]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
regen v9_10
authorTinderbox User <tbox@isc.org>
Tue, 23 Jan 2018 01:11:27 +0000 (01:11 +0000)
committerTinderbox User <tbox@isc.org>
Tue, 23 Jan 2018 01:11:27 +0000 (01:11 +0000)
bin/named/named.conf.5
bin/named/named.conf.docbook
bin/named/named.conf.html
doc/arm/man.named.conf.html

index 34c3ff8ec0bee3c18a7939ca89c5ce01e3ffd40e..3371df2dfa2219426cd294feb134faf1d4217a1c 100644 (file)
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004-2017 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004-2018 Internet Systems Consortium, Inc. ("ISC")
 .\" 
 .\" Permission to use, copy, modify, and/or distribute this software for any
 .\" purpose with or without fee is hereby granted, provided that the above
@@ -339,7 +339,6 @@ options {
        notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ]
            [ dscp \fIinteger\fR ];
        notify\-to\-soa \fIboolean\fR;
-       nsec3\-test\-zone \fIboolean\fR; // test only
        pid\-file ( \fIquoted_string\fR | none );
        port \fIinteger\fR;
        preferred\-glue \fIstring\fR;
@@ -639,7 +638,6 @@ view \fIstring\fR [ \fIclass\fR ] {
        notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ]
            [ dscp \fIinteger\fR ];
        notify\-to\-soa \fIboolean\fR;
-       nsec3\-test\-zone \fIboolean\fR; // test only
        preferred\-glue \fIstring\fR;
        prefetch \fIinteger\fR [ \fIinteger\fR ];
        provide\-ixfr \fIboolean\fR;
@@ -798,7 +796,6 @@ view \fIstring\fR [ \fIclass\fR ] {
                notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR
                    | * ) ] [ dscp \fIinteger\fR ];
                notify\-to\-soa \fIboolean\fR;
-               nsec3\-test\-zone \fIboolean\fR; // test only
                pubkey \fIinteger\fR
                    \fIinteger\fR
                    \fIinteger\fR
@@ -904,7 +901,6 @@ zone \fIstring\fR [ \fIclass\fR ] {
        notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ]
            [ dscp \fIinteger\fR ];
        notify\-to\-soa \fIboolean\fR;
-       nsec3\-test\-zone \fIboolean\fR; // test only
        pubkey \fIinteger\fR \fIinteger\fR
        request\-ixfr \fIboolean\fR;
        serial\-update\-method ( increment | unixtime );
@@ -951,5 +947,5 @@ BIND 9 Administrator Reference Manual\&.
 \fBInternet Systems Consortium, Inc\&.\fR
 .SH "COPYRIGHT"
 .br
-Copyright \(co 2004-2017 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004-2018 Internet Systems Consortium, Inc. ("ISC")
 .br
index 692b3b56735135c195b02b51b26e2ef7fa573384..dd3423ab55cac3f1936cfe062fe3c06bdc270be4 100644 (file)
@@ -94,12 +94,12 @@ acl <replaceable>string</replaceable> { <replaceable>address_match_element</repl
     <literallayout class="normal">
 controls {
        inet ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> |
-           * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional> allow
-           { <replaceable>address_match_element</replaceable>; ... } <optional>
-           keys { <replaceable>string</replaceable>; ... } </optional>;
+           * ) [ port ( <replaceable>integer</replaceable> | * ) ] allow
+           { <replaceable>address_match_element</replaceable>; ... } [
+           keys { <replaceable>string</replaceable>; ... } ];
        unix <replaceable>quoted_string</replaceable> perm <replaceable>integer</replaceable>
-           owner <replaceable>integer</replaceable> group <replaceable>integer</replaceable> <optional>
-           keys { <replaceable>string</replaceable>; ... } </optional>;
+           owner <replaceable>integer</replaceable> group <replaceable>integer</replaceable> [
+           keys { <replaceable>string</replaceable>; ... } ];
 };
 </literallayout>
   </refsection>
@@ -130,15 +130,15 @@ key <replaceable>string</replaceable> {
 logging {
        category <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
        channel <replaceable>string</replaceable> {
-               file <replaceable>quoted_string</replaceable> <optional> versions ( "unlimited" | <replaceable>integer</replaceable> )
-                   </optional> <optional> size <replaceable>size</replaceable> </optional>;
+               file <replaceable>quoted_string</replaceable> [ versions ( "unlimited" | <replaceable>integer</replaceable> )
+                   ] [ size <replaceable>size</replaceable> ];
                null;
                print-category <replaceable>boolean</replaceable>;
                print-severity <replaceable>boolean</replaceable>;
                print-time <replaceable>boolean</replaceable>;
                severity <replaceable>log_severity</replaceable>;
                stderr;
-               syslog <optional> <replaceable>syslog_facility</replaceable> </optional>;
+               syslog [ <replaceable>syslog_facility</replaceable> ];
