pdns/pdns.conf-dist

   1 # Autogenerated configuration file template
   2 #################################
   3 # allow-2136-from       A global setting to allow RFC2136 from these IP ranges.
   4 #
   5 # allow-2136-from=0.0.0.0/0
   6
   7 #################################
   8 # allow-axfr-ips        Allow zonetransfers only to these subnets
   9 #
  10 # allow-axfr-ips=127.0.0.0/8,::1
  11
  12 #################################
  13 # allow-recursion       List of subnets that are allowed to recurse
  14 #
  15 # allow-recursion=0.0.0.0/0
  16
  17 #################################
  18 # also-notify   When notifying a domain, also notify these nameservers
  19 #
  20 # also-notify=
  21
  22 #################################
  23 # any-to-tcp    Answer ANY queries with tc=1, shunting to TCP
  24 #
  25 # any-to-tcp=no
  26
  27 #################################
  28 # cache-ttl     Seconds to store packets in the PacketCache
  29 #
  30 # cache-ttl=20
  31
  32 #################################
  33 # carbon-interval       Number of seconds between carbon (graphite) updates
  34 #
  35 # carbon-interval=30
  36
  37 #################################
  38 # carbon-ourname        If set, overrides our reported hostname for carbon stats
  39 #
  40 # carbon-ourname=
  41
  42 #################################
  43 # carbon-server If set, send metrics in carbon (graphite) format to this server
  44 #
  45 # carbon-server=
  46
  47 #################################
  48 # chroot        If set, chroot to this directory for more security
  49 #
  50 # chroot=
  51
  52 #################################
  53 # config-dir    Location of configuration directory (pdns.conf)
  54 #
  55 # config-dir=/usr/local/etc
  56
  57 #################################
  58 # config-name   Name of this virtual configuration - will rename the binary image
  59 #
  60 # config-name=
  61
  62 #################################
  63 # control-console       Debugging switch - don't use
  64 #
  65 # control-console=no
  66
  67 #################################
  68 # daemon        Operate as a daemon
  69 #
  70 # daemon=no
  71
  72 #################################
  73 # default-ksk-algorithms        Default KSK algorithms
  74 #
  75 # default-ksk-algorithms=rsasha256
  76
  77 #################################
  78 # default-ksk-size      Default KSK size (0 means default)
  79 #
  80 # default-ksk-size=0
  81
  82 #################################
  83 # default-soa-mail      mail address to insert in the SOA record if none set in the backend
  84 #
  85 # default-soa-mail=
  86
  87 #################################
  88 # default-soa-name      name to insert in the SOA record if none set in the backend
  89 #
  90 # default-soa-name=a.misconfigured.powerdns.server
  91
  92 #################################
  93 # default-ttl   Seconds a result is valid if not set otherwise
  94 #
  95 # default-ttl=3600
  96
  97 #################################
  98 # default-zsk-algorithms        Default ZSK algorithms
  99 #
 100 # default-zsk-algorithms=rsasha256
 101
 102 #################################
 103 # default-zsk-size      Default ZSK size (0 means default)
 104 #
 105 # default-zsk-size=0
 106
 107 #################################
 108 # direct-dnskey Fetch DNSKEY RRs from backend during DNSKEY synthesis
 109 #
 110 # direct-dnskey=no
 111
 112 #################################
 113 # disable-axfr  Disable zonetransfers but do allow TCP queries
 114 #
 115 # disable-axfr=no
 116
 117 #################################
 118 # disable-axfr-rectify  Disable the rectify step during an outgoing AXFR. Only required for regression testing.
 119 #
 120 # disable-axfr-rectify=no
 121
 122 #################################
 123 # disable-tcp   Do not listen to TCP queries
 124 #
 125 # disable-tcp=no
 126
 127 #################################
 128 # distributor-threads   Default number of Distributor (backend) threads to start
 129 #
 130 # distributor-threads=3
 131
 132 #################################
 133 # do-ipv6-additional-processing Do AAAA additional processing
 134 #
 135 # do-ipv6-additional-processing=yes
 136
 137 #################################
 138 # edns-subnet-processing        If we should act on EDNS Subnet options
 139 #
 140 # edns-subnet-processing=no
 141
 142 #################################
 143 # entropy-source        If set, read entropy from this file
 144 #
 145 # entropy-source=/dev/urandom
 146
 147 #################################
 148 # experimental-api-readonly     If the JSON API should disallow data modification
 149 #
 150 # experimental-api-readonly=no
 151
 152 #################################
 153 # experimental-dname-processing If we should support DNAME records
 154 #
 155 # experimental-dname-processing=no
 156
 157 #################################
 158 # experimental-json-interface   If the webserver should serve JSON data
 159 #
 160 # experimental-json-interface=no
 161
 162 #################################
 163 # experimental-logfile  Filename of the log file for JSON parser
 164 #
 165 # experimental-logfile=/var/log/pdns.log
 166
 167 #################################
 168 # experimental-rfc2136  Enable/Disable RFC2136 (Dynamic DNS) support. Default is no.
