<command>max-ncache-ttl</command>,
<command>max-stale-ttl</command>,
<command>max-cache-size</command>, and
+ <command>min-cache-ttl</command>,
+ <command>min-ncache-ttl</command>,
<command>zero-no-soa-ttl</command>.
</para>
</listitem>
</varlistentry>
+ <varlistentry>
+ <term><command>min-ncache-ttl</command></term>
+ <listitem>
+ <para>
+ To reduce network traffic and increase performance, the server
+ stores negative answers. <command>min-ncache-ttl</command> is
+ used to set a minimum retention time for these answers in the
+ server in seconds. For convenience, TTL-style time unit
+ suffixes may be used to specify the value. The default
+ <command>min-ncache-ttl</command> is <literal>0</literal>
+ seconds. <command>min-ncache-ttl</command> cannot exceed 90
+ seconds and will be truncated to 90 seconds if set to a
+ greater value.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>min-cache-ttl</command></term>
+ <listitem>
+ <para>
+ Sets the minimum time for which the server will cache ordinary
+ (positive) answers in seconds. For convenience, TTL-style time
+ unit suffixes may be used to specify the value. The default
+ <command>min-cache-ttl</command> is <literal>0</literal>
+ seconds. <command>min-cache-ttl</command> cannot exceed 90
+ seconds and will be truncated to 90 seconds if set to a
+ greater value.
+ </para>
+ </listitem>
+ </varlistentry>
+
<varlistentry>
<term><command>max-ncache-ttl</command></term>
<listitem>
bindkeys-file <quoted_string>;
blackhole { <address_match_element>; ... };
cache-file <quoted_string>;
- catalog-zones { zone <quoted_string> [ default-masters [ port
- <integer> ] [ dscp <integer> ] { ( <masters> | <ipv4_address> [
- port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
+ catalog-zones { zone <string> [ default-masters [ port <integer> ]
+ [ dscp <integer> ] { ( <masters> | <ipv4_address> [ port
+ <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
<string> ]; ... } ] [ zone-directory <quoted_string> ] [
in-memory <boolean> ] [ min-update-interval <ttlval> ]; ... };
check-dup-records ( fail | warn | ignore );
fstrm-set-output-queue-model ( mpsc | spsc );
fstrm-set-output-queue-size <integer>;
fstrm-set-reopen-interval <ttlval>;
- geoip-directory ( <quoted_string> | none );
+ geoip-directory ( <quoted_string> | none ); // not configured
geoip-use-ecs <boolean>; // obsolete
glue-cache <boolean>;
has-old-clients <boolean>; // obsolete
memstatistics <boolean>;
memstatistics-file <quoted_string>;
message-compression <boolean>;
+ min-cache-ttl <ttlval>;
+ min-ncache-ttl <ttlval>;
min-refresh-time <integer>;
min-retry-time <integer>;
min-roots <integer>; // not implemented
resolver-retry-interval <integer>;
response-padding { <address_match_element>; ... } block-size
<integer>;
- response-policy { zone <quoted_string> [ log <boolean> ] [
- max-policy-ttl <ttlval> ] [ min-update-interval <ttlval> ] [
- policy ( cname | disabled | drop | given | no-op | nodata |
- nxdomain | passthru | tcp-only <quoted_string> ) ] [
- recursive-only <boolean> ] [ nsip-enable <boolean> ] [
- nsdname-enable <boolean> ]; ... } [ break-dnssec <boolean> ] [
- max-policy-ttl <ttlval> ] [ min-update-interval <ttlval> ] [
- min-ns-dots <integer> ] [ nsip-wait-recurse <boolean> ] [
- qname-wait-recurse <boolean> ] [ recursive-only <boolean> ] [
- nsip-enable <boolean> ] [ nsdname-enable <boolean> ] [
