};
acl accept {
- 10.53.0.1; 10.53.0.2;
+ 10.53.0.1; @ns.ip@;
};
{% include "_common/root.hint.conf" %}
};
acl rejectaddrs {
- !10.53.0.1; !10.53.0.2; any;
+ !10.53.0.1; !@ns.ip@; any;
};
acl check1 { !key one; 10.53.0.1; };
-acl check2 { !key two; 10.53.0.2; };
+acl check2 { !key two; @ns.ip@; };
{% include "_common/root.hint.conf" %}
ixfr-from-differences yes;
check-integrity no;
dnssec-validation no;
- allow-query-on { 10.53.0.2; };
+ allow-query-on { @ns.ip@; };
blackhole { 10.53.0.8; };
};
options {
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
- listen-on { 10.53.0.2; 10.53.0.4; };
+ listen-on { @ns.ip@; 10.53.0.4; };
listen-on-v6 { none; };
recursion no;
dnssec-validation no;
};
view internal {
- match-clients { 10.53.0.2; };
+ match-clients { @ns.ip@; };
allow-new-zones no;
recursion yes;
options {
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
- listen-on { 10.53.0.2; 10.53.0.4; 10.53.0.5; };
+ listen-on { @ns.ip@; 10.53.0.4; 10.53.0.5; };
listen-on-v6 { none; };
recursion no;
new-zones-directory "new-zones";
};
view internal {
- match-clients { 10.53.0.2; };
+ match-clients { @ns.ip@; };
allow-new-zones no;
recursion yes;
options {
{% include_indented "_common/options.conf.j2" %}
recursion no;
- allow-query { 10.53.0.2; };
+ allow-query { @ns.ip@; };
dnssec-validation no;
};
options {
{% include_indented "_common/options.conf.j2" %}
recursion no;
- allow-query {! 10.53.0.2; };
+ allow-query {! @ns.ip@; };
dnssec-validation no;
};
-acl accept { 10.53.0.2; };
+acl accept { @ns.ip@; };
options {
{% include_indented "_common/options.conf.j2" %}
-acl accept { 10.53.0.2; };
+acl accept { @ns.ip@; };
options {
{% include_indented "_common/options.conf.j2" %}
view "internal" {
- allow-query { 10.53.0.2; };
+ allow-query { @ns.ip@; };
{% include_indented "_common/root.hint.conf" %}
view "internal" {
- allow-query {! 10.53.0.2; };
+ allow-query {! @ns.ip@; };
{% include_indented "_common/root.hint.conf" %}
-acl accept { 10.53.0.2; };
+acl accept { @ns.ip@; };
options {
{% include_indented "_common/options.conf.j2" %}
-acl accept { 10.53.0.2; };
+acl accept { @ns.ip@; };
options {
{% include_indented "_common/options.conf.j2" %}
-acl accept { 10.53.0.2; };
+acl accept { @ns.ip@; };
acl badaccept { 10.53.0.1; };
zone "addrallow.example" {
type primary;
file "generic.db";
- allow-query { 10.53.0.2; };
+ allow-query { @ns.ip@; };
};
zone "addrnotallow.example" {
zone "addrdisallow.example" {
type primary;
file "generic.db";
- allow-query { ! 10.53.0.2; };
+ allow-query { ! @ns.ip@; };
};
zone "aclallow.example" {
{% include_indented "_common/options.conf.j2" %}
allow-recursion { any; };
allow-recursion-on { none; };
- allow-query-cache-on { 10.53.0.3; };
+ allow-query-cache-on { @ns.ip@; };
dnssec-validation no;
};
options {
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
- listen-on { 10.53.0.3; 10.53.1.2; };
+ listen-on { @ns.ip@; 10.53.1.2; };
listen-on-v6 { none; };
allow-recursion { any; };
allow-query-cache { any; };
- allow-query-cache-on { 10.53.0.3; }; # allow-recursion-on inherits
+ allow-query-cache-on { @ns.ip@; }; # allow-recursion-on inherits
dnssec-validation no;
};
options {
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
- listen-on { 10.53.0.3; 10.53.1.2; };
+ listen-on { @ns.ip@; 10.53.1.2; };
listen-on-v6 { none; };
allow-recursion { any; };
allow-query-cache { any; };
- allow-recursion-on { 10.53.0.3; }; # allow-query-cache-on inherits
+ allow-recursion-on { @ns.ip@; }; # allow-query-cache-on inherits
dnssec-validation no;
};
options {
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
- listen-on { 10.53.0.3; 10.53.1.2; };
+ listen-on { @ns.ip@; 10.53.1.2; };
listen-on-v6 { none; };
recursion no;
allow-recursion { none; };
{% include "_common/controls.conf.j2" %}
view internal {
- match-destinations { 10.53.0.3; };
+ match-destinations { @ns.ip@; };
{% include_indented "_common/root.hint.conf" %}
recursion yes;
{% include "_common/controls.conf.j2" %}
view internal {
- match-destinations { 10.53.0.3; };
+ match-destinations { @ns.ip@; };
{% include_indented "_common/root.hint.conf" %}
recursion yes;
allow-recursion{ any; };
{% include "_common/controls.conf.j2" %}
view internal {
- match-destinations { 10.53.0.3; };
+ match-destinations { @ns.ip@; };
{% include_indented "_common/root.hint.conf" %}
recursion yes;
allow-query{ any; };
options {
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
- listen-on { 10.53.0.3; 10.53.0.4; 10.53.1.2; };
+ listen-on { @ns.ip@; 10.53.0.4; 10.53.1.2; };
listen-on-v6 { none; };
recursion no;
allow-query-cache { none; };
{% include_indented "_common/root.hint.conf" %}
recursion yes;
- allow-query-cache { 10.53.0.3; 10.53.0.4; };
+ allow-query-cache { @ns.ip@; 10.53.0.4; };
allow-query { 10.53.0.4; };
};
{% if disablev4 %}
query-source address none;
{% else %}
- query-source address 10.53.0.2;
+ query-source address @ns.ip@;
{% endif %}
{% if disablev6 %}
query-source-v6 none;
{% else %}
- query-source-v6 address fd92:7065:b8e:ffff::2;
+ query-source-v6 address @ns.ip6@;
{% endif %}
- notify-source 10.53.0.2;
- transfer-source 10.53.0.2;
+ notify-source @ns.ip@;
+ transfer-source @ns.ip@;
- notify-source-v6 fd92:7065:b8e:ffff::2;
- transfer-source-v6 fd92:7065:b8e:ffff::2;
+ notify-source-v6 @ns.ip6@;
+ transfer-source-v6 @ns.ip6@;
dnssec-validation no;
recursion no;
ixfr-from-differences yes;
check-integrity no;
- no-case-compress { 10.53.0.2; };
+ no-case-compress { @ns.ip@; };
minimal-responses no;
dnssec-validation no;
};
{% include_indented "_common/options.conf.j2" %}
tls-port @TLSPORT@;
allow-new-zones yes;
- listen-on port @EXTRAPORT1@ { 10.53.0.1; };
- listen-on tls ephemeral { 10.53.0.1; };
+ listen-on port @EXTRAPORT1@ { @ns.ip@; };
+ listen-on tls ephemeral { @ns.ip@; };
notify no;
notify-delay 0;
recursion no;
default-primaries { 10.53.0.1 key tsig_key tls ephemeral; };
zone "catalog-self.example"
min-update-interval 1s
- default-primaries { 10.53.0.4; };
+ default-primaries { @ns.ip@; };
};
};
zone "ns2" {
type secondary;
- primaries source 10.53.0.10 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns2.db";
};
zone "ns2-4" {
type secondary;
- primaries source 10.53.0.10 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns2-4.db";
};
zone "ns2-4-5" {
type secondary;
- primaries source 10.53.0.10 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns2-4-5.db";
};
zone "ns2-4-6" {
type secondary;
- primaries source 10.53.0.10 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns2-4-6.db";