 169 #
 170 # experimental-rfc2136=no
 171
 172 #################################
 173 # fancy-records Process URL and MBOXFW records
 174 #
 175 # fancy-records=no
 176
 177 #################################
 178 # forward-2136  A global setting to allow RFC2136 packages that are for a Slave domain, to be forwarded to the master.
 179 #
 180 # forward-2136=yes
 181
 182 #################################
 183 # guardian      Run within a guardian process
 184 #
 185 # guardian=no
 186
 187 #################################
 188 # include-dir   Include *.conf files from this directory
 189 #
 190 # include-dir=
 191
 192 #################################
 193 # launch        Which backends to launch and order to query them in
 194 #
 195 # launch=
 196
 197 #################################
 198 # load-modules  Load this module - supply absolute or relative path
 199 #
 200 # load-modules=
 201
 202 #################################
 203 # local-address Local IP addresses to which we bind
 204 #
 205 # local-address=0.0.0.0
 206
 207 #################################
 208 # local-address-nonexist-fail   Fail to start if one or more of the local-address's do not exist on this server
 209 #
 210 # local-address-nonexist-fail=yes
 211
 212 #################################
 213 # local-ipv6    Local IP address to which we bind
 214 #
 215 # local-ipv6=
 216
 217 #################################
 218 # local-ipv6-nonexist-fail      Fail to start if one or more of the local-ipv6 addresses do not exist on this server
 219 #
 220 # local-ipv6-nonexist-fail=yes
 221
 222 #################################
 223 # local-port    The port on which we listen
 224 #
 225 # local-port=53
 226
 227 #################################
 228 # log-dns-details       If PDNS should log DNS non-erroneous details
 229 #
 230 # log-dns-details=no
 231
 232 #################################
 233 # log-dns-queries       If PDNS should log all incoming DNS queries
 234 #
 235 # log-dns-queries=no
 236
 237 #################################
 238 # logging-facility      Log under a specific facility
 239 #
 240 # logging-facility=
 241
 242 #################################
 243 # loglevel      Amount of logging. Higher is more. Do not set below 3
 244 #
 245 # loglevel=4
 246
 247 #################################
 248 # lua-prequery-script   Lua script with prequery handler
 249 #
 250 # lua-prequery-script=
 251
 252 #################################
 253 # master        Act as a master
 254 #
 255 # master=no
 256
 257 #################################
 258 # max-cache-entries     Maximum number of cache entries
 259 #
 260 # max-cache-entries=1000000
 261
 262 #################################
 263 # max-ent-entries       Maximum number of empty non-terminals in a zone
 264 #
 265 # max-ent-entries=100000
 266
 267 #################################
 268 # max-nsec3-iterations  Limit the number of NSEC3 hash iterations
 269 #
 270 # max-nsec3-iterations=500
 271
 272 #################################
 273 # max-queue-length      Maximum queuelength before considering situation lost
 274 #
 275 # max-queue-length=5000
 276
 277 #################################
 278 # max-signature-cache-entries   Maximum number of signatures cache entries
 279 #
 280 # max-signature-cache-entries=
 281
 282 #################################
 283 # max-tcp-connections   Maximum number of TCP connections
 284 #
 285 # max-tcp-connections=10
 286
 287 #################################
 288 # module-dir    Default directory for modules
 289 #
 290 # module-dir=/usr/local/lib/pdns
 291
 292 #################################
 293 # negquery-cache-ttl    Seconds to store negative query results in the QueryCache
 294 #
 295 # negquery-cache-ttl=60
 296
 297 #################################
 298 # no-shuffle    Set this to prevent random shuffling of answers - for regression testing
 299 #
 300 # no-shuffle=off
 301
 302 #################################
 303 # only-notify   Only send AXFR NOTIFY to these IP addresses or netmasks
 304 #
 305 # only-notify=0.0.0.0/0,::/0
 306
 307 #################################
 308 # out-of-zone-additional-processing     Do out of zone additional processing
 309 #
 310 # out-of-zone-additional-processing=yes
 311
 312 #################################
 313 # overload-queue-length Maximum queuelength moving to packetcache only
 314 #
 315 # overload-queue-length=0
 316
 317 #################################
 318 # pipebackend-abi-version       Version of the pipe backend ABI
 319 #
 320 # pipebackend-abi-version=1
 321
 322 #################################
 323 # prevent-self-notification     Don't send notifications to what we think is ourself
 324 #
 325 # prevent-self-notification=yes
 326
 327 #################################
 328 # query-cache-ttl       Seconds to store query results in the QueryCache
 329 #
 330 # query-cache-ttl=20
 331
 332 #################################
 333 # query-local-address   Source IP address for sending queries
 334 #
 335 # query-local-address=0.0.0.0
 336
 337 #################################
 338 # query-local-address6  Source IPv6 address for sending queries
 339 #
 340 # query-local-address6=::
 341
 342 #################################
 343 # query-logging Hint backends that queries should be logged
 344 #
 345 # query-logging=no
 346
 347 #################################
 348 # queue-limit   Maximum number of milliseconds to queue a query
 349 #
 350 # queue-limit=1500
 351
 352 #################################
 353 # receiver-threads      Default number of receiver threads to start
