaning-interval integer;
acache-enable boolean;
d452 19
a470 23
allow-new-zones boolean;
allow-notify { address_match_element; ... };
allow-query { address_match_element; ... };
allow-query-cache { address_match_element; ... };
allow-query-cache-on { address_match_element; ... };
allow-query-on { address_match_element; ... };
allow-recursion { address_match_element; ... };
allow-recursion-on { address_match_element; ... };
allow-transfer { address_match_element; ... };
allow-update { address_match_element; ... };
allow-update-forwarding { address_match_element; ... };
also-notify [ port integer ] [ dscp integer ] { ( masters |
ipv4_address [ port integer ] | ipv6_address [ port
integer ] ) [ key string ]; ... };
alt-transfer-source ( ipv4_address | * ) [ port ( integer | * )
] [ dscp integer ];
alt-transfer-source-v6 ( ipv6_address | * ) [ port ( integer |
* ) ] [ dscp integer ];
attach-cache string;
auth-nxdomain boolean; // default changed
auto-dnssec ( allow | maintain | off );
cache-file quoted_string;
check-dup-records ( fail | warn | ignore );
a471 1
check-mx ( fail | warn | ignore );
a472 4
check-names ( master | slave | response
) ( fail | warn | ignore );
check-sibling boolean;
check-spf ( warn | ignore );
d474 7
a480 16
check-wildcard boolean;
cleaning-interval integer;
clients-per-query integer;
deny-answer-addresses { address_match_element; ... } [
except-from { quoted_string; ... } ];
deny-answer-aliases { quoted_string; ... } [ except-from {
quoted_string; ... } ];
dialup ( notify | notify-passive | passive | refresh | boolean );
disable-algorithms string { string;
... };
disable-ds-digests string { string;
... };
disable-empty-zone string;
dlz string {
database string;
search boolean;
d482 17
a498 1
dns64 netprefix {
a499 3
clients { address_match_element; ... };
exclude { address_match_element; ... };
mapped { address_match_element; ... };
d503 2
a504 17
dns64-contact string;
dns64-server string;
dnssec-accept-expired boolean;
dnssec-dnskey-kskonly boolean;
dnssec-enable boolean;
dnssec-loadkeys-interval integer;
dnssec-lookaside ( string trust-anchor
string | auto | no );
dnssec-must-be-secure string boolean;
dnssec-secure-to-insecure boolean;
dnssec-update-mode ( maintain | no-resign );
dnssec-validation ( yes | no | auto );
dual-stack-servers [ port integer ] { ( quoted_string [ port
integer ] [ dscp integer ] | ipv4_address [ port
integer ] [ dscp integer ] | ipv6_address [ port
integer ] [ dscp integer ] ); ... };
edns-udp-size integer;
a505 1
empty-server string;
d507 26
a532 7
fetch-quota-params integer fixedpoint
fixedpoint fixedpoint;
fetches-per-server integer [ ( drop | fail ) ];
fetches-per-zone integer [ ( drop | fail ) ];
filter-aaaa { address_match_element; ... };
filter-aaaa-on-v4 ( break-dnssec | boolean );
filter-aaaa-on-v6 ( break-dnssec | boolean );
d534 2
a535 7
forwarders [ port integer ] [ dscp integer ] { ( ipv4_address
| ipv6_address ) [ port integer ] [ dscp integer ]; ... };
inline-signing boolean;
ixfr-from-differences ( master | slave | boolean );
key string {
algorithm string;
secret string;
d537 1
a537 13
key-directory quoted_string;
lame-ttl integer;
managed-keys { string string
integer integer integer
quoted_string; ... };
masterfile-format ( map | raw | text );
match-clients { address_match_element; ... };
match-destinations { address_match_element; ... };
match-recursive-only boolean;
max-acache-size size_no_default;
max-cache-size size_no_default;
max-cache-ttl integer;
max-clients-per-query integer;
a538 1
max-ncache-ttl integer;
d540 2
a541 4
max-recursion-depth integer;
max-recursion-queries integer;
max-refresh-time integer;
max-retry-time integer;
d544 3
a546 4