};
zone "ns2-5-7" {
type secondary;
- primaries source 10.53.0.10 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns2-5-7.db";
};
zone "ns5" {
type secondary;
- primaries source 10.53.0.10 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns5.db";
};
zone "ns5-6-7" {
type secondary;
- primaries source 10.53.0.10 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns5-6-7.db";
};
zone "ns5-7" {
type secondary;
- primaries source 10.53.0.10 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns5-7.db";
};
zone "ns6" {
type secondary;
- primaries source 10.53.0.10 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns6.db";
};
zone "ns2" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.2; 10.53.0.4; 10.53.0.8; };
+ allow-transfer { @ns.ip@; 10.53.0.4; 10.53.0.8; };
also-notify { 10.53.0.4; 10.53.0.8; };
dnssec-policy default;
file "ns2.db";
zone "ns2-4" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.2; 10.53.0.4; 10.53.0.8; };
+ allow-transfer { @ns.ip@; 10.53.0.4; 10.53.0.8; };
also-notify { 10.53.0.4; 10.53.0.8; };
dnssec-policy default;
file "ns2-4.db";
zone "ns2-4-5" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.2; 10.53.0.4; 10.53.0.8; };
+ allow-transfer { @ns.ip@; 10.53.0.4; 10.53.0.8; };
also-notify { 10.53.0.4; 10.53.0.8; };
dnssec-policy default;
file "ns2-4-5.db";
zone "ns2-4-6" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.2; 10.53.0.4; 10.53.0.8; };
+ allow-transfer { @ns.ip@; 10.53.0.4; 10.53.0.8; };
also-notify { 10.53.0.4; 10.53.0.8; };
dnssec-policy default;
file "ns2-4-6.db";
zone "ns2-5-7" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.2; 10.53.0.4; 10.53.0.8; };
+ allow-transfer { @ns.ip@; 10.53.0.4; 10.53.0.8; };
also-notify { 10.53.0.4; 10.53.0.8; };
dnssec-policy default;
file "ns2-5-7.db";
zone "ns5" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.2; 10.53.0.4; 10.53.0.8; };
+ allow-transfer { @ns.ip@; 10.53.0.4; 10.53.0.8; };
also-notify { 10.53.0.4; 10.53.0.8; };
dnssec-policy default;
file "ns5.db";
zone "ns5-6-7" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.2; 10.53.0.4; 10.53.0.8; };
+ allow-transfer { @ns.ip@; 10.53.0.4; 10.53.0.8; };
also-notify { 10.53.0.4; 10.53.0.8; };
dnssec-policy default;
file "ns5-6-7.db";
zone "ns5-7" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.2; 10.53.0.4; 10.53.0.8; };
+ allow-transfer { @ns.ip@; 10.53.0.4; 10.53.0.8; };
also-notify { 10.53.0.4; 10.53.0.8; };
dnssec-policy default;
file "ns5-7.db";
zone "ns6" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.2; 10.53.0.4; 10.53.0.8; };
+ allow-transfer { @ns.ip@; 10.53.0.4; 10.53.0.8; };
also-notify { 10.53.0.4; 10.53.0.8; };
dnssec-policy default;
file "ns6.db";
zone "ns2" {
type secondary;
- primaries source 10.53.0.4 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns2.db";
};
zone "ns2-4" {
type secondary;
- primaries source 10.53.0.4 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns2-4.db";
};
zone "ns2-4-5" {
type secondary;
- primaries source 10.53.0.4 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns2-4-5.db";
};
zone "ns2-4-6" {
type secondary;
- primaries source 10.53.0.4 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns2-4-6.db";
};
zone "ns2-5-7" {
type secondary;
- primaries source 10.53.0.4 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns2-5-7.db";
};
zone "ns5" {
type secondary;
- primaries source 10.53.0.4 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns5.db";
};
zone "ns5-6-7" {
type secondary;
- primaries source 10.53.0.4 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns5-6-7.db";
};
zone "ns5-7" {
type secondary;
- primaries source 10.53.0.4 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns5-7.db";
};
zone "ns6" {
type secondary;
- primaries source 10.53.0.4 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns6.db";
};
zone "ns2" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.5; 10.53.0.7; 10.53.0.10; };
+ allow-transfer { @ns.ip@; 10.53.0.7; 10.53.0.10; };
also-notify { 10.53.0.7; 10.53.0.10; };
dnssec-policy default;
file "ns2.db";
zone "ns2-4" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.5; 10.53.0.7; 10.53.0.10; };
+ allow-transfer { @ns.ip@; 10.53.0.7; 10.53.0.10; };
also-notify { 10.53.0.7; 10.53.0.10; };
dnssec-policy default;
file "ns2-4.db";
zone "ns2-4-5" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.5; 10.53.0.7; 10.53.0.10; };
+ allow-transfer { @ns.ip@; 10.53.0.7; 10.53.0.10; };
also-notify { 10.53.0.7; 10.53.0.10; };
dnssec-policy default;
file "ns2-4-5.db";
zone "ns2-4-6" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.5; 10.53.0.7; 10.53.0.10; };
+ allow-transfer { @ns.ip@; 10.53.0.7; 10.53.0.10; };
also-notify { 10.53.0.7; 10.53.0.10; };
dnssec-policy default;
file "ns2-4-6.db";
zone "ns2-5-7" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.5; 10.53.0.7; 10.53.0.10; };
+ allow-transfer { @ns.ip@; 10.53.0.7; 10.53.0.10; };
also-notify { 10.53.0.7; 10.53.0.10; };
dnssec-policy default;
file "ns2-5-7.db";
zone "ns5" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.5; 10.53.0.7; 10.53.0.10; };
+ allow-transfer { @ns.ip@; 10.53.0.7; 10.53.0.10; };
also-notify { 10.53.0.7; 10.53.0.10; };
dnssec-policy default;
file "ns5.db";
zone "ns5-6-7" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.5; 10.53.0.7; 10.53.0.10; };
+ allow-transfer { @ns.ip@; 10.53.0.7; 10.53.0.10; };
also-notify { 10.53.0.7; 10.53.0.10; };
dnssec-policy default;
file "ns5-6-7.db";
zone "ns5-7" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.5; 10.53.0.7; 10.53.0.10; };
+ allow-transfer { @ns.ip@; 10.53.0.7; 10.53.0.10; };
also-notify { 10.53.0.7; 10.53.0.10; };
dnssec-policy default;
file "ns5-7.db";
zone "ns6" {
type primary;
allow-update { any; };
- allow-transfer { 10.53.0.5; 10.53.0.7; 10.53.0.10; };
+ allow-transfer { @ns.ip@; 10.53.0.7; 10.53.0.10; };
also-notify { 10.53.0.7; 10.53.0.10; };
dnssec-policy default;
file "ns6.db";
zone "ns2" {
type secondary;
- primaries source 10.53.0.7 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns2.db";
};
zone "ns2-4" {
type secondary;
- primaries source 10.53.0.7 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns2-4.db";
};
zone "ns2-4-5" {
type secondary;
- primaries source 10.53.0.7 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns2-4-5.db";
};
zone "ns2-4-6" {
type secondary;
- primaries source 10.53.0.7 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns2-4-6.db";
};
zone "ns2-5-7" {
type secondary;
- primaries source 10.53.0.7 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns2-5-7.db";