        };
 };
 </literallayout>
@@ -148,11 +148,11 @@ logging {
 
     <literallayout class="normal">
 lwres {
-       listen-on <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable>
-           | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional>; ... };
+       listen-on [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] { ( <replaceable>ipv4_address</replaceable>
+           | <replaceable>ipv6_address</replaceable> ) [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ]; ... };
        ndots <replaceable>integer</replaceable>;
        search { <replaceable>string</replaceable>; ... };
-       view <replaceable>string</replaceable> <optional> <replaceable>class</replaceable> </optional>;
+       view <replaceable>string</replaceable> [ <replaceable>class</replaceable> ];
 };
 </literallayout>
   </refsection>
@@ -168,10 +168,10 @@ managed-keys { <replaceable>string</replaceable> <replaceable>string</replaceabl
   <refsection><info><title>MASTERS</title></info>
 
     <literallayout class="normal">
-masters <replaceable>string</replaceable> <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp
-    <replaceable>integer</replaceable> </optional> { ( <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> <optional>
-    port <replaceable>integer</replaceable> </optional> | <replaceable>ipv6_address</replaceable> <optional> port
-    <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ... };
+masters <replaceable>string</replaceable> [ port <replaceable>integer</replaceable> ] [ dscp
+    <replaceable>integer</replaceable> ] { ( <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> [
+    port <replaceable>integer</replaceable> ] | <replaceable>ipv6_address</replaceable> [ port
+    <replaceable>integer</replaceable> ] ) [ key <replaceable>string</replaceable> ]; ... };
 </literallayout>
   </refsection>
 
@@ -194,13 +194,13 @@ options {
        allow-transfer { <replaceable>address_match_element</replaceable>; ... };
        allow-update { <replaceable>address_match_element</replaceable>; ... };
        allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
-       also-notify <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> { ( <replaceable>masters</replaceable> |
-           <replaceable>ipv4_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> | <replaceable>ipv6_address</replaceable> <optional> port
-           <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ... };
-       alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * )
-           </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
-       alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> |
-           * ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
+       also-notify [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] { ( <replaceable>masters</replaceable> |
+           <replaceable>ipv4_address</replaceable> [ port <replaceable>integer</replaceable> ] | <replaceable>ipv6_address</replaceable> [ port
+           <replaceable>integer</replaceable> ] ) [ key <replaceable>string</replaceable> ]; ... };
+       alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * )
+           ] [ dscp <replaceable>integer</replaceable> ];
+       alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> |
+           * ) ] [ dscp <replaceable>integer</replaceable> ];
        attach-cache <replaceable>string</replaceable>;
        auth-nxdomain <replaceable>boolean</replaceable>; // default changed
        auto-dnssec ( allow | maintain | off );
@@ -224,10 +224,10 @@ options {
        clients-per-query <replaceable>integer</replaceable>;
        coresize ( default | unlimited | <replaceable>sizeval</replaceable> );
        datasize ( default | unlimited | <replaceable>sizeval</replaceable> );
-       deny-answer-addresses { <replaceable>address_match_element</replaceable>; ... } <optional>
-           except-from { <replaceable>quoted_string</replaceable>; ... } </optional>;
-       deny-answer-aliases { <replaceable>quoted_string</replaceable>; ... } <optional> except-from {
-           <replaceable>quoted_string</replaceable>; ... } </optional>;
+       deny-answer-addresses { <replaceable>address_match_element</replaceable>; ... } [
+           except-from { <replaceable>quoted_string</replaceable>; ... } ];
+       deny-answer-aliases { <replaceable>quoted_string</replaceable>; ... } [ except-from {
+           <replaceable>quoted_string</replaceable>; ... } ];
        dialup ( notify | notify-passive | passive | refresh | <replaceable>boolean</replaceable> );
        directory <replaceable>quoted_string</replaceable>;
        disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>;
@@ -256,10 +256,10 @@ options {
        dnssec-update-mode ( maintain | no-resign );
        dnssec-validation ( yes | no | auto );