max-transfer-time-in integer;
max-transfer-time-out integer;
max-udp-size integer;
max-zone-ttl ( unlimited | ttlval );
a547 2
min-retry-time integer;
minimal-responses boolean;
d549 14
a562 94
no-case-compress { address_match_element; ... };
nosit-udp-size integer;, experimental
notify ( explicit | master-only | boolean );
notify-delay integer;
notify-source ( ipv4_address | * ) [ port ( integer | * ) ] [
dscp integer ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ]
[ dscp integer ];
notify-to-soa boolean;
preferred-glue string;
prefetch integer [ integer ];
provide-ixfr boolean;
query-source ( ( [ address ] ( ipv4_address | * ) [ port (
integer | * ) ] ) | ( [ [ address ] ( ipv4_address | * ) ]
port ( integer | * ) ) ) [ dscp integer ];
query-source-v6 ( ( [ address ] ( ipv6_address | * ) [ port (
integer | * ) ] ) | ( [ [ address ] ( ipv6_address | * ) ]
port ( integer | * ) ) ) [ dscp integer ];
rate-limit {
all-per-second integer;
errors-per-second integer;
exempt-clients { address_match_element; ... };
ipv4-prefix-length integer;
ipv6-prefix-length integer;
log-only boolean;
max-table-size integer;
min-table-size integer;
nodata-per-second integer;
nxdomains-per-second integer;
qps-scale integer;
referrals-per-second integer;
responses-per-second integer;
slip integer;
window integer;
};
recursion boolean;
request-ixfr boolean;
request-nsid boolean;
request-sit boolean;, experimental
resolver-query-timeout integer;
response-policy { zone quoted_string [ policy ( cname | disabled
| drop | given | no-op | nodata | nxdomain | passthru |
tcp-only quoted_string ) ] [ recursive-only boolean ] [
max-policy-ttl integer ]; ... } [ recursive-only boolean ]
[ break-dnssec boolean ] [ max-policy-ttl integer ] [
min-ns-dots integer ] [ qname-wait-recurse boolean ];
root-delegation-only [ exclude { quoted_string; ... } ];
rrset-order { [ class string ] [ type string ] [ name
quoted_string ] string string; ... };
serial-update-method ( increment | unixtime );
server netprefix {
bogus boolean;
edns boolean;
edns-udp-size integer;
keys server_key;
max-udp-size integer;
notify-source ( ipv4_address | * ) [ port ( integer | *
) ] [ dscp integer ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer
| * ) ] [ dscp integer ];
provide-ixfr boolean;
query-source ( ( [ address ] ( ipv4_address | * ) [ port
( integer | * ) ] ) | ( [ [ address ] (
ipv4_address | * ) ] port ( integer | * ) ) ) [
dscp integer ];
query-source-v6 ( ( [ address ] ( ipv6_address | * ) [
port ( integer | * ) ] ) | ( [ [ address ] (
ipv6_address | * ) ] port ( integer | * ) ) ) [
dscp integer ];
request-ixfr boolean;
request-nsid boolean;
request-sit boolean;, experimental
tcp-only boolean;
transfer-format ( many-answers | one-answer );
transfer-source ( ipv4_address | * ) [ port ( integer |
* ) ] [ dscp integer ];
transfer-source-v6 ( ipv6_address | * ) [ port (
integer | * ) ] [ dscp integer ];
transfers integer;
};
sig-signing-nodes integer;
sig-signing-signatures integer;
sig-signing-type integer;
sig-validity-interval integer [ integer ];
sortlist { address_match_element; ... };
transfer-format ( many-answers | one-answer );
transfer-source ( ipv4_address | * ) [ port ( integer | * ) ] [
dscp integer ];
transfer-source-v6 ( ipv6_address | * ) [ port ( integer | * )
] [ dscp integer ];
trust-anchor-telemetry boolean; // experimental
trusted-keys { string integer
integer integer quoted_string;
... };
d564 1
a564 2
update-check-ksk boolean;
use-alt-transfer-source boolean;
d567 6
a572 98
zone string [ class ] {
allow-notify { address_match_element; ... };
allow-query { address_match_element; ... };
allow-query-on { address_match_element; ... };
