## `default-ksk-algorithms`
* String
-* Default: rsasha256
+* Default: ecdsa256
The algorithm that should be used for the KSK when running
[`pdnsutil secure-zone`](../manpages/pdnsutil.1.md).
## `default-zsk-algorithms`
* String
-* Default: rsasha256
+* Default: (empty)
The algorithm that should be used for the ZSK when running
[`pdnsutil secure-zone`](../manpages/pdnsutil.1.md).
Seconds to cache domain metadata from the database. A value of 0 disables caching.
-## `edns-subnet-option-number`
-* Integer
-* Removed in 3.4.
-
-If [`edns-subnet-processing`](#edns-subnet-processing) is enabled, this option
-allows the user to override the option number.
-
## `edns-subnet-processing`
* Boolean
* Default: no
change: e.g. `gmysql-host` is available to configure the `host` setting of the
first or main instance, and `gmysql-server2-host` for the second one.
-## `lazy-recursion`
-* Boolean
-* Default: yes
-* Removed in: 3.2
-
-Check local data first before recursing. See ["Recursion"](recursion.md).
-
## `load-modules`
* Paths, seperated by commas
Default [SOA](../types.md#soa) retry.
-## `soa-serial-offset`
-* Integer
-* Removed in: 3.4
-
-If your database contains single-digit SOA serials and you need to host .DE
-domains, this setting can help placate their 6-digit SOA serial requirements.
-Suggested value is to set this to 1000000 which adds 1000000 to all SOA Serials
-under that offset.
-
## `socket-dir`
* Path
`pdns.pid` by default. See [`config-name`](#config-name) and
[Virtual Hosting](running.md#virtual-hosting) how this can differ.
-## `strict-rfc-axfrs`
-* Boolean
-* Default: no
-
-Perform strictly RFC-conforming AXFRs, which are slow, but may be necessary to
-placate some old client tools.
-
## `tcp-control-address`
* IP Address