]> git.ipfire.org Git - thirdparty/pdns.git/blame - pdns/ixfrdist.example.yml
Merge pull request #6938 from needleshaped/needleshaped-doc-only-notify_what_if_ipver...
[thirdparty/pdns.git] / pdns / ixfrdist.example.yml
CommitLineData
f2d45260
PL
1# Listen addresses. ixfrdist will listen on both UDP and TCP.
2# When no port is specified, 53 is used. When specifying ports for IPv6, use the
3# "bracket" notation:
4#
5# listen:
6# - '127.0.0.1'
7# - '::1'
8# - '192.0.2.3:5300'
9# - '[2001:DB8:1234::334]:5353'
10#
11# By default, or when unset, ixfrdist listens on local loopback addresses.
12listen:
13 - '127.0.0.1'
14 - '::1'
15
16# Netmasks or IP addresses of hosts that are allowed to query ixfrdist. Hosts
17# do not need a netmask:
18#
19# acl:
20# - '127.0.0.0/8'
21# - '::1'
22# - '192.0.2.55'
23# - '2001:DB8:ABCD::/48'
24#
25# By default (or when unset), only loopback addresses are allowed.
26#
27acl:
28 - '127.0.0.0/8'
29 - '::1'
30
31# Timeout in seconds an AXFR transaction requested by ixfrdist may take.
32# Increase this when the network to the authoritative servers is slow or the
33# domains are very large and you experience timeouts. Set to 20 by default or
34# when unset.
35#
36axfr-timeout: 20
37
971e5911
RG
38# Whether record compression should be enabled, leading to smaller answers
39# at the cost of an increased CPU and memory usage. Defaults to false.
40#
41compress: false
42
f2d45260
PL
43# Amount of older copies/IXFR diffs to keep for every domain. This is set to
44# 20 by default or when unset.
45#
46keep: 20
47
48# Number of threads to spawn for TCP connections (AXFRs) from downstream hosts.
49# This is set to 10 by default or when unset.
50#
51tcp-in-threads: 10
52
53# The directory where the domain data is stored. When unset, the current
54# working directory is used. Note that this directory must be writable for the
55# user or group ixfrdist runs as.
56#
57# work-dir: '/var/lib/ixfrdist'
58
59# User to drop privileges to once all listen-sockets are bound. May be either
60# a username or numerical ID.
61#
62# uid: ixfrdist
63
64# Group to drop privileges to once all listen-sockets are bound. May be either
65# a username or numerical ID.
66#
67# gid: ixfrdist
68
69# The domains to redistribute, the 'master' and 'domains' keys are mandatory.
70# When no port is specified, 53 is used. When specifying ports for IPv6, use the
71# "bracket" notation:
72#
73# domains:
74# - domain: example.com
75# master: 192.0.2.15
76# - domain: rpz.example
77# master: [2001:DB8:a34:543::53]:5353
78#
79domains: []