allow-transfer { address_match_element; ... };
allow-update { address_match_element; ... };
allow-update-forwarding { address_match_element; ... };
also-notify [ port integer ] [ dscp integer ] { (
masters | ipv4_address [ port integer ] |
ipv6_address [ port integer ] ) [ key string ];
... };
alt-transfer-source ( ipv4_address | * ) [ port (
integer | * ) ] [ dscp integer ];
alt-transfer-source-v6 ( ipv6_address | * ) [ port (
integer | * ) ] [ dscp integer ];
auto-dnssec ( allow | maintain | off );
check-dup-records ( fail | warn | ignore );
check-integrity boolean;
check-mx ( fail | warn | ignore );
check-mx-cname ( fail | warn | ignore );
check-names ( fail | warn | ignore );
check-sibling boolean;
check-spf ( warn | ignore );
check-srv-cname ( fail | warn | ignore );
check-wildcard boolean;
database string;
delegation-only boolean;
dialup ( notify | notify-passive | passive | refresh |
boolean );
dlz string;
dnssec-dnskey-kskonly boolean;
dnssec-loadkeys-interval integer;
dnssec-secure-to-insecure boolean;
dnssec-update-mode ( maintain | no-resign );
file quoted_string;
forward ( first | only );
forwarders [ port integer ] [ dscp integer ] { (
ipv4_address | ipv6_address ) [ port integer ] [
dscp integer ]; ... };
in-view string;
inline-signing boolean;
ixfr-from-differences boolean;
journal quoted_string;
key-directory quoted_string;
masterfile-format ( map | raw | text );
masters [ port integer ] [ dscp integer ] { ( masters
| ipv4_address [ port integer ] | ipv6_address [
port integer ] ) [ key string ]; ... };
max-ixfr-log-size ( default | unlimited |
max-journal-size size_no_default;
max-records integer;
max-refresh-time integer;
max-retry-time integer;
max-transfer-idle-in integer;
max-transfer-idle-out integer;
max-transfer-time-in integer;
max-transfer-time-out integer;
max-zone-ttl ( unlimited | ttlval );
min-refresh-time integer;
min-retry-time integer;
multi-master boolean;
notify ( explicit | master-only | boolean );
notify-delay integer;
notify-source ( ipv4_address | * ) [ port ( integer | *
) ] [ dscp integer ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer
| * ) ] [ dscp integer ];
notify-to-soa boolean;
pubkey integer
integer
integer
request-ixfr boolean;
serial-update-method ( increment | unixtime );
server-addresses { ( ipv4_address | ipv6_address ) [
port integer ]; ... };
server-names { quoted_string; ... };
sig-signing-nodes integer;
sig-signing-signatures integer;
sig-signing-type integer;
sig-validity-interval integer [ integer ];
transfer-source ( ipv4_address | * ) [ port ( integer |
* ) ] [ dscp integer ];
transfer-source-v6 ( ipv6_address | * ) [ port (
integer | * ) ] [ dscp integer ];
try-tcp-refresh boolean;
type ( delegation-only | forward | hint | master | redirect
| slave | static-stub | stub );
update-check-ksk boolean;
update-policy ( local | { ( deny | grant ) string (
6to4-self | external | krb5-self | krb5-subdomain |
ms-self | ms-subdomain | name | self | selfsub |
selfwild | subdomain | tcp-self | wildcard | zonesub )
[ string ] rrtypelist; ... };
use-alt-transfer-source boolean;
zero-no-soa-ttl boolean;
zone-statistics ( full | terse | none | boolean );
};
zone-statistics ( full | terse | none | boolean );
d578 1
a578 1