        dscp <replaceable>integer</replaceable>;
-       dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>quoted_string</replaceable> <optional> port
-           <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> | <replaceable>ipv4_address</replaceable> <optional> port
-           <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> | <replaceable>ipv6_address</replaceable> <optional> port
-           <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> ); ... };
+       dual-stack-servers [ port <replaceable>integer</replaceable> ] { ( <replaceable>quoted_string</replaceable> [ port
+           <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] | <replaceable>ipv4_address</replaceable> [ port
+           <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] | <replaceable>ipv6_address</replaceable> [ port
+           <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] ); ... };
        dump-file <replaceable>quoted_string</replaceable>;
        edns-udp-size <replaceable>integer</replaceable>;
        empty-contact <replaceable>string</replaceable>;
@@ -267,16 +267,16 @@ options {
        empty-zones-enable <replaceable>boolean</replaceable>;
        fetch-quota-params <replaceable>integer</replaceable> <replaceable>fixedpoint</replaceable>
            <replaceable>fixedpoint</replaceable> <replaceable>fixedpoint</replaceable>;
-       fetches-per-server <replaceable>integer</replaceable> <optional> ( drop | fail ) </optional>;
-       fetches-per-zone <replaceable>integer</replaceable> <optional> ( drop | fail ) </optional>;
+       fetches-per-server <replaceable>integer</replaceable> [ ( drop | fail ) ];
+       fetches-per-zone <replaceable>integer</replaceable> [ ( drop | fail ) ];
        files ( default | unlimited | <replaceable>sizeval</replaceable> );
        filter-aaaa { <replaceable>address_match_element</replaceable>; ... };
        filter-aaaa-on-v4 ( break-dnssec | <replaceable>boolean</replaceable> );
        filter-aaaa-on-v6 ( break-dnssec | <replaceable>boolean</replaceable> );
        flush-zones-on-shutdown <replaceable>boolean</replaceable>;
        forward ( first | only );
-       forwarders <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable>
-           | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional>; ... };
+       forwarders [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] { ( <replaceable>ipv4_address</replaceable>
+           | <replaceable>ipv6_address</replaceable> ) [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ]; ... };
        geoip-directory ( <replaceable>quoted_string</replaceable> | none );
        heartbeat-interval <replaceable>integer</replaceable>;
        hostname ( <replaceable>quoted_string</replaceable> | none );
@@ -285,11 +285,11 @@ options {
        ixfr-from-differences ( master | slave | <replaceable>boolean</replaceable> );
        key-directory <replaceable>quoted_string</replaceable>;
        lame-ttl <replaceable>integer</replaceable>;
-       listen-on <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp
-           <replaceable>integer</replaceable> </optional> {
+       listen-on [ port <replaceable>integer</replaceable> ] [ dscp
+           <replaceable>integer</replaceable> ] {
            <replaceable>address_match_element</replaceable>; ... };
-       listen-on-v6 <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp
-           <replaceable>integer</replaceable> </optional> {
+       listen-on-v6 [ port <replaceable>integer</replaceable> ] [ dscp
+           <replaceable>integer</replaceable> ] {
            <replaceable>address_match_element</replaceable>; ... };
        managed-keys-directory <replaceable>quoted_string</replaceable>;
        masterfile-format ( map | raw | text );
@@ -322,23 +322,22 @@ options {
        nosit-udp-size <replaceable>integer</replaceable>;, experimental
        notify ( explicit | master-only | <replaceable>boolean</replaceable> );
        notify-delay <replaceable>integer</replaceable>;
-       notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional> <optional>
-           dscp <replaceable>integer</replaceable> </optional>;
-       notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>
-           <optional> dscp <replaceable>integer</replaceable> </optional>;
+       notify-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * ) ] [
+           dscp <replaceable>integer</replaceable> ];
+       notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * ) ]
+           [ dscp <replaceable>integer</replaceable> ];
        notify-to-soa <replaceable>boolean</replaceable>;
-       nsec3-test-zone <replaceable>boolean</replaceable>; // test only
        pid-file ( <replaceable>quoted_string</replaceable> | none );
        port <replaceable>integer</replaceable>;
