pdns/ixfrdist.example.yml

   1 # Listen addresses. ixfrdist will listen on both UDP and TCP.
   2 # When no port is specified, 53 is used. When specifying ports for IPv6, use the
   3 # "bracket" notation:
   4 #
   5 #    listen:
   6 #      - '127.0.0.1'
   7 #      - '::1'
   8 #      - '192.0.2.3:5300'
   9 #      - '[2001:DB8:1234::334]:5353'
  10 #
  11 # By default, or when unset, ixfrdist listens on local loopback addresses.
  12 listen:
  13   - '127.0.0.1'
  14   - '::1'
  15
  16 # Netmasks or IP addresses of hosts that are allowed to query ixfrdist. Hosts
  17 # do not need a netmask:
  18 #
  19 #    acl:
  20 #      - '127.0.0.0/8'
  21 #      - '::1'
  22 #      - '192.0.2.55'
  23 #      - '2001:DB8:ABCD::/48'
  24 #
  25 # By default (or when unset), only loopback addresses are allowed.
  26 #
  27 acl:
  28   - '127.0.0.0/8'
  29   - '::1'
  30
  31 # Timeout in seconds an AXFR transaction requested by ixfrdist may take.
  32 # Increase this when the network to the authoritative servers is slow or the
  33 # domains are very large and you experience timeouts. Set to 20 by default or
  34 # when unset.
  35 #
  36 axfr-timeout: 20
  37
  38 # Whether record compression should be enabled, leading to smaller answers
  39 # at the cost of an increased CPU and memory usage. Defaults to false.
  40 #
  41 compress: false
  42
  43 # Amount of older copies/IXFR diffs to keep for every domain. This is set to
  44 # 20 by default or when unset.
  45 #
  46 keep: 20
  47
  48 # Number of threads to spawn for TCP connections (AXFRs) from downstream hosts.
  49 # This is set to 10 by default or when unset.
  50 #
  51 tcp-in-threads: 10
  52
  53 # The directory where the domain data is stored. When unset, the current
  54 # working directory is used. Note that this directory must be writable for the
  55 # user or group ixfrdist runs as.
  56 #
  57 # work-dir: '/var/lib/ixfrdist'
  58
  59 # User to drop privileges to once all listen-sockets are bound. May be either
  60 # a username or numerical ID.
  61 #
  62 # uid: ixfrdist
  63
  64 # Group to drop privileges to once all listen-sockets are bound. May be either
  65 # a username or numerical ID.
  66 #
  67 # gid: ixfrdist
  68
  69 # The domains to redistribute, the 'master' and 'domains' keys are mandatory.
  70 # When no port is specified, 53 is used. When specifying ports for IPv6, use the
  71 # "bracket" notation:
  72 #
  73 #    domains:
  74 #      - domain: example.com
  75 #        master: 192.0.2.15
  76 #      - domain: rpz.example
  77 #        master: [2001:DB8:a34:543::53]:5353
  78 #
  79 domains: []