string [ class ] {address_match_element; ... };integer ] [ dscp integer ] { ( masters |ipv4_address [ port integer ] | ipv6_address [ portinteger ] ) [ key string ]; ... };ipv4_address | * ) [ port ( integer | * )integer ];ipv6_address | * ) [ port ( integer |integer ];boolean;boolean;boolean;string;boolean;boolean );string;integer;boolean;quoted_string;integer ] [ dscp integer ] { ( ipv4_addressipv6_address ) [ port integer ] [ dscp integer ]; ... };string;boolean;boolean;quoted_string;quoted_string;integer ] [ dscp integer ] { ( masters |ipv4_address [ port integer ] | ipv6_address [ portinteger ] ) [ key string ]; ... };integer;integer;integer;integer;ttlval );integer;boolean );integer;ipv4_address | * ) [ port ( integer | * ) ] [integer ];ipv6_address | * ) [ port ( integer | * ) ]integer ];boolean;integer integeripv4_address | ipv6_address ) [ portinteger ]; ... };quoted_string; ... };integer;integer;integer;integer [ integer ];ipv4_address | * ) [ port ( integer | * ) ] [integer ];ipv6_address | * ) [ port ( integer | * )integer ];boolean;string ( 6to4-self |string ] rrtypelist; ... };boolean;boolean;boolean );named.conf — configuration file for named
named.conf
named.conf is the configuration file
for
named. Statements are enclosed
in braces and terminated with a semi-colon. Clauses in
the statements are also semi-colon terminated. The usual
comment styles are supported:
C style: /* */
C++ style: // to end of line
Unix style: # to end of line
masters string [ port integer ] {
( masters | ipv4_address [port integer] |
ipv6_address [port integer] ) [ key string ]; ...
};
server ( ipv4_address[/prefixlen] | ipv6_address[/prefixlen] ) {
bogus boolean;
edns boolean;
edns-udp-size integer;
max-udp-size integer;
provide-ixfr boolean;
request-ixfr boolean;
keys server_key;
transfers integer;
transfer-format ( many-answers | one-answer );
transfer-source ( ipv4_address | * )
[ port ( integer | * ) ];
transfer-source-v6 ( ipv6_address | * )
[ port ( integer | * ) ];
support-ixfr boolean; // obsolete
};
controls {
inet ( ipv4_address | ipv6_address | * )
[ port ( integer | * ) ]
allow { address_match_element; ... }
[ keys { string; ... } ];
unix unsupported; // not implemented
};
logging {
channel string {
file log_file;
syslog optional_facility;
null;
stderr;
severity log_severity;
print-time boolean;
print-severity boolean;
print-category boolean;
};
category string { string; ... };
};
lwres {
listen-on [ port integer ] {
( ipv4_address | ipv6_address ) [ port integer ]; ...
};
view string optional_class;
search { string; ... };
ndots integer;
};
options {
avoid-v4-udp-ports { port; ... };
avoid-v6-udp-ports { port; ... };
blackhole { address_match_element; ... };
coresize size;
datasize size;
directory quoted_string;
dump-file quoted_string;
files size;
heartbeat-interval integer;
host-statistics boolean; // not implemented
host-statistics-max number; // not implemented
hostname ( quoted_string | none );
interface-interval integer;
listen-on [ port integer ] { address_match_element; ... };
listen-on-v6 [ port integer ] { address_match_element; ... };
match-mapped-addresses boolean;
memstatistics-file quoted_string;
pid-file ( quoted_string | none );
port integer;
querylog boolean;
recursing-file quoted_string;
reserved-sockets integer;
random-device quoted_string;
recursive-clients integer;
serial-query-rate integer;
server-id ( quoted_string | none |;
stacksize size;
statistics-file quoted_string;
statistics-interval integer; // not yet implemented
tcp-clients integer;
tcp-listen-queue integer;
tkey-dhkey quoted_string integer;
tkey-gssapi-credential quoted_string;
tkey-domain quoted_string;
transfers-per-ns integer;
transfers-in integer;
transfers-out integer;
use-ixfr boolean;
version ( quoted_string | none );
allow-recursion { address_match_element; ... };
allow-recursion-on { address_match_element; ... };
sortlist { address_match_element; ... };
topology { address_match_element; ... }; // not implemented
auth-nxdomain boolean; // default changed
minimal-responses boolean;
recursion boolean;
rrset-order {
[ class string ] [ type string ]
[ name quoted_string ] string string; ...