        preferred-glue <replaceable>string</replaceable>;
-       prefetch <replaceable>integer</replaceable> <optional> <replaceable>integer</replaceable> </optional>;
+       prefetch <replaceable>integer</replaceable> [ <replaceable>integer</replaceable> ];
        provide-ixfr <replaceable>boolean</replaceable>;
-       query-source ( ( <optional> address </optional> ( <replaceable>ipv4_address</replaceable> | * ) <optional> port (
-           <replaceable>integer</replaceable> | * ) </optional> ) | ( <optional> <optional> address </optional> ( <replaceable>ipv4_address</replaceable> | * ) </optional>
-           port ( <replaceable>integer</replaceable> | * ) ) ) <optional> dscp <replaceable>integer</replaceable> </optional>;
-       query-source-v6 ( ( <optional> address </optional> ( <replaceable>ipv6_address</replaceable> | * ) <optional> port (
-           <replaceable>integer</replaceable> | * ) </optional> ) | ( <optional> <optional> address </optional> ( <replaceable>ipv6_address</replaceable> | * ) </optional>
-           port ( <replaceable>integer</replaceable> | * ) ) ) <optional> dscp <replaceable>integer</replaceable> </optional>;
+       query-source ( ( [ address ] ( <replaceable>ipv4_address</replaceable> | * ) [ port (
+           <replaceable>integer</replaceable> | * ) ] ) | ( [ [ address ] ( <replaceable>ipv4_address</replaceable> | * ) ]
+           port ( <replaceable>integer</replaceable> | * ) ) ) [ dscp <replaceable>integer</replaceable> ];
+       query-source-v6 ( ( [ address ] ( <replaceable>ipv6_address</replaceable> | * ) [ port (
+           <replaceable>integer</replaceable> | * ) ] ) | ( [ [ address ] ( <replaceable>ipv6_address</replaceable> | * ) ]
+           port ( <replaceable>integer</replaceable> | * ) ) ) [ dscp <replaceable>integer</replaceable> ];
        querylog <replaceable>boolean</replaceable>;
        random-device <replaceable>quoted_string</replaceable>;
        rate-limit {
@@ -366,15 +365,15 @@ options {
        request-sit <replaceable>boolean</replaceable>;, experimental
        reserved-sockets <replaceable>integer</replaceable>;
        resolver-query-timeout <replaceable>integer</replaceable>;
-       response-policy { zone <replaceable>quoted_string</replaceable> <optional> policy ( cname | disabled
+       response-policy { zone <replaceable>quoted_string</replaceable> [ policy ( cname | disabled
            | drop | given | no-op | nodata | nxdomain | passthru |
-           tcp-only <replaceable>quoted_string</replaceable> ) </optional> <optional> recursive-only <replaceable>boolean</replaceable> </optional> <optional>
-           max-policy-ttl <replaceable>integer</replaceable> </optional>; ... } <optional> recursive-only <replaceable>boolean</replaceable> </optional>
-           <optional> break-dnssec <replaceable>boolean</replaceable> </optional> <optional> max-policy-ttl <replaceable>integer</replaceable> </optional> <optional>
-           min-ns-dots <replaceable>integer</replaceable> </optional> <optional> qname-wait-recurse <replaceable>boolean</replaceable> </optional>;
-       root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
-       rrset-order { <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional> <optional> name
-           <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ... };
+           tcp-only <replaceable>quoted_string</replaceable> ) ] [ recursive-only <replaceable>boolean</replaceable> ] [
+           max-policy-ttl <replaceable>integer</replaceable> ]; ... } [ recursive-only <replaceable>boolean</replaceable> ]
+           [ break-dnssec <replaceable>boolean</replaceable> ] [ max-policy-ttl <replaceable>integer</replaceable> ] [
+           min-ns-dots <replaceable>integer</replaceable> ] [ qname-wait-recurse <replaceable>boolean</replaceable> ];
+       root-delegation-only [ exclude { <replaceable>quoted_string</replaceable>; ... } ];
+       rrset-order { [ class <replaceable>string</replaceable> ] [ type <replaceable>string</replaceable> ] [ name
+           <replaceable>quoted_string</replaceable> ] <replaceable>string</replaceable> <replaceable>string</replaceable>; ... };
        secroots-file <replaceable>quoted_string</replaceable>;
        serial-query-rate <replaceable>integer</replaceable>;
        serial-update-method ( increment | unixtime );
@@ -385,7 +384,7 @@ options {
        sig-signing-nodes <replaceable>integer</replaceable>;
        sig-signing-signatures <replaceable>integer</replaceable>;
        sig-signing-type <replaceable>integer</replaceable>;
-       sig-validity-interval <replaceable>integer</replaceable> <optional> <replaceable>integer</replaceable> </optional>;
+       sig-validity-interval <replaceable>integer</replaceable> [ <replaceable>integer</replaceable> ];
        sit-secret <replaceable>string</replaceable>;, experimental