};
zone "ns5" {
type secondary;
- primaries source 10.53.0.7 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns5.db";
};
zone "ns5-6-7" {
type secondary;
- primaries source 10.53.0.7 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns5-6-7.db";
};
zone "ns5-7" {
type secondary;
- primaries source 10.53.0.7 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns5-7.db";
};
zone "ns6" {
type secondary;
- primaries source 10.53.0.7 { 10.53.0.5 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.5 port @PORT@; };
file "ns6.db";
};
zone "ns2" {
type secondary;
- primaries source 10.53.0.8 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns2.db";
};
zone "ns2-4" {
type secondary;
- primaries source 10.53.0.8 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns2-4.db";
};
zone "ns2-4-5" {
type secondary;
- primaries source 10.53.0.8 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns2-4-5.db";
};
zone "ns2-4-6" {
type secondary;
- primaries source 10.53.0.8 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns2-4-6.db";
};
zone "ns2-5-7" {
type secondary;
- primaries source 10.53.0.8 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns2-5-7.db";
};
zone "ns5" {
type secondary;
- primaries source 10.53.0.8 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns5.db";
};
zone "ns5-6-7" {
type secondary;
- primaries source 10.53.0.8 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns5-6-7.db";
};
zone "ns5-7" {
type secondary;
- primaries source 10.53.0.8 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns5-7.db";
};
zone "ns6" {
type secondary;
- primaries source 10.53.0.8 { 10.53.0.2 port @PORT@; };
+ primaries source @ns.ip@ { 10.53.0.2 port @PORT@; };
file "ns6.db";
};
options {
{% include_indented "_common/options.conf.j2" %}
tls-port @TLSPORT@;
- listen-on tls tls-perfect-forward-secrecy { 10.53.0.1; };
- listen-on port @EXTRAPORT1@ tls tls-pfs-aes128 { 10.53.0.1; };
- listen-on port @EXTRAPORT2@ tls tls-pfs-aes256 { 10.53.0.1; };
- listen-on port @EXTRAPORT3@ tls tls-pfs-chacha20 { 10.53.0.1; };
+ listen-on tls tls-perfect-forward-secrecy { @ns.ip@; };
+ listen-on port @EXTRAPORT1@ tls tls-pfs-aes128 { @ns.ip@; };
+ listen-on port @EXTRAPORT2@ tls tls-pfs-aes256 { @ns.ip@; };
+ listen-on port @EXTRAPORT3@ tls tls-pfs-chacha20 { @ns.ip@; };
recursion no;
notify explicit;
also-notify { 10.53.0.2 port @PORT@; };
options {
{% include_indented "_common/options.conf.j2" %}
tls-port @TLSPORT@;
- listen-on tls local { 10.53.0.2; }; // DoT
+ listen-on tls local { @ns.ip@; }; // DoT
recursion no;
notify no;
ixfr-from-differences yes;
options {
{% include_indented "_common/options.conf.j2" %}
tls-port @TLSPORT@;
- listen-on tls local { 10.53.0.3; }; // DoT
+ listen-on tls local { @ns.ip@; }; // DoT
recursion no;
notify no;
ixfr-from-differences yes;
options {
{% include_indented "_common/options.conf.j2" %}
tls-port @TLSPORT@;
- listen-on tls local { 10.53.0.4; }; // DoT
+ listen-on tls local { @ns.ip@; }; // DoT
recursion no;
notify no;
ixfr-from-differences yes;
options {
{% include_indented "_common/options.conf.j2" %}
tls-port @TLSPORT@;
- listen-on tls local { 10.53.0.5; }; // DoT
+ listen-on tls local { @ns.ip@; }; // DoT
recursion no;
notify no;
ixfr-from-differences yes;
};
statistics-channels {
- inet 10.53.0.1 port @EXTRAPORT1@;
+ inet @ns.ip@ port @EXTRAPORT1@;
};
{% include "_common/controls.conf.j2" %}
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
session-keyfile "session.key";
- listen-on { 10.53.0.1; 127.0.0.1; };
+ listen-on { @ns.ip@; 127.0.0.1; };
listen-on-v6 { none; };
- allow-transfer { !10.53.0.1; any; };
+ allow-transfer { !@ns.ip@; any; };
recursion no;
dnssec-validation no;
};
options {
{% include_indented "_common/options.conf.j2" %}
- allow-recursion { 10.53.0.1; };
+ allow-recursion { @ns.ip@; };
dnssec-validation no;
dns64 2001:bbbb::/96 {
options {
{% include_indented "_common/options.conf.j2" %}
- allow-recursion { 10.53.0.1; };
+ allow-recursion { @ns.ip@; };
dnssec-validation no;
dns64 2001:bbbb::/96 {
options {
{% include_indented "_common/options.conf.j2" %}
- allow-recursion { 10.53.0.1; };
+ allow-recursion { @ns.ip@; };
dnssec-validation no;
};
dnssec-validation no;
dns64 2001:aaaa::/96 {
- clients { 10.53.0.2; };
+ clients { @ns.ip@; };
mapped { !rfc1918; any; };
exclude { 2001:eeee::/32; 64:FF9B::/96; ::ffff:0000:0000/96; };
suffix ::;
{% include_indented "_common/options/listen-dual.conf.j2" %}
port @EXTRAPORT1@;
pid-file "named.pid";
- listen-on port @PORT@ { 10.53.0.3; }; // for start.pl
+ listen-on port @PORT@ { @ns.ip@; }; // for start.pl
dnssec-validation no;
allow-recursion { any; };
resolver-use-dns64 yes;
options {
{% include_indented "_common/options/sources.conf.j2" %}
- query-source-v6 address fd92:7065:b8e:fffe::10.53.0.4;
- notify-source-v6 fd92:7065:b8e:fffe::10.53.0.4;
- transfer-source-v6 fd92:7065:b8e:fffe::10.53.0.4;
+ query-source-v6 address fd92:7065:b8e:fffe::@ns.ip@;
+ notify-source-v6 fd92:7065:b8e:fffe::@ns.ip@;
+ transfer-source-v6 fd92:7065:b8e:fffe::@ns.ip@;
port @EXTRAPORT1@;
pid-file "named.pid";
- listen-on port @PORT@ { 10.53.0.4; }; // for start.pl
- listen-on-v6 { fd92:7065:b8e:fffe::10.53.0.4; };
+ listen-on port @PORT@ { @ns.ip@; }; // for start.pl
+ listen-on-v6 { fd92:7065:b8e:fffe::@ns.ip@; };
dnssec-validation no;
recursion no;
};
zone secure.example {
type static-stub;
- server-addresses { 10.53.0.4; };
+ server-addresses { @ns.ip@; };
};
zone insecure.secure.example {
type static-stub;
- server-addresses { 10.53.0.4; };
+ server-addresses { @ns.ip@; };
};
};
options {
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
- listen-on { 10.53.0.5; 127.0.0.1; };
+ listen-on { @ns.ip@; 127.0.0.1; };
listen-on-v6 { none; };
minimal-any no;
minimal-responses no;
tls-port @TLSPORT@;
https-port @HTTPSPORT@;
http-port @HTTPPORT@;
- listen-on tls tls-forward-secrecy { 10.53.0.1; }; // DoT
- listen-on-v6 tls tls-forward-secrecy { fd92:7065:b8e:ffff::1;};
- listen-on tls ephemeral http local { 10.53.0.1; }; // DoH
- listen-on-v6 tls ephemeral http local { fd92:7065:b8e:ffff::1; };
- listen-on tls none http local { 10.53.0.1; }; // unencrypted DoH
- listen-on-v6 tls none http local { fd92:7065:b8e:ffff::1; };
- listen-on port @EXTRAPORT1@ tls tls-pfs-aes256 { 10.53.0.1; }; // DoT
- listen-on-v6 port @EXTRAPORT1@ tls tls-pfs-aes256 { fd92:7065:b8e:ffff::1;};
- listen-on port @EXTRAPORT2@ tls tls-no-subject-alt-name { 10.53.0.1; }; // DoT