 354 #
 355 # receiver-threads=1
 356
 357 #################################
 358 # recursive-cache-ttl   Seconds to store packets for recursive queries in the PacketCache
 359 #
 360 # recursive-cache-ttl=10
 361
 362 #################################
 363 # recursor      If recursion is desired, IP address of a recursing nameserver
 364 #
 365 # recursor=no
 366
 367 #################################
 368 # retrieval-threads     Number of AXFR-retrieval threads for slave operation
 369 #
 370 # retrieval-threads=2
 371
 372 #################################
 373 # reuseport     Enable higher performance on compliant kernels by using SO_REUSEPORT allowing each receiver thread to open its own socket
 374 #
 375 # reuseport=no
 376
 377 #################################
 378 # send-root-referral    Send out old-fashioned root-referral instead of ServFail in case of no authority
 379 #
 380 # send-root-referral=no
 381
 382 #################################
 383 # server-id     Returned when queried for 'server.id' TXT or NSID, defaults to hostname - disabled or custom
 384 #
 385 # server-id=
 386
 387 #################################
 388 # setgid        If set, change group id to this gid for more security
 389 #
 390 # setgid=
 391
 392 #################################
 393 # setuid        If set, change user id to this uid for more security
 394 #
 395 # setuid=
 396
 397 #################################
 398 # signing-threads       Default number of signer threads to start
 399 #
 400 # signing-threads=3
 401
 402 #################################
 403 # slave Act as a slave
 404 #
 405 # slave=no
 406
 407 #################################
 408 # slave-cycle-interval  Reschedule failed SOA serial checks once every .. seconds
 409 #
 410 # slave-cycle-interval=60
 411
 412 #################################
 413 # slave-renotify        If we should send out notifications for slaved updates
 414 #
 415 # slave-renotify=no
 416
 417 #################################
 418 # smtpredirector        Our smtpredir MX host
 419 #
 420 # smtpredirector=a.misconfigured.powerdns.smtp.server
 421
 422 #################################
 423 # soa-expire-default    Default SOA expire
 424 #
 425 # soa-expire-default=604800
 426
 427 #################################
 428 # soa-minimum-ttl       Default SOA minimum ttl
 429 #
 430 # soa-minimum-ttl=3600
 431
 432 #################################
 433 # soa-refresh-default   Default SOA refresh
 434 #
 435 # soa-refresh-default=10800
 436
 437 #################################
 438 # soa-retry-default     Default SOA retry
 439 #
 440 # soa-retry-default=3600
 441
 442 #################################
 443 # soa-serial-offset     Make sure that no SOA serial is less than this number
 444 #
 445 # soa-serial-offset=0
 446
 447 #################################
 448 # socket-dir    Where the controlsocket will live
 449 #
 450 # socket-dir=/var/run
 451
 452 #################################
 453 # tcp-control-address   If set, PowerDNS can be controlled over TCP on this address
 454 #
 455 # tcp-control-address=
 456
 457 #################################
 458 # tcp-control-port      If set, PowerDNS can be controlled over TCP on this address
 459 #
 460 # tcp-control-port=53000
 461
 462 #################################
 463 # tcp-control-range     If set, remote control of PowerDNS is possible over these networks only
 464 #
 465 # tcp-control-range=127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, ::1/128, fe80::/10
 466
 467 #################################
 468 # tcp-control-secret    If set, PowerDNS can be controlled over TCP after passing this secret
 469 #
 470 # tcp-control-secret=
 471
 472 #################################
 473 # traceback-handler     Enable the traceback handler (Linux only)
 474 #
 475 # traceback-handler=yes
 476
 477 #################################
 478 # trusted-notification-proxy    IP address of incoming notification proxy
 479 #
 480 # trusted-notification-proxy=
 481
 482 #################################
 483 # udp-truncation-threshold      Maximum UDP response size before we truncate
 484 #
 485 # udp-truncation-threshold=1680
 486
 487 #################################
 488 # urlredirector Where we send hosts to that need to be url redirected
 489 #
 490 # urlredirector=127.0.0.1
 491
 492 #################################
 493 # version-string        PowerDNS version in packets - full, anonymous, powerdns or custom
 494 #
 495 # version-string=full
 496
 497 #################################
 498 # webserver     Start a webserver for monitoring
 499 #
 500 # webserver=no
 501
 502 #################################
 503 # webserver-address     IP Address of webserver to listen on
 504 #
 505 # webserver-address=127.0.0.1
 506
 507 #################################
 508 # webserver-allow-from  Webserver access is only allowed from these subnets
 509 #
 510 # webserver-allow-from=0.0.0.0/0,::/0
 511
 512 #################################
 513 # webserver-password    Password required for accessing the webserver
 514 #
 515 # webserver-password=
 516
 517 #################################
 518 # webserver-port        Port of webserver to listen on
 519 #
 520 # webserver-port=8081
 521
 522 #################################
 523 # webserver-print-arguments     If the webserver should print arguments
 524 #
 525 # webserver-print-arguments=no
 526
 527 #################################
 528 # wildcard-url  Process URL and MBOXFW records
 529 #
 530 # wildcard-url=no
 531
 532