        sortlist { <replaceable>address_match_element</replaceable>; ... };
        stacksize ( default | unlimited | <replaceable>sizeval</replaceable> );
@@ -397,10 +396,10 @@ options {
        tkey-gssapi-credential <replaceable>quoted_string</replaceable>;
        tkey-gssapi-keytab <replaceable>quoted_string</replaceable>;
        transfer-format ( many-answers | one-answer );
-       transfer-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional> <optional>
-           dscp <replaceable>integer</replaceable> </optional>;
-       transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * )
-           </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
+       transfer-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * ) ] [
+           dscp <replaceable>integer</replaceable> ];
+       transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * )
+           ] [ dscp <replaceable>integer</replaceable> ];
        transfers-in <replaceable>integer</replaceable>;
        transfers-out <replaceable>integer</replaceable>;
        transfers-per-ns <replaceable>integer</replaceable>;
@@ -427,26 +426,26 @@ server <replaceable>netprefix</replaceable> {
        edns-udp-size <replaceable>integer</replaceable>;
        keys <replaceable>server_key</replaceable>;
        max-udp-size <replaceable>integer</replaceable>;
-       notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional> <optional>
-           dscp <replaceable>integer</replaceable> </optional>;
-       notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>
-           <optional> dscp <replaceable>integer</replaceable> </optional>;
+       notify-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * ) ] [
+           dscp <replaceable>integer</replaceable> ];
+       notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * ) ]
+           [ dscp <replaceable>integer</replaceable> ];
        provide-ixfr <replaceable>boolean</replaceable>;
-       query-source ( ( <optional> address </optional> ( <replaceable>ipv4_address</replaceable> | * ) <optional> port (
-           <replaceable>integer</replaceable> | * ) </optional> ) | ( <optional> <optional> address </optional> ( <replaceable>ipv4_address</replaceable> | * ) </optional>
-           port ( <replaceable>integer</replaceable> | * ) ) ) <optional> dscp <replaceable>integer</replaceable> </optional>;
-       query-source-v6 ( ( <optional> address </optional> ( <replaceable>ipv6_address</replaceable> | * ) <optional> port (
-           <replaceable>integer</replaceable> | * ) </optional> ) | ( <optional> <optional> address </optional> ( <replaceable>ipv6_address</replaceable> | * ) </optional>
-           port ( <replaceable>integer</replaceable> | * ) ) ) <optional> dscp <replaceable>integer</replaceable> </optional>;
+       query-source ( ( [ address ] ( <replaceable>ipv4_address</replaceable> | * ) [ port (
+           <replaceable>integer</replaceable> | * ) ] ) | ( [ [ address ] ( <replaceable>ipv4_address</replaceable> | * ) ]
+           port ( <replaceable>integer</replaceable> | * ) ) ) [ dscp <replaceable>integer</replaceable> ];
+       query-source-v6 ( ( [ address ] ( <replaceable>ipv6_address</replaceable> | * ) [ port (
+           <replaceable>integer</replaceable> | * ) ] ) | ( [ [ address ] ( <replaceable>ipv6_address</replaceable> | * ) ]
+           port ( <replaceable>integer</replaceable> | * ) ) ) [ dscp <replaceable>integer</replaceable> ];
        request-ixfr <replaceable>boolean</replaceable>;
        request-nsid <replaceable>boolean</replaceable>;
        request-sit <replaceable>boolean</replaceable>;, experimental
        tcp-only <replaceable>boolean</replaceable>;
        transfer-format ( many-answers | one-answer );
-       transfer-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional> <optional>
-           dscp <replaceable>integer</replaceable> </optional>;
-       transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * )
-           </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
+       transfer-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * ) ] [
+           dscp <replaceable>integer</replaceable> ];
+       transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * )
+           ] [ dscp <replaceable>integer</replaceable> ];
        transfers <replaceable>integer</replaceable>;
 };
 </literallayout>
@@ -457,9 +456,9 @@ server <replaceable>netprefix</replaceable> {
     <literallayout class="normal">
 statistics-channels {
        inet ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> |
-           * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional> <optional>
+           * ) [ port ( <replaceable>integer</replaceable> | * ) ] [
            allow { <replaceable>address_match_element</replaceable>; ...