};
provide-ixfr boolean;
request-ixfr boolean;
rfc2308-type1 boolean; // not yet implemented
additional-from-auth boolean;
additional-from-cache boolean;
query-source ( ( ipv4_address | * ) | [ address ( ipv4_address | * ) ] ) [ port ( integer | * ) ];
query-source-v6 ( ( ipv6_address | * ) | [ address ( ipv6_address | * ) ] ) [ port ( integer | * ) ];
use-queryport-pool boolean;
queryport-pool-ports integer;
queryport-pool-updateinterval integer;
cleaning-interval integer;
min-roots integer; // not implemented
lame-ttl integer;
max-ncache-ttl integer;
max-cache-ttl integer;
transfer-format ( many-answers | one-answer );
max-cache-size size;
max-acache-size size;
clients-per-query number;
max-clients-per-query number;
check-names ( master | slave | response )
( fail | warn | ignore );
check-mx ( fail | warn | ignore );
check-integrity boolean;
check-mx-cname ( fail | warn | ignore );
check-srv-cname ( fail | warn | ignore );
cache-file quoted_string; // test option
suppress-initial-notify boolean; // not yet implemented
preferred-glue string;
dual-stack-servers [ port integer ] {
( quoted_string [port integer] |
ipv4_address [port integer] |
ipv6_address [port integer] ); ...
};
edns-udp-size integer;
max-udp-size integer;
root-delegation-only [ exclude { quoted_string; ... } ];
disable-algorithms string { string; ... };
dnssec-enable boolean;
dnssec-validation boolean;
dnssec-lookaside string trust-anchor string;
dnssec-must-be-secure string boolean;
dnssec-accept-expired boolean;
empty-server string;
empty-contact string;
empty-zones-enable boolean;
disable-empty-zone string;
dialup dialuptype;
ixfr-from-differences ixfrdiff;
allow-query { address_match_element; ... };
allow-query-on { address_match_element; ... };
allow-query-cache { address_match_element; ... };
allow-query-cache-on { address_match_element; ... };
allow-transfer { address_match_element; ... };
allow-update { address_match_element; ... };
allow-update-forwarding { address_match_element; ... };
update-check-ksk boolean;
masterfile-format ( text | raw );
notify notifytype;
notify-source ( ipv4_address | * ) [ port ( integer | * ) ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ];
notify-delay seconds;
notify-to-soa boolean;
also-notify [ port integer ] { ( ipv4_address | ipv6_address )
[ port integer ]; ... };
allow-notify { address_match_element; ... };
forward ( first | only );
forwarders [ port integer ] {
( ipv4_address | ipv6_address ) [ port integer ]; ...