- listen-on port @EXTRAPORT3@ tls tls-no-subject-alt-name http local { 10.53.0.1; }; // DoH
- listen-on port @EXTRAPORT4@ tls tls-expired { 10.53.0.1; }; // DoT
- listen-on port @EXTRAPORT5@ tls tls-forward-secrecy-mutual-tls { 10.53.0.1; }; // DoT
- listen-on port @EXTRAPORT6@ tls tls-forward-secrecy-mutual-tls http local { 10.53.0.1; }; // DoH
- listen-on port @EXTRAPORT7@ tls tls-forward-secrecy { 10.53.0.1; }; // DoT
+ listen-on tls tls-forward-secrecy { @ns.ip@; }; // DoT
+ listen-on-v6 tls tls-forward-secrecy { @ns.ip6@;};
+ listen-on tls ephemeral http local { @ns.ip@; }; // DoH
+ listen-on-v6 tls ephemeral http local { @ns.ip6@; };
+ listen-on tls none http local { @ns.ip@; }; // unencrypted DoH
+ listen-on-v6 tls none http local { @ns.ip6@; };
+ listen-on port @EXTRAPORT1@ tls tls-pfs-aes256 { @ns.ip@; }; // DoT
+ listen-on-v6 port @EXTRAPORT1@ tls tls-pfs-aes256 { @ns.ip6@;};
+ listen-on port @EXTRAPORT2@ tls tls-no-subject-alt-name { @ns.ip@; }; // DoT
+ listen-on port @EXTRAPORT3@ tls tls-no-subject-alt-name http local { @ns.ip@; }; // DoH
+ listen-on port @EXTRAPORT4@ tls tls-expired { @ns.ip@; }; // DoT
+ listen-on port @EXTRAPORT5@ tls tls-forward-secrecy-mutual-tls { @ns.ip@; }; // DoT
+ listen-on port @EXTRAPORT6@ tls tls-forward-secrecy-mutual-tls http local { @ns.ip@; }; // DoH
+ listen-on port @EXTRAPORT7@ tls tls-forward-secrecy { @ns.ip@; }; // DoT
recursion no;
notify explicit;
also-notify { 10.53.0.2 port @PORT@; };
tls-port @TLSPORT@;
https-port @HTTPSPORT@;
http-port @HTTPPORT@;
- listen-on tls local { 10.53.0.2; }; // DoT
- listen-on-v6 tls local { fd92:7065:b8e:ffff::2; };
- listen-on tls local http local { 10.53.0.2; }; // DoH
- listen-on-v6 tls local http local { fd92:7065:b8e:ffff::2; };
- listen-on tls none http local { 10.53.0.2; }; // unencrypted DoH
- listen-on-v6 tls none http local { fd92:7065:b8e:ffff::2; };
+ listen-on tls local { @ns.ip@; }; // DoT
+ listen-on-v6 tls local { @ns.ip6@; };
+ listen-on tls local http local { @ns.ip@; }; // DoH
+ listen-on-v6 tls local http local { @ns.ip6@; };
+ listen-on tls none http local { @ns.ip@; }; // unencrypted DoH
+ listen-on-v6 tls none http local { @ns.ip6@; };
allow-recursion { any; };
allow-query-cache { any; };
- allow-recursion-on { 10.53.0.2; }; # allow-query-cache-on inherits;
+ allow-recursion-on { @ns.ip@; }; # allow-query-cache-on inherits;
notify no;
ixfr-from-differences yes;
check-integrity no;
zone "test.example.com" {
type forward;
forward only;
- forwarders port @TLSPORT@ { 10.53.0.2 tls tls-example-primary-wrong-ca; };
+ forwarders port @TLSPORT@ { @ns.ip@ tls tls-example-primary-wrong-ca; };
};
tls tls-example-primary {
tls-port @TLSPORT@;
https-port @HTTPSPORT@;
http-port @HTTPPORT@;
- listen-on tls local { 10.53.0.3; }; // DoT
+ listen-on tls local { @ns.ip@; }; // DoT
recursion no;
notify no;
ixfr-from-differences yes;
tls-port @TLSPORT@;
https-port @HTTPSPORT@;
http-port @HTTPPORT@;
- listen-on tls local { 10.53.0.4; }; // DoT
- listen-on tls local http local { 10.53.0.4; }; // DoH
+ listen-on tls local { @ns.ip@; }; // DoT
+ listen-on tls local http local { @ns.ip@; }; // DoH
recursion no;
notify no;
ixfr-from-differences yes;
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
session-keyfile "session.key";
- listen-on { 10.53.0.1; 127.0.0.1; };
+ listen-on { @ns.ip@; 127.0.0.1; };
listen-on-v6 { none; };
recursion no;
dnssec-validation no;
{% if family == "v6" %}
plugin query "@TOP_BUILDDIR@/filter-@filtertype@.@DYLIB@" {
filter-@filtertype@-on-v6 yes;
- filter-@filtertype@ { fd92:7065:b8e:ffff::1; };
+ filter-@filtertype@ { @ns.ip6@; };
};
{% else %}
- acl filterees { 10.53.0.1; };
+ acl filterees { @ns.ip@; };
plugin query "@TOP_BUILDDIR@/filter-@filtertype@.@DYLIB@" {
filter-@filtertype@-on-v4 yes;
{% if family == "v6" %}
plugin query "@TOP_BUILDDIR@/filter-@filtertype@.@DYLIB@" {
filter-@filtertype@-on-v6 yes;
- filter-@filtertype@ { fd92:7065:b8e:ffff::2; };
+ filter-@filtertype@ { @ns.ip6@; };
};
{% else %}
plugin query "@TOP_BUILDDIR@/filter-@filtertype@.@DYLIB@" {
filter-@filtertype@-on-v4 yes;
- filter-@filtertype@ { 10.53.0.2; };
+ filter-@filtertype@ { @ns.ip@; };
};
{% endif %}
{% if family == "v6" %}
plugin query "@TOP_BUILDDIR@/filter-@filtertype@.@DYLIB@" {
filter-@filtertype@-on-v6 break-dnssec;
- filter-@filtertype@ { fd92:7065:b8e:ffff::3; };
+ filter-@filtertype@ { @ns.ip6@; };
};
{% else %}
plugin query "@TOP_BUILDDIR@/filter-@filtertype@.@DYLIB@" {
filter-@filtertype@-on-v4 break-dnssec;
- filter-@filtertype@ { 10.53.0.3; };
+ filter-@filtertype@ { @ns.ip@; };
};
{% endif %}
{% if family == "v6" %}
plugin query "@TOP_BUILDDIR@/filter-@filtertype@.@DYLIB@" {
filter-@filtertype@-on-v6 break-dnssec;
- filter-@filtertype@ { fd92:7065:b8e:ffff::4; };
+ filter-@filtertype@ { @ns.ip6@; };
};
{% else %}
plugin query "@TOP_BUILDDIR@/filter-@filtertype@.@DYLIB@" {
filter-@filtertype@-on-v4 break-dnssec;
- filter-@filtertype@ { 10.53.0.4; };
+ filter-@filtertype@ { @ns.ip@; };
};
{% endif %}
{% if family == "v6" %}
plugin query "@TOP_BUILDDIR@/filter-@filtertype@.@DYLIB@" {
filter-@filtertype@-on-v6 break-dnssec;
- filter-@filtertype@ { fd92:7065:b8e:ffff::4; };
+ filter-@filtertype@ { @ns.ip6@; };
};
{% else %}
plugin query "@TOP_BUILDDIR@/filter-@filtertype@.@DYLIB@" {
filter-@filtertype@-on-v4 break-dnssec;
- filter-@filtertype@ { 10.53.0.4; };
+ filter-@filtertype@ { @ns.ip@; };
};
{% endif %}
};
{% if family == "v6" %}
plugin query "@TOP_BUILDDIR@/filter-@filtertype@.@DYLIB@" {
filter-@filtertype@-on-v6 break-dnssec;
- filter-@filtertype@ { fd92:7065:b8e:ffff::4; };
+ filter-@filtertype@ { @ns.ip6@; };
};
{% else %}
plugin query "@TOP_BUILDDIR@/filter-@filtertype@.@DYLIB@" {
filter-@filtertype@-on-v4 break-dnssec;
- filter-@filtertype@ { 10.53.0.4; };
+ filter-@filtertype@ { @ns.ip@; };
};
{% endif %}
};
{% if FEATURE_FIPS_DH == "1" %}
tls-port @TLSPORT@;
- listen-on tls ephemeral { 10.53.0.2; };
- listen-on port @EXTRAPORT1@ tls tls-forward-secrecy { 10.53.0.2; };
- listen-on port @EXTRAPORT2@ tls tls-forward-secrecy-mutual-tls { 10.53.0.2; };
- listen-on port @EXTRAPORT3@ tls tls-expired { 10.53.0.2; };
+ listen-on tls ephemeral { @ns.ip@; };
+ listen-on port @EXTRAPORT1@ tls tls-forward-secrecy { @ns.ip@; };
+ listen-on port @EXTRAPORT2@ tls tls-forward-secrecy-mutual-tls { @ns.ip@; };
+ listen-on port @EXTRAPORT3@ tls tls-expired { @ns.ip@; };
{% endif %}
};
{% include "_common/controls.conf.j2" %}
{% if FEATURE_JSON_C == "1" %}
-statistics-channels { inet 10.53.0.4 port @EXTRAPORT1@ allow { localhost; }; };