-           } </optional>;
+           } ];
 };
 </literallayout>
   </refsection>
@@ -475,7 +474,7 @@ trusted-keys { <replaceable>string</replaceable> <replaceable>integer</replaceab
   <refsection><info><title>VIEW</title></info>
 
     <literallayout class="normal">
-view <replaceable>string</replaceable> <optional> <replaceable>class</replaceable> </optional> {
+view <replaceable>string</replaceable> [ <replaceable>class</replaceable> ] {
        acache-cleaning-interval <replaceable>integer</replaceable>;
        acache-enable <replaceable>boolean</replaceable>;
        additional-from-auth <replaceable>boolean</replaceable>;
@@ -491,13 +490,13 @@ view <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
        allow-transfer { <replaceable>address_match_element</replaceable>; ... };
        allow-update { <replaceable>address_match_element</replaceable>; ... };
        allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
-       also-notify <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> { ( <replaceable>masters</replaceable> |
-           <replaceable>ipv4_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> | <replaceable>ipv6_address</replaceable> <optional> port
-           <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ... };
-       alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * )
-           </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
-       alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> |
-           * ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
+       also-notify [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] { ( <replaceable>masters</replaceable> |
+           <replaceable>ipv4_address</replaceable> [ port <replaceable>integer</replaceable> ] | <replaceable>ipv6_address</replaceable> [ port
+           <replaceable>integer</replaceable> ] ) [ key <replaceable>string</replaceable> ]; ... };
+       alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * )
+           ] [ dscp <replaceable>integer</replaceable> ];
+       alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> |
+           * ) ] [ dscp <replaceable>integer</replaceable> ];
        attach-cache <replaceable>string</replaceable>;
        auth-nxdomain <replaceable>boolean</replaceable>; // default changed
        auto-dnssec ( allow | maintain | off );
@@ -514,10 +513,10 @@ view <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
        check-wildcard <replaceable>boolean</replaceable>;
        cleaning-interval <replaceable>integer</replaceable>;
        clients-per-query <replaceable>integer</replaceable>;
-       deny-answer-addresses { <replaceable>address_match_element</replaceable>; ... } <optional>
-           except-from { <replaceable>quoted_string</replaceable>; ... } </optional>;
-       deny-answer-aliases { <replaceable>quoted_string</replaceable>; ... } <optional> except-from {
-           <replaceable>quoted_string</replaceable>; ... } </optional>;
+       deny-answer-addresses { <replaceable>address_match_element</replaceable>; ... } [
+           except-from { <replaceable>quoted_string</replaceable>; ... } ];
+       deny-answer-aliases { <replaceable>quoted_string</replaceable>; ... } [ except-from {
+           <replaceable>quoted_string</replaceable>; ... } ];
        dialup ( notify | notify-passive | passive | refresh | <replaceable>boolean</replaceable> );
        disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>;
            ... };
@@ -548,24 +547,24 @@ view <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
        dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
        dnssec-update-mode ( maintain | no-resign );
        dnssec-validation ( yes | no | auto );
-       dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>quoted_string</replaceable> <optional> port
-           <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> | <replaceable>ipv4_address</replaceable> <optional> port
-           <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> | <replaceable>ipv6_address</replaceable> <optional> port
-           <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> ); ... };
+       dual-stack-servers [ port <replaceable>integer</replaceable> ] { ( <replaceable>quoted_string</replaceable> [ port
+           <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] | <replaceable>ipv4_address</replaceable> [ port
+           <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] | <replaceable>ipv6_address</replaceable> [ port
+           <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] ); ... };
        edns-udp-size <replaceable>integer</replaceable>;
        empty-contact <replaceable>string</replaceable>;