};
max-journal-size size_no_default;
max-transfer-time-in integer;
max-transfer-time-out integer;
max-transfer-idle-in integer;
max-transfer-idle-out integer;
max-retry-time integer;
min-retry-time integer;
max-refresh-time integer;
min-refresh-time integer;
multi-master boolean;
sig-validity-interval integer;
sig-re-signing-interval integer;
sig-signing-nodes integer;
sig-signing-signatures integer;
sig-signing-type integer;
transfer-source ( ipv4_address | * )
[ port ( integer | * ) ];
transfer-source-v6 ( ipv6_address | * )
[ port ( integer | * ) ];
alt-transfer-source ( ipv4_address | * )
[ port ( integer | * ) ];
alt-transfer-source-v6 ( ipv6_address | * )
[ port ( integer | * ) ];
use-alt-transfer-source boolean;
zone-statistics boolean;
key-directory quoted_string;
try-tcp-refresh boolean;
zero-no-soa-ttl boolean;
zero-no-soa-ttl-cache boolean;
nsec3-test-zone boolean; // testing only
allow-v6-synthesis { address_match_element; ... }; // obsolete
deallocate-on-exit boolean; // obsolete
fake-iquery boolean; // obsolete
fetch-glue boolean; // obsolete
has-old-clients boolean; // obsolete
maintain-ixfr-base boolean; // obsolete
max-ixfr-log-size size; // obsolete
multiple-cnames boolean; // obsolete
named-xfer quoted_string; // obsolete
serial-queries integer; // obsolete
treat-cr-as-space boolean; // obsolete
use-id-pool boolean; // obsolete
};
view string optional_class {
match-clients { address_match_element; ... };
match-destinations { address_match_element; ... };
match-recursive-only boolean;
key string {
algorithm string;
secret string;
};
zone string optional_class {
...
};
server ( ipv4_address[/prefixlen] | ipv6_address[/prefixlen] ) {
...
};
trusted-keys {
string integer integer integer quoted_string; ...
};
allow-recursion { address_match_element; ... };
allow-recursion-on { address_match_element; ... };
sortlist { address_match_element; ... };
topology { address_match_element; ... }; // not implemented
auth-nxdomain boolean; // default changed
minimal-responses boolean;
recursion boolean;
rrset-order {
[ class string ] [ type string ]
[ name quoted_string ] string string; ...
};
provide-ixfr boolean;
request-ixfr boolean;
rfc2308-type1 boolean; // not yet implemented
additional-from-auth boolean;
additional-from-cache boolean;
query-source ( ( ipv4_address | * ) | [ address ( ipv4_address | * ) ] ) [ port ( integer | * ) ];
query-source-v6 ( ( ipv6_address | * ) | [ address ( ipv6_address | * ) ] ) [ port ( integer | * ) ];
use-queryport-pool boolean;
queryport-pool-ports integer;
queryport-pool-updateinterval integer;
cleaning-interval integer;
min-roots integer; // not implemented
lame-ttl integer;
max-ncache-ttl integer;
max-cache-ttl integer;
transfer-format ( many-answers | one-answer );
max-cache-size size;
max-acache-size size;
clients-per-query number;
max-clients-per-query number;
check-names ( master | slave | response )
( fail | warn | ignore );
check-mx ( fail | warn | ignore );
check-integrity boolean;
check-mx-cname ( fail | warn | ignore );
check-srv-cname ( fail | warn | ignore );
cache-file quoted_string; // test option
suppress-initial-notify boolean; // not yet implemented
preferred-glue string;
dual-stack-servers [ port integer ] {
( quoted_string [port integer] |
ipv4_address [port integer] |
ipv6_address [port integer] ); ...
};
edns-udp-size integer;
max-udp-size integer;
root-delegation-only [ exclude { quoted_string; ... } ];
disable-algorithms string { string; ... };
dnssec-enable boolean;
dnssec-validation boolean;
dnssec-lookaside string trust-anchor string;
dnssec-must-be-secure string boolean;
dnssec-accept-expired boolean;
empty-server string;
empty-contact string;
empty-zones-enable boolean;
disable-empty-zone string;
dialup dialuptype;
ixfr-from-differences ixfrdiff;
allow-query { address_match_element; ... };
allow-query-on { address_match_element; ... };
allow-query-cache { address_match_element; ... };
allow-query-cache-on { address_match_element; ... };
allow-transfer { address_match_element; ... };
allow-update { address_match_element; ... };
allow-update-forwarding { address_match_element; ... };
update-check-ksk boolean;
masterfile-format ( text | raw );
notify notifytype;
notify-source ( ipv4_address | * ) [ port ( integer | * ) ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ];
notify-delay seconds;
notify-to-soa boolean;
also-notify [ port integer ] { ( ipv4_address | ipv6_address )
[ port integer ]; ... };
allow-notify { address_match_element; ... };
forward ( first | only );
forwarders [ port integer ] {
( ipv4_address | ipv6_address ) [ port integer ]; ...