+statistics-channels { inet @ns.ip@ port @EXTRAPORT1@ allow { localhost; }; };
{% endif %}
zone "." {
options {
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
- listen-on { 127.0.0.1; 10.53.0.2; };
- listen-on-v6 { ::1; fd92:7065:b8e:ffff::2; };
+ listen-on { 127.0.0.1; @ns.ip@; };
+ listen-on-v6 { ::1; @ns.ip6@; };
recursion no;
dnssec-validation no;
geoip-directory "../data";
file "primary.db";
notify explicit;
also-notify {
- 10.53.0.3;
+ @ns.ip@;
};
};
{% include "_common/controls.conf.j2" %}
view compress {
- match-clients { 10.53.0.1/32; };
+ match-clients { @ns.ip@/32; };
zone "example" {
type primary;
file "example.db";
options {
{% include_indented "_common/options.conf.j2" %}
- notify-source-v6 fd92:7065:b8e:ffff::2;
+ notify-source-v6 @ns.ip6@;
allow-transfer { any; };
recursion no;
startup-notify-rate 5;
{% if FEATURE_FIPS_DH == "1" %}
tls-port @TLSPORT@;
- listen-on tls ephemeral { 10.53.0.2; };
- listen-on port @EXTRAPORT1@ tls tls-forward-secrecy { 10.53.0.2; };
- listen-on port @EXTRAPORT3@ tls tls-forward-secrecy-mutual-tls { 10.53.0.2; };
- listen-on port @EXTRAPORT4@ tls tls-expired { 10.53.0.2; };
+ listen-on tls ephemeral { @ns.ip@; };
+ listen-on port @EXTRAPORT1@ tls tls-forward-secrecy { @ns.ip@; };
+ listen-on port @EXTRAPORT3@ tls tls-forward-secrecy-mutual-tls { @ns.ip@; };
+ listen-on port @EXTRAPORT4@ tls tls-expired { @ns.ip@; };
{% endif %}
};
type primary;
file "generic.db";
also-notify { 10.53.0.3; };
- notify-source 10.53.0.2;
+ notify-source @ns.ip@;
notify primary-only;
};
zone x2 {
zone "notify-source-port-test" {
type primary;
file "notify-source-port-test.db";
- notify-source 10.53.0.3;
+ notify-source @ns.ip@;
};
match-clients { key "a"; };
zone "x21" {
type primary;
- also-notify { 10.53.0.5 key "b"; 10.53.0.5 key "c"; };
+ also-notify { @ns.ip@ key "b"; @ns.ip@ key "c"; };
file "x21.db";
allow-update { any; };
};
match-clients { key "b"; };
zone "x21" {
type secondary;
- primaries { 10.53.0.5 key "a"; };
+ primaries { @ns.ip@ key "a"; };
file "x21.bk-b";
notify no;
};
match-clients { key "c"; };
zone "x21" {
type secondary;
- primaries { 10.53.0.5 key "a"; };
+ primaries { @ns.ip@ key "a"; };
file "x21.bk-c";
notify no;
};
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
listen-on {
- 10.53.0.2;
+ @ns.ip@;
10.53.0.5;
10.53.0.6;
10.53.0.7;
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
listen-on {
- 10.53.0.3;
+ @ns.ip@;
};
recursion no;
dnssec-validation no;
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
session-keyfile "session.key";
- listen-on { 10.53.0.1; 127.0.0.1; };
+ listen-on { @ns.ip@; 127.0.0.1; };
listen-on-v6 { none; };
recursion no;
minimal-responses no;
{% if FEATURE_FIPS_DH == "1" %}
tls-port @TLSPORT@;
- listen-on tls ephemeral { 10.53.0.1; };
- listen-on port @EXTRAPORT1@ tls tls-forward-secrecy { 10.53.0.1; };
- listen-on port @EXTRAPORT2@ tls tls-forward-secrecy-mutual-tls { 10.53.0.1; };
- listen-on port @EXTRAPORT3@ tls tls-expired { 10.53.0.1; };
+ listen-on tls ephemeral { @ns.ip@; };
+ listen-on port @EXTRAPORT1@ tls tls-forward-secrecy { @ns.ip@; };
+ listen-on port @EXTRAPORT2@ tls tls-forward-secrecy-mutual-tls { @ns.ip@; };
+ listen-on port @EXTRAPORT3@ tls tls-expired { @ns.ip@; };
{% endif %}
};
check-mx warn;
update-policy local;
allow-query { !10.53.0.2; any; };
- allow-query-on { 10.53.0.1; 127.0.0.1; };
+ allow-query-on { @ns.ip@; 127.0.0.1; };
allow-transfer { any; };
};
{% include_indented "_common/options.conf.j2" %}
tls-port @TLSPORT@;
session-keyfile "session.key";
- listen-on tls ephemeral { 10.53.0.10; };
+ listen-on tls ephemeral { @ns.ip@; };
recursion no;
minimal-responses no;
dnssec-validation no;
{% include_indented "_common/options/server.conf.j2" %}
##
# generic test
- listen-on { 10.53.0.1; };
+ listen-on { @ns.ip@; };
- listen-on port @EXTRAPORT1@ proxy plain { 10.53.0.1; };
+ listen-on port @EXTRAPORT1@ proxy plain { @ns.ip@; };
listen-on port @EXTRAPORT1@ proxy plain { 10.53.0.2; };
- listen-on port @TLSPORT@ proxy encrypted tls self-signed { 10.53.0.1; };
- listen-on port @EXTRAPORT2@ proxy plain tls self-signed { 10.53.0.1; };
- listen-on port @HTTPSPORT@ proxy encrypted tls self-signed http default { 10.53.0.1; };
- listen-on port @EXTRAPORT3@ proxy plain tls self-signed http default { 10.53.0.1; };
- listen-on port @HTTPPORT@ proxy plain tls none http default { 10.53.0.1; };
+ listen-on port @TLSPORT@ proxy encrypted tls self-signed { @ns.ip@; };
+ listen-on port @EXTRAPORT2@ proxy plain tls self-signed { @ns.ip@; };
+ listen-on port @HTTPSPORT@ proxy encrypted tls self-signed http default { @ns.ip@; };
+ listen-on port @EXTRAPORT3@ proxy plain tls self-signed http default { @ns.ip@; };
+ listen-on port @HTTPPORT@ proxy plain tls none http default { @ns.ip@; };
- listen-on-v6 port @EXTRAPORT1@ proxy plain { fd92:7065:b8e:ffff::1; };
+ listen-on-v6 port @EXTRAPORT1@ proxy plain { @ns.ip6@; };
listen-on-v6 port @EXTRAPORT1@ proxy plain { fd92:7065:b8e:ffff::2; };
- listen-on-v6 port @TLSPORT@ proxy encrypted tls self-signed { fd92:7065:b8e:ffff::1; };
- listen-on-v6 port @EXTRAPORT2@ proxy plain tls self-signed { fd92:7065:b8e:ffff::1; };
- listen-on-v6 port @HTTPSPORT@ proxy encrypted tls self-signed http default { fd92:7065:b8e:ffff::1; };
- listen-on-v6 port @EXTRAPORT3@ proxy plain tls self-signed http default { fd92:7065:b8e:ffff::1; };
- listen-on-v6 port @HTTPPORT@ proxy plain tls none http default { fd92:7065:b8e:ffff::1; };
+ listen-on-v6 port @TLSPORT@ proxy encrypted tls self-signed { @ns.ip6@; };
+ listen-on-v6 port @EXTRAPORT2@ proxy plain tls self-signed { @ns.ip6@; };
+ listen-on-v6 port @HTTPSPORT@ proxy encrypted tls self-signed http default { @ns.ip6@; };
+ listen-on-v6 port @EXTRAPORT3@ proxy plain tls self-signed http default { @ns.ip6@; };
+ listen-on-v6 port @HTTPPORT@ proxy plain tls none http default { @ns.ip6@; };
allow-proxy { 10.53.0.10; fd92:7065:b8e:ffff::10; };
- allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
+ allow-proxy-on { @ns.ip@; @ns.ip6@; };
recursion no;
notify explicit;
file "example.db";
# allow the real addresses only so that we can test LOCAL requests
allow-query { 10.53.0.10; fd92:7065:b8e:ffff::10; };
- allow-query-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
+ allow-query-on { @ns.ip@; @ns.ip6@; };
};
# Let's define some zones that will help us verify that ports
{% include_indented "_common/options/server.conf.j2" %}
##
# generic test
- listen-on { 10.53.0.3; };
