-Cache configuration
-===================
+Cache
+=====
The default cache in Knot Resolver is persistent on disk, which means that the daemon doesn't lose
the cached data on restart or crash, and thus performace does not suffer from cold-starts.
-TODO: Modules configuration
-===========================
+TODO: Modules
+=============
The daemon provides an interface for dynamic loading of daemon modules.
.. _network-configuration:
-Network configuration
-=====================
+Network
+=======
Modern Linux distributions use so-called *Systemd socket activation*, which
effectively means that IP addresses and ports to listen on are configured
.. _tls-server-config:
-TLS server configuration
-========================
+TLS server
+==========
DNS-over-TLS server (:rfc:`7858`) is enabled by default on loopback interface port 853.
Information how to configure listening on specific IP addresses is in previous sections
:ref:`network-configuration`.
.. _dnssec-config:
-Trust anchors and DNSSEC
-========================
+DNSSEC
+======
Since version 4.0, **DNSSEC validation is enabled by default**.
This is secure default and should not be changed unless absolutely necessary.
.. include:: ../modules/edns_keepalive/README.rst
-Other
-=====
+TODO: Other
+===========
.. include:: ../modules/http/README.rst
.. include:: ../modules/http/README.doh.rst
.. include:: ../modules/daf/README.rst