        empty-server <replaceable>string</replaceable>;
        empty-zones-enable <replaceable>boolean</replaceable>;
        fetch-quota-params <replaceable>integer</replaceable> <replaceable>fixedpoint</replaceable>
            <replaceable>fixedpoint</replaceable> <replaceable>fixedpoint</replaceable>;
-       fetches-per-server <replaceable>integer</replaceable> <optional> ( drop | fail ) </optional>;
-       fetches-per-zone <replaceable>integer</replaceable> <optional> ( drop | fail ) </optional>;
+       fetches-per-server <replaceable>integer</replaceable> [ ( drop | fail ) ];
+       fetches-per-zone <replaceable>integer</replaceable> [ ( drop | fail ) ];
        filter-aaaa { <replaceable>address_match_element</replaceable>; ... };
        filter-aaaa-on-v4 ( break-dnssec | <replaceable>boolean</replaceable> );
        filter-aaaa-on-v6 ( break-dnssec | <replaceable>boolean</replaceable> );
        forward ( first | only );
-       forwarders <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable>
-           | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional>; ... };
+       forwarders [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] { ( <replaceable>ipv4_address</replaceable>
+           | <replaceable>ipv6_address</replaceable> ) [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ]; ... };
        inline-signing <replaceable>boolean</replaceable>;
        ixfr-from-differences ( master | slave | <replaceable>boolean</replaceable> );
        key <replaceable>string</replaceable> {
@@ -606,21 +605,20 @@ view <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
        nosit-udp-size <replaceable>integer</replaceable>;, experimental
        notify ( explicit | master-only | <replaceable>boolean</replaceable> );
        notify-delay <replaceable>integer</replaceable>;
-       notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional> <optional>
-           dscp <replaceable>integer</replaceable> </optional>;
-       notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>
-           <optional> dscp <replaceable>integer</replaceable> </optional>;
+       notify-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * ) ] [
+           dscp <replaceable>integer</replaceable> ];
+       notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * ) ]
+           [ dscp <replaceable>integer</replaceable> ];
        notify-to-soa <replaceable>boolean</replaceable>;
-       nsec3-test-zone <replaceable>boolean</replaceable>; // test only
        preferred-glue <replaceable>string</replaceable>;
-       prefetch <replaceable>integer</replaceable> <optional> <replaceable>integer</replaceable> </optional>;
+       prefetch <replaceable>integer</replaceable> [ <replaceable>integer</replaceable> ];
        provide-ixfr <replaceable>boolean</replaceable>;
-       query-source ( ( <optional> address </optional> ( <replaceable>ipv4_address</replaceable> | * ) <optional> port (
-           <replaceable>integer</replaceable> | * ) </optional> ) | ( <optional> <optional> address </optional> ( <replaceable>ipv4_address</replaceable> | * ) </optional>
-           port ( <replaceable>integer</replaceable> | * ) ) ) <optional> dscp <replaceable>integer</replaceable> </optional>;
-       query-source-v6 ( ( <optional> address </optional> ( <replaceable>ipv6_address</replaceable> | * ) <optional> port (
-           <replaceable>integer</replaceable> | * ) </optional> ) | ( <optional> <optional> address </optional> ( <replaceable>ipv6_address</replaceable> | * ) </optional>
-           port ( <replaceable>integer</replaceable> | * ) ) ) <optional> dscp <replaceable>integer</replaceable> </optional>;
+       query-source ( ( [ address ] ( <replaceable>ipv4_address</replaceable> | * ) [ port (
+           <replaceable>integer</replaceable> | * ) ] ) | ( [ [ address ] ( <replaceable>ipv4_address</replaceable> | * ) ]
+           port ( <replaceable>integer</replaceable> | * ) ) ) [ dscp <replaceable>integer</replaceable> ];
+       query-source-v6 ( ( [ address ] ( <replaceable>ipv6_address</replaceable> | * ) [ port (
+           <replaceable>integer</replaceable> | * ) ] ) | ( [ [ address ] ( <replaceable>ipv6_address</replaceable> | * ) ]
+           port ( <replaceable>integer</replaceable> | * ) ) ) [ dscp <replaceable>integer</replaceable> ];
        rate-limit {
                all-per-second <replaceable>integer</replaceable>;
                errors-per-second <replaceable>integer</replaceable>;
@@ -643,15 +641,15 @@ view <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
        request-nsid <replaceable>boolean</replaceable>;
        request-sit <replaceable>boolean</replaceable>;, experimental
        resolver-query-timeout <replaceable>integer</replaceable>;