+ listen-on { @ns.ip@; };
- listen-on port @EXTRAPORT1@ proxy plain { 10.53.0.3; };
- listen-on port @TLSPORT@ proxy encrypted tls self-signed { 10.53.0.3; };
- listen-on port @EXTRAPORT2@ proxy plain tls self-signed { 10.53.0.3; };
- listen-on port @HTTPSPORT@ proxy encrypted tls self-signed http default { 10.53.0.3; };
- listen-on port @EXTRAPORT3@ proxy plain tls self-signed http default { 10.53.0.3; };
- listen-on port @HTTPPORT@ proxy plain tls none http default { 10.53.0.3; };
+ listen-on port @EXTRAPORT1@ proxy plain { @ns.ip@; };
+ listen-on port @TLSPORT@ proxy encrypted tls self-signed { @ns.ip@; };
+ listen-on port @EXTRAPORT2@ proxy plain tls self-signed { @ns.ip@; };
+ listen-on port @HTTPSPORT@ proxy encrypted tls self-signed http default { @ns.ip@; };
+ listen-on port @EXTRAPORT3@ proxy plain tls self-signed http default { @ns.ip@; };
+ listen-on port @HTTPPORT@ proxy plain tls none http default { @ns.ip@; };
- listen-on-v6 port @EXTRAPORT1@ proxy plain { fd92:7065:b8e:ffff::3; };
- listen-on-v6 port @TLSPORT@ proxy encrypted tls self-signed { fd92:7065:b8e:ffff::3; };
- listen-on-v6 port @EXTRAPORT2@ proxy plain tls self-signed { fd92:7065:b8e:ffff::3; };
- listen-on-v6 port @HTTPSPORT@ proxy encrypted tls self-signed http default { fd92:7065:b8e:ffff::3; };
- listen-on-v6 port @EXTRAPORT3@ proxy plain tls self-signed http default { fd92:7065:b8e:ffff::3; };
- listen-on-v6 port @HTTPPORT@ proxy plain tls none http default { fd92:7065:b8e:ffff::3; };
+ listen-on-v6 port @EXTRAPORT1@ proxy plain { @ns.ip6@; };
+ listen-on-v6 port @TLSPORT@ proxy encrypted tls self-signed { @ns.ip6@; };
+ listen-on-v6 port @EXTRAPORT2@ proxy plain tls self-signed { @ns.ip6@; };
+ listen-on-v6 port @HTTPSPORT@ proxy encrypted tls self-signed http default { @ns.ip6@; };
+ listen-on-v6 port @EXTRAPORT3@ proxy plain tls self-signed http default { @ns.ip6@; };
+ listen-on-v6 port @HTTPPORT@ proxy plain tls none http default { @ns.ip6@; };
recursion no;
notify explicit;
{% include_indented "_common/options/listen-dual.conf.j2" %}
recursion no;
dnssec-validation no;
- query-source 10.53.0.1;
- query-source-v6 fd92:7065:b8e:ffff::1;
+ query-source @ns.ip@;
+ query-source-v6 @ns.ip6@;
};
zone "." {
{% include_indented "_common/options/listen-dual.conf.j2" %}
dnssec-validation no;
query-source none;
- query-source-v6 fd92:7065:b8e:ffff::2;
+ query-source-v6 @ns.ip6@;
};
zone "." {
{% include_indented "_common/options/listen-dual.conf.j2" %}
dnssec-validation no;
query-source-v6 none;
- query-source 10.53.0.3;
+ query-source @ns.ip@;
};
{% include "_common/root.hint.conf" %}
{% include_indented "_common/options/listen-dual.conf.j2" %}
dnssec-validation no;
query-source none;
- query-source-v6 fd92:7065:b8e:ffff::4;
+ query-source-v6 @ns.ip6@;
};
{% include "_common/root.hint.conf" %}
{% include_indented "_common/options/server.conf.j2" %}
{% include_indented "_common/options/listen-dual.conf.j2" %}
dnssec-validation no;
- query-source 10.53.0.5;
+ query-source @ns.ip@;
query-source-v6 none;
};
options {
{% include_indented "_common/options.conf.j2" %}
- allow-recursion { 10.53.0.1; };
+ allow-recursion { @ns.ip@; };
dnssec-validation no;
};
options {
{% include_indented "_common/options.conf.j2" %}
- allow-recursion { 10.53.0.3; };
+ allow-recursion { @ns.ip@; };
dnssec-validation no;
};
options {
{% include_indented "_common/options/server.conf.j2" %}
{% include_indented "_common/options/listen.conf.j2" %}
- query-source address 10.53.0.2; /* note this is not 10.53.0.4 */
- notify-source 10.53.0.4;
- transfer-source 10.53.0.4;
+ query-source address 10.53.0.2; /* note this is not @ns.ip@ */
+ notify-source @ns.ip@;
+ transfer-source @ns.ip@;
dnssec-validation no;
nxdomain-redirect "redirect";
};
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
listen-on { none; };
- listen-on-v6 { fd92:7065:b8e:ffff::9; };
+ listen-on-v6 { @ns.ip6@; };
recursive-clients 0; // regression test for [GL #4987]
dnssec-validation no;
dual-stack-servers { fd92:7065:b8e:ffff::7; };
/* deliberately not _common/controls.conf.j2: IPv6 control channel; the shared template is IPv4-only */
controls {
- inet fd92:7065:b8e:ffff::9 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
+ inet @ns.ip6@ port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};
zone "." {
/* deliberately not _common/controls.conf.j2: multi-key control channel is the test subject */
controls {
- inet 10.53.0.2 port @CONTROLPORT@ allow { any; } keys { rndc_key; secondkey; };
+ inet @ns.ip@ port @CONTROLPORT@ allow { any; } keys { rndc_key; secondkey; };
};
/* deliberately not _common/controls.conf.j2: read-only control channel is the test subject */
controls {
- inet 10.53.0.5 port @CONTROLPORT@ allow { any; } keys { rndc_key; } read-only yes;
+ inet @ns.ip@ port @CONTROLPORT@ allow { any; } keys { rndc_key; } read-only yes;
};
{% include "_common/root.hint.conf" %}
servfail-until-ready yes
;
- also-notify { 10.53.0.3 port @EXTRAPORT1@; };
+ also-notify { @ns.ip@ port @EXTRAPORT1@; };
notify-delay 0;
};
nsip-enable yes
;
- also-notify { 10.53.0.8 port @EXTRAPORT1@; };
+ also-notify { @ns.ip@ port @EXTRAPORT1@; };
notify-delay 0;
};
};
view "third" {
- match-clients { 10.53.0.3; };
+ match-clients { @ns.ip@; };
zone "." {
type hint;
file "root.db";
zone "ipv6-only-servers" {
type secondary;
- primaries { fd92:7065:b8e:ffff::2; };
+ primaries { @ns.ip6@; };
};
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
listen-on {
- 10.53.0.3;
+ @ns.ip@;
10.53.0.5;
10.53.0.6;
10.53.0.7;
allow-query { any; };
};
-# 10.53.0.2 is authoritative for .test domain
+# @ns.ip@ is authoritative for .test domain
zone "test" {
type primary;
file "test.db";
options {
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
- listen-on { 10.53.0.4; };
+ listen-on { @ns.ip@; };
listen-on-v6 { ::1; };
recursion no;
dnssec-validation no;
{% if FEATURE_LIBXML2 == "1" or FEATURE_JSON_C == "1" %}
statistics-channels {
- inet 10.53.0.1 port @EXTRAPORT1@ allow { any; };
+ inet @ns.ip@ port @EXTRAPORT1@ allow { any; };
};
{% endif %}
{% if FEATURE_LIBXML2 == "1" or FEATURE_JSON_C == "1" %}
statistics-channels {
- inet 10.53.0.2 port @EXTRAPORT1@ allow { any; };
+ inet @ns.ip@ port @EXTRAPORT1@ allow { any; };
};
{% endif %}
{% if FEATURE_LIBXML2 == "1" or FEATURE_JSON_C == "1" %}
statistics-channels {
- inet 10.53.0.2 port @EXTRAPORT1@ allow { any; };
+ inet @ns.ip@ port @EXTRAPORT1@ allow { any; };
};
{% endif %}
{% if FEATURE_LIBXML2 == "1" or FEATURE_JSON_C == "1" %}
statistics-channels {