- dnsrps-enable <boolean> ] [ dnsrps-options { <unspecified-text>
- } ];
+ response-policy { zone <string> [ log <boolean> ] [ max-policy-ttl
+ <ttlval> ] [ min-update-interval <ttlval> ] [ policy ( cname |
+ disabled | drop | given | no-op | nodata | nxdomain | passthru
+ | tcp-only <quoted_string> ) ] [ recursive-only <boolean> ] [
+ nsip-enable <boolean> ] [ nsdname-enable <boolean> ]; ... } [
+ break-dnssec <boolean> ] [ max-policy-ttl <ttlval> ] [
+ min-update-interval <ttlval> ] [ min-ns-dots <integer> ] [
+ nsip-wait-recurse <boolean> ] [ qname-wait-recurse <boolean> ]
+ [ recursive-only <boolean> ] [ nsip-enable <boolean> ] [
+ nsdname-enable <boolean> ] [ dnsrps-enable <boolean> ] [
+ dnsrps-options { <unspecified-text> } ];
rfc2308-type1 <boolean>; // not yet implemented
root-delegation-only [ exclude { <string>; ... } ];
root-key-sentinel <boolean>;
auth-nxdomain <boolean>; // default changed
auto-dnssec ( allow | maintain | off );
cache-file <quoted_string>;
- catalog-zones { zone <quoted_string> [ default-masters [ port
- <integer> ] [ dscp <integer> ] { ( <masters> | <ipv4_address> [
- port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
+ catalog-zones { zone <string> [ default-masters [ port <integer> ]
+ [ dscp <integer> ] { ( <masters> | <ipv4_address> [ port
+ <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
<string> ]; ... } ] [ zone-directory <quoted_string> ] [
in-memory <boolean> ] [ min-update-interval <ttlval> ]; ... };
check-dup-records ( fail | warn | ignore );
max-udp-size <integer>;
max-zone-ttl ( unlimited | <ttlval> );
message-compression <boolean>;
+ min-cache-ttl <ttlval>;
+ min-ncache-ttl <ttlval>;
min-refresh-time <integer>;
min-retry-time <integer>;
min-roots <integer>; // not implemented
resolver-retry-interval <integer>;
response-padding { <address_match_element>; ... } block-size
<integer>;
- response-policy { zone <quoted_string> [ log <boolean> ] [
- max-policy-ttl <ttlval> ] [ min-update-interval <ttlval> ] [
- policy ( cname | disabled | drop | given | no-op | nodata |
- nxdomain | passthru | tcp-only <quoted_string> ) ] [
- recursive-only <boolean> ] [ nsip-enable <boolean> ] [
- nsdname-enable <boolean> ]; ... } [ break-dnssec <boolean> ] [
- max-policy-ttl <ttlval> ] [ min-update-interval <ttlval> ] [
- min-ns-dots <integer> ] [ nsip-wait-recurse <boolean> ] [
- qname-wait-recurse <boolean> ] [ recursive-only <boolean> ] [
- nsip-enable <boolean> ] [ nsdname-enable <boolean> ] [
- dnsrps-enable <boolean> ] [ dnsrps-options { <unspecified-text>
- } ];
+ response-policy { zone <string> [ log <boolean> ] [ max-policy-ttl
+ <ttlval> ] [ min-update-interval <ttlval> ] [ policy ( cname |
+ disabled | drop | given | no-op | nodata | nxdomain | passthru
+ | tcp-only <quoted_string> ) ] [ recursive-only <boolean> ] [
+ nsip-enable <boolean> ] [ nsdname-enable <boolean> ]; ... } [
+ break-dnssec <boolean> ] [ max-policy-ttl <ttlval> ] [
+ min-update-interval <ttlval> ] [ min-ns-dots <integer> ] [
+ nsip-wait-recurse <boolean> ] [ qname-wait-recurse <boolean> ]
+ [ recursive-only <boolean> ] [ nsip-enable <boolean> ] [
+ nsdname-enable <boolean> ] [ dnsrps-enable <boolean> ] [
+ dnsrps-options { <unspecified-text> } ];
rfc2308-type1 <boolean>; // not yet implemented
root-delegation-only [ exclude { <string>; ... } ];
root-key-sentinel <boolean>;