};
max-journal-size size_no_default;
max-transfer-time-in integer;
max-transfer-time-out integer;
max-transfer-idle-in integer;
max-transfer-idle-out integer;
max-retry-time integer;
min-retry-time integer;
max-refresh-time integer;
min-refresh-time integer;
multi-master boolean;
sig-validity-interval integer;
transfer-source ( ipv4_address | * )
[ port ( integer | * ) ];
transfer-source-v6 ( ipv6_address | * )
[ port ( integer | * ) ];
alt-transfer-source ( ipv4_address | * )
[ port ( integer | * ) ];
alt-transfer-source-v6 ( ipv6_address | * )
[ port ( integer | * ) ];
use-alt-transfer-source boolean;
zone-statistics boolean;
try-tcp-refresh boolean;
key-directory quoted_string;
zero-no-soa-ttl boolean;
zero-no-soa-ttl-cache boolean;
allow-v6-synthesis { address_match_element; ... }; // obsolete
fetch-glue boolean; // obsolete
maintain-ixfr-base boolean; // obsolete
max-ixfr-log-size size; // obsolete
};
zone string optional_class {
type ( master | slave | stub | hint |
forward | delegation-only );
file quoted_string;
masters [ port integer ] {
( masters |
ipv4_address [port integer] |
ipv6_address [ port integer ] ) [ key string ]; ...
};
database string;
delegation-only boolean;
check-names ( fail | warn | ignore );
check-mx ( fail | warn | ignore );
check-integrity boolean;
check-mx-cname ( fail | warn | ignore );
check-srv-cname ( fail | warn | ignore );
dialup dialuptype;
ixfr-from-differences boolean;
journal quoted_string;
zero-no-soa-ttl boolean;
allow-query { address_match_element; ... };
allow-query-on { address_match_element; ... };
allow-transfer { address_match_element; ... };
allow-update { address_match_element; ... };
allow-update-forwarding { address_match_element; ... };
update-policy {
( grant | deny ) string
( name | subdomain | wildcard | self | selfsub | selfwild |
krb5-self | ms-self | krb5-subdomain | ms-subdomain |
tcp-self | 6to4-self ) string
rrtypelist; ...
};
update-check-ksk boolean;
masterfile-format ( text | raw );
notify notifytype;
notify-source ( ipv4_address | * ) [ port ( integer | * ) ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ];
notify-delay seconds;
notify-to-soa boolean;
also-notify [ port integer ] { ( ipv4_address | ipv6_address )
[ port integer ]; ... };
allow-notify { address_match_element; ... };
forward ( first | only );
forwarders [ port integer ] {
( ipv4_address | ipv6_address ) [ port integer ]; ...
};
max-journal-size size_no_default;
max-transfer-time-in integer;
max-transfer-time-out integer;
max-transfer-idle-in integer;
max-transfer-idle-out integer;
max-retry-time integer;
min-retry-time integer;
max-refresh-time integer;
min-refresh-time integer;
multi-master boolean;
sig-validity-interval integer;
transfer-source ( ipv4_address | * )
[ port ( integer | * ) ];
transfer-source-v6 ( ipv6_address | * )
[ port ( integer | * ) ];
alt-transfer-source ( ipv4_address | * )
[ port ( integer | * ) ];
alt-transfer-source-v6 ( ipv6_address | * )
[ port ( integer | * ) ];
use-alt-transfer-source boolean;
zone-statistics boolean;
try-tcp-refresh boolean;
key-directory quoted_string;
nsec3-test-zone boolean; // testing only
ixfr-base quoted_string; // obsolete
ixfr-tmp-file quoted_string; // obsolete
maintain-ixfr-base boolean; // obsolete
max-ixfr-log-size size; // obsolete
pubkey integer integer integer quoted_string; // obsolete
};