- inet 10.53.0.3 port @EXTRAPORT1@ allow { any; };
+ inet @ns.ip@ port @EXTRAPORT1@ allow { any; };
};
{% endif %}
options {
{% include_indented "_common/options-dual.conf.j2" %}
tls-port @TLSPORT@;
- listen-on-v6 tls ephemeral { fd92:7065:b8e:ffff::1; };
+ listen-on-v6 tls ephemeral { @ns.ip6@; };
recursion no;
dnssec-validation no;
notify explicit;
version none; // make statistics independent of the version number
};
-statistics-channels { inet 10.53.0.1 port @EXTRAPORT1@ allow { localhost; }; };
+statistics-channels { inet @ns.ip@ port @EXTRAPORT1@ allow { localhost; }; };
{% include "_common/controls.conf.j2" %}
sig-signing-signatures 100;
};
-statistics-channels { inet 10.53.0.2 port @EXTRAPORT1@ allow { localhost; }; };
+statistics-channels { inet @ns.ip@ port @EXTRAPORT1@ allow { localhost; }; };
{% include "_common/controls.conf.j2" %}
sig-signing-signatures 100;
};
-statistics-channels { inet 10.53.0.2 port @EXTRAPORT1@ allow { localhost; }; };
+statistics-channels { inet @ns.ip@ port @EXTRAPORT1@ allow { localhost; }; };
{% include "_common/controls.conf.j2" %}
allow-new-zones yes;
};
-statistics-channels { inet 10.53.0.3 port @EXTRAPORT1@ allow { localhost; }; };
+statistics-channels { inet @ns.ip@ port @EXTRAPORT1@ allow { localhost; }; };
{% include "_common/controls.conf.j2" %}
version none; // make statistics independent of the version number
};
-statistics-channels { inet 10.53.0.4 port @EXTRAPORT1@ allow { localhost; }; };
+statistics-channels { inet @ns.ip@ port @EXTRAPORT1@ allow { localhost; }; };
{% include "_common/controls.conf.j2" %}
{% if FEATURE_LIBXML2 == "1" or FEATURE_JSON_C == "1" %}
statistics-channels {
- inet 10.53.0.1 port @EXTRAPORT1@ allow { any; };
+ inet @ns.ip@ port @EXTRAPORT1@ allow { any; };
};
{% endif %}
{% if FEATURE_LIBXML2 == "1" or FEATURE_JSON_C == "1" %}
statistics-channels {
- inet 10.53.0.2 port @EXTRAPORT1@ allow { any; };
+ inet @ns.ip@ port @EXTRAPORT1@ allow { any; };
};
{% endif %}
{% if FEATURE_LIBXML2 == "1" or FEATURE_JSON_C == "1" %}
statistics-channels {
- inet 10.53.0.3 port @EXTRAPORT1@ allow { any; };
+ inet @ns.ip@ port @EXTRAPORT1@ allow { any; };
};
{% endif %}
{% if FEATURE_LIBXML2 == "1" or FEATURE_JSON_C == "1" %}
statistics-channels {
- inet 10.53.0.4 port @EXTRAPORT1@ allow { any; };
+ inet @ns.ip@ port @EXTRAPORT1@ allow { any; };
};
{% endif %}
{% if FEATURE_LIBXML2 == "1" or FEATURE_JSON_C == "1" %}
statistics-channels {
- inet 10.53.0.5 port @EXTRAPORT1@ allow { any; };
+ inet @ns.ip@ port @EXTRAPORT1@ allow { any; };
};
{% endif %}
{% if FEATURE_LIBXML2 == "1" or FEATURE_JSON_C == "1" %}
statistics-channels {
- inet 10.53.0.6 port @EXTRAPORT1@ allow { any; };
+ inet @ns.ip@ port @EXTRAPORT1@ allow { any; };
};
{% endif %}
{% include_indented "_common/options.conf.j2" %}
##
# generic test
- listen-on port @TLSPORT@ tls self-signed { 10.53.0.1; };
+ listen-on port @TLSPORT@ tls self-signed { @ns.ip@; };
# test #1
- listen-on port @EXTRAPORT1@ { 10.53.0.1; };
+ listen-on port @EXTRAPORT1@ { @ns.ip@; };
listen-on port @EXTRAPORT1@ tls self-signed { 10.53.0.2; };
- listen-on port @EXTRAPORT2@ { 10.53.0.1; };
+ listen-on port @EXTRAPORT2@ { @ns.ip@; };
listen-on port @EXTRAPORT2@ tls self-signed { 10.53.0.2; };
# test #2
listen-on port @EXTRAPORT1@ { 10.53.0.3; };
listen-on port @EXTRAPORT2@ { 10.53.0.5; };
listen-on port @EXTRAPORT1@ tls self-signed { 10.53.0.6; };
# test #5
- listen-on port @EXTRAPORT3@ tls self-signed { 10.53.0.1; };
- listen-on port @EXTRAPORT4@ tls self-signed { 10.53.0.1; };
+ listen-on port @EXTRAPORT3@ tls self-signed { @ns.ip@; };
+ listen-on port @EXTRAPORT4@ tls self-signed { @ns.ip@; };
listen-on port @EXTRAPORT3@ { 10.53.0.2; };
# test #6
- listen-on port @EXTRAPORT5@ { 10.53.0.1; };
+ listen-on port @EXTRAPORT5@ { @ns.ip@; };
# test #7
- listen-on port @EXTRAPORT6@ tls self-signed { 10.53.0.1; };
+ listen-on port @EXTRAPORT6@ tls self-signed { @ns.ip@; };
# test #7
- listen-on port @EXTRAPORT7@ tls self-signed { 10.53.0.1; };
+ listen-on port @EXTRAPORT7@ tls self-signed { @ns.ip@; };
# test #8
- listen-on port @EXTRAPORT8@ { 10.53.0.1; };
+ listen-on port @EXTRAPORT8@ { @ns.ip@; };
##
recursion no;
notify explicit;
zone "example8" {
type primary;
file "example.db";
- allow-transfer port @EXTRAPORT7@ transport tls { 10.53.0.1; 10.53.0.2; 10.53.0.3; };
+ allow-transfer port @EXTRAPORT7@ transport tls { @ns.ip@; 10.53.0.2; 10.53.0.3; };
};
zone "example9" {
{% include_indented "_common/options/server.conf.j2" %}
##
# generic
- listen-on { 10.53.0.1; };
+ listen-on { @ns.ip@; };
# test TLS
- listen-on port @EXTRAPORT1@ proxy plain tls none http default { 10.53.0.1; };
- listen-on-v6 port @EXTRAPORT1@ proxy plain tls none http default { fd92:7065:b8e:ffff::1; };
+ listen-on port @EXTRAPORT1@ proxy plain tls none http default { @ns.ip@; };
+ listen-on-v6 port @EXTRAPORT1@ proxy plain tls none http default { @ns.ip6@; };
##
recursion no;
notify explicit;
dnssec-validation no;
tcp-initial-timeout 1200;
allow-proxy { any; };
- allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
+ allow-proxy-on { @ns.ip@; @ns.ip6@; };
};
{% include_indented "_common/options/server.conf.j2" %}
##
# generic
- listen-on { 10.53.0.1; };
+ listen-on { @ns.ip@; };
# test TLS
- listen-on port @EXTRAPORT1@ tls none http default { 10.53.0.1; };
- listen-on-v6 port @EXTRAPORT1@ tls none http default { fd92:7065:b8e:ffff::1; };
+ listen-on port @EXTRAPORT1@ tls none http default { @ns.ip@; };
+ listen-on-v6 port @EXTRAPORT1@ tls none http default { @ns.ip6@; };
##
recursion no;
notify explicit;
dnssec-validation no;
tcp-initial-timeout 1200;
allow-proxy { any; };
- allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
+ allow-proxy-on { @ns.ip@; @ns.ip6@; };
};
{% include_indented "_common/options/server.conf.j2" %}
##
# generic
- listen-on { 10.53.0.1; };
+ listen-on { @ns.ip@; };
# test TLS
- listen-on port @EXTRAPORT1@ proxy encrypted tls self-signed http default { 10.53.0.1; };
- listen-on-v6 port @EXTRAPORT1@ proxy encrypted tls self-signed http default { fd92:7065:b8e:ffff::1; };
+ listen-on port @EXTRAPORT1@ proxy encrypted tls self-signed http default { @ns.ip@; };
+ listen-on-v6 port @EXTRAPORT1@ proxy encrypted tls self-signed http default { @ns.ip6@; };
##
recursion no;
notify explicit;
dnssec-validation no;
tcp-initial-timeout 1200;
allow-proxy { any; };
- allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
+ allow-proxy-on { @ns.ip@; @ns.ip6@; };
};
{% include_indented "_common/options/server.conf.j2" %}
