1 # Listen addresses. ixfrdist will listen on both UDP and TCP.
2 # When no port is specified, 53 is used. When specifying ports for IPv6, use the
9 # - '[2001:DB8:1234::334]:5353'
11 # By default, or when unset, ixfrdist listens on local loopback addresses.
16 # Netmasks or IP addresses of hosts that are allowed to query ixfrdist. Hosts
17 # do not need a netmask:
23 # - '2001:DB8:ABCD::/48'
25 # By default (or when unset), only loopback addresses are allowed.
31 # Maximum number of records allowed in a single zone. ixfrdist will abort the
32 # zone transfer from the master when more than this number of records have been
33 # received. A value of 0 (the default) means unlimited
37 # Timeout in seconds an AXFR transaction requested by ixfrdist may take.
38 # Increase this when the network to the authoritative servers is slow or the
39 # domains are very large and you experience timeouts. Set to 20 by default or
44 # Time in seconds between retries of the SOA query for a zone we have never
49 # Whether record compression should be enabled, leading to smaller answers
50 # at the cost of an increased CPU and memory usage. Defaults to false.
54 # Amount of older copies/IXFR diffs to keep for every domain. This is set to
55 # 20 by default or when unset.
59 # Number of threads to spawn for TCP connections (AXFRs) from downstream hosts.
60 # This is set to 10 by default or when unset.
64 # The directory where the domain data is stored. When unset, the current
65 # working directory is used. Note that this directory must be writable for the
66 # user or group ixfrdist runs as.
68 # work-dir: '/var/lib/ixfrdist'
70 # User to drop privileges to once all listen-sockets are bound. May be either
71 # a username or numerical ID.
75 # Group to drop privileges to once all listen-sockets are bound. May be either
76 # a username or numerical ID.
80 # The IP address and port where the webserver should listen
82 webserver-address: 127.0.0.1:8080
84 # The IP address(masks) that allowed to access the webserver. When not set,
85 # it defaults to 127.0.0.0/8, ::1/128
91 # How much the webserver should log: 'none', 'normal' or 'detailed'
92 # With 'none', nothing is logged except for errors
93 # With 'normal' (the default), one line per request is logged in the style of the common log format
94 # with 'detailed', the full requests and responses (including headers) are logged
95 webserver-loglevel: normal
97 # The domains to redistribute, the 'master' and 'domains' keys are mandatory.
98 # When no port is specified, 53 is used. When specifying ports for IPv6, use the
102 # - domain: example.com
104 # - domain: rpz.example
105 # master: [2001:DB8:a34:543::53]:5353