##
# generic
- listen-on { 10.53.0.1; };
+ listen-on { @ns.ip@; };
# test TLS
- listen-on port @EXTRAPORT1@ proxy plain tls self-signed http default { 10.53.0.1; };
- listen-on-v6 port @EXTRAPORT1@ proxy plain tls self-signed http default { fd92:7065:b8e:ffff::1; };
+ listen-on port @EXTRAPORT1@ proxy plain tls self-signed http default { @ns.ip@; };
+ listen-on-v6 port @EXTRAPORT1@ proxy plain tls self-signed http default { @ns.ip6@; };
##
recursion no;
notify explicit;
dnssec-validation no;
tcp-initial-timeout 1200;
allow-proxy { any; };
- allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
+ allow-proxy-on { @ns.ip@; @ns.ip6@; };
};
{% include_indented "_common/options/server.conf.j2" %}
##
# generic
- listen-on { 10.53.0.1; };
+ listen-on { @ns.ip@; };
# test TLS
- listen-on port @EXTRAPORT1@ tls self-signed http default { 10.53.0.1; };
- listen-on-v6 port @EXTRAPORT1@ tls self-signed http default { fd92:7065:b8e:ffff::1; };
+ listen-on port @EXTRAPORT1@ tls self-signed http default { @ns.ip@; };
+ listen-on-v6 port @EXTRAPORT1@ tls self-signed http default { @ns.ip6@; };
##
recursion no;
notify explicit;
dnssec-validation no;
tcp-initial-timeout 1200;
allow-proxy { any; };
- allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
+ allow-proxy-on { @ns.ip@; @ns.ip6@; };
};
{% include_indented "_common/options/server.conf.j2" %}
##
# generic
- listen-on { 10.53.0.1; };
+ listen-on { @ns.ip@; };
# test
- listen-on port @EXTRAPORT1@ proxy plain { 10.53.0.1; };
- listen-on-v6 port @EXTRAPORT1@ proxy plain { fd92:7065:b8e:ffff::1; };
+ listen-on port @EXTRAPORT1@ proxy plain { @ns.ip@; };
+ listen-on-v6 port @EXTRAPORT1@ proxy plain { @ns.ip6@; };
##
recursion no;
notify explicit;
dnssec-validation no;
tcp-initial-timeout 1200;
allow-proxy { any; };
- allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
+ allow-proxy-on { @ns.ip@; @ns.ip6@; };
};
{% include_indented "_common/options/server.conf.j2" %}
##
# generic
- listen-on { 10.53.0.1; };
+ listen-on { @ns.ip@; };
# test TLS
- listen-on port @EXTRAPORT1@ proxy encrypted tls self-signed { 10.53.0.1; };
- listen-on-v6 port @EXTRAPORT1@ proxy encrypted tls self-signed { fd92:7065:b8e:ffff::1; };
+ listen-on port @EXTRAPORT1@ proxy encrypted tls self-signed { @ns.ip@; };
+ listen-on-v6 port @EXTRAPORT1@ proxy encrypted tls self-signed { @ns.ip6@; };
##
recursion no;
notify explicit;
dnssec-validation no;
tcp-initial-timeout 1200;
allow-proxy { any; };
- allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
+ allow-proxy-on { @ns.ip@; @ns.ip6@; };
};
{% include_indented "_common/options/server.conf.j2" %}
##
# generic
- listen-on { 10.53.0.1; };
+ listen-on { @ns.ip@; };
# test TLS
- listen-on port @EXTRAPORT1@ proxy plain tls self-signed { 10.53.0.1; };
- listen-on-v6 port @EXTRAPORT1@ proxy plain tls self-signed { fd92:7065:b8e:ffff::1; };
+ listen-on port @EXTRAPORT1@ proxy plain tls self-signed { @ns.ip@; };
+ listen-on-v6 port @EXTRAPORT1@ proxy plain tls self-signed { @ns.ip6@; };
##
recursion no;
notify explicit;
dnssec-validation no;
tcp-initial-timeout 1200;
allow-proxy { any; };
- allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
+ allow-proxy-on { @ns.ip@; @ns.ip6@; };
};
{% include_indented "_common/options/server.conf.j2" %}
##
# generic
- listen-on { 10.53.0.1; };
+ listen-on { @ns.ip@; };
# test TLS
- listen-on port @EXTRAPORT1@ tls self-signed { 10.53.0.1; };
- listen-on-v6 port @EXTRAPORT1@ tls self-signed { fd92:7065:b8e:ffff::1; };
+ listen-on port @EXTRAPORT1@ tls self-signed { @ns.ip@; };
+ listen-on-v6 port @EXTRAPORT1@ tls self-signed { @ns.ip6@; };
##
recursion no;
notify explicit;
dnssec-validation no;
tcp-initial-timeout 1200;
allow-proxy { any; };
- allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
+ allow-proxy-on { @ns.ip@; @ns.ip6@; };
};
{% include_indented "_common/options/server.conf.j2" %}
##
# generic
- listen-on { 10.53.0.1; };
+ listen-on { @ns.ip@; };
# test
- listen-on port @EXTRAPORT1@ { 10.53.0.1; };
- listen-on-v6 port @EXTRAPORT1@ { fd92:7065:b8e:ffff::1; };
+ listen-on port @EXTRAPORT1@ { @ns.ip@; };
+ listen-on-v6 port @EXTRAPORT1@ { @ns.ip6@; };
##
recursion no;
notify explicit;
dnssec-validation no;
tcp-initial-timeout 1200;
allow-proxy { any; };
- allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
+ allow-proxy-on { @ns.ip@; @ns.ip6@; };
};
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
session-keyfile "session.key";
- listen-on { 10.53.0.1; 127.0.0.1; };
+ listen-on { @ns.ip@; 127.0.0.1; };
listen-on-v6 { none; };
recursion no;
dnssec-validation no;
options {
{% include_indented "_common/options.conf.j2" %}
tls-port @TLSPORT@;
- listen-on tls ephemeral { 10.53.0.1; };
+ listen-on tls ephemeral { @ns.ip@; };
allow-transfer { any; };
dnssec-validation no;
};
options {
{% include_indented "_common/options.conf.j2" %}
tls-port @TLSPORT@;
- listen-on tls ephemeral { 10.53.0.3; };
+ listen-on tls ephemeral { @ns.ip@; };
allow-transfer { any; };
recursion no;
dnssec-validation no;
options {
{% include_indented "_common/options.conf.j2" %}
tls-port @TLSPORT@;
- listen-on tls ephemeral { 10.53.0.3; };
+ listen-on tls ephemeral { @ns.ip@; };
allow-transfer { any; };
recursion no;
dnssec-validation no;
options {
{% include_indented "_common/options/sources.conf.j2" %}
{% include_indented "_common/options/server.conf.j2" %}
- listen-on { 10.53.0.2; 10.53.0.4; };
+ listen-on { @ns.ip@; 10.53.0.4; };
listen-on-v6 { none; };
allow-transfer { any; };
dnssec-validation no;
};
view "internal" {
- match-clients { 10.53.0.2;
+ match-clients { @ns.ip@;
10.53.0.3; };
{% include_indented "_common/root.hint.conf" %}
{% if enable_some_zones | default(True) %}
zone "secondary" {
type primary;
- allow-transfer { 10.53.0.1; 10.53.0.2; 10.53.0.6; 10.53.0.7; };
+ allow-transfer { @ns.ip@; 10.53.0.2; 10.53.0.6; 10.53.0.7; };
file "sec.db";
};
allow-transfer { tzkey; };
};
-remote-servers "ns1" port @PORT@ source 10.53.0.2 {
+remote-servers "ns1" port @PORT@ source @ns.ip@ {
10.53.0.1;
};
zone "primary" {
type secondary;
- transfer-source 10.53.0.3;
+ transfer-source @ns.ip@;
primaries { 10.53.0.6; };
file "primary.bk";
};
options {
{% include_indented "_common/options/server.conf.j2" %}
{% include_indented "_common/options/listen.conf.j2" %}
- query-source address 10.53.0.1;
- transfer-source 10.53.0.1;
+ query-source address @ns.ip@;
+ transfer-source @ns.ip@;
recursion no;
/*
* Notifications are sent from 10.53.1.1. This, the `notify
projects / thirdparty / bind9.git / commitdiff