-       response-policy { zone <replaceable>quoted_string</replaceable> <optional> policy ( cname | disabled
+       response-policy { zone <replaceable>quoted_string</replaceable> [ policy ( cname | disabled
            | drop | given | no-op | nodata | nxdomain | passthru |
-           tcp-only <replaceable>quoted_string</replaceable> ) </optional> <optional> recursive-only <replaceable>boolean</replaceable> </optional> <optional>
-           max-policy-ttl <replaceable>integer</replaceable> </optional>; ... } <optional> recursive-only <replaceable>boolean</replaceable> </optional>
-           <optional> break-dnssec <replaceable>boolean</replaceable> </optional> <optional> max-policy-ttl <replaceable>integer</replaceable> </optional> <optional>
-           min-ns-dots <replaceable>integer</replaceable> </optional> <optional> qname-wait-recurse <replaceable>boolean</replaceable> </optional>;
-       root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
-       rrset-order { <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional> <optional> name
-           <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ... };
+           tcp-only <replaceable>quoted_string</replaceable> ) ] [ recursive-only <replaceable>boolean</replaceable> ] [
+           max-policy-ttl <replaceable>integer</replaceable> ]; ... } [ recursive-only <replaceable>boolean</replaceable> ]
+           [ break-dnssec <replaceable>boolean</replaceable> ] [ max-policy-ttl <replaceable>integer</replaceable> ] [
+           min-ns-dots <replaceable>integer</replaceable> ] [ qname-wait-recurse <replaceable>boolean</replaceable> ];
+       root-delegation-only [ exclude { <replaceable>quoted_string</replaceable>; ... } ];
+       rrset-order { [ class <replaceable>string</replaceable> ] [ type <replaceable>string</replaceable> ] [ name
+           <replaceable>quoted_string</replaceable> ] <replaceable>string</replaceable> <replaceable>string</replaceable>; ... };
        serial-update-method ( increment | unixtime );
        server <replaceable>netprefix</replaceable> {
                bogus <replaceable>boolean</replaceable>;
@@ -659,40 +657,40 @@ view <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
                edns-udp-size <replaceable>integer</replaceable>;
                keys <replaceable>server_key</replaceable>;
                max-udp-size <replaceable>integer</replaceable>;
-               notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | *
-                   ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
-               notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable>
-                   | * ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
+               notify-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | *
+                   ) ] [ dscp <replaceable>integer</replaceable> ];
+               notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable>
+                   | * ) ] [ dscp <replaceable>integer</replaceable> ];
                provide-ixfr <replaceable>boolean</replaceable>;
-               query-source ( ( <optional> address </optional> ( <replaceable>ipv4_address</replaceable> | * ) <optional> port
-                   ( <replaceable>integer</replaceable> | * ) </optional> ) | ( <optional> <optional> address </optional> (
-                   <replaceable>ipv4_address</replaceable> | * ) </optional> port ( <replaceable>integer</replaceable> | * ) ) ) <optional>
-                   dscp <replaceable>integer</replaceable> </optional>;
-               query-source-v6 ( ( <optional> address </optional> ( <replaceable>ipv6_address</replaceable> | * ) <optional>
-                   port ( <replaceable>integer</replaceable> | * ) </optional> ) | ( <optional> <optional> address </optional> (
-                   <replaceable>ipv6_address</replaceable> | * ) </optional> port ( <replaceable>integer</replaceable> | * ) ) ) <optional>
-                   dscp <replaceable>integer</replaceable> </optional>;
+               query-source ( ( [ address ] ( <replaceable>ipv4_address</replaceable> | * ) [ port
+                   ( <replaceable>integer</replaceable> | * ) ] ) | ( [ [ address ] (
+                   <replaceable>ipv4_address</replaceable> | * ) ] port ( <replaceable>integer</replaceable> | * ) ) ) [
+                   dscp <replaceable>integer</replaceable> ];
+               query-source-v6 ( ( [ address ] ( <replaceable>ipv6_address</replaceable> | * ) [
+                   port ( <replaceable>integer</replaceable> | * ) ] ) | ( [ [ address ] (
+                   <replaceable>ipv6_address</replaceable> | * ) ] port ( <replaceable>integer</replaceable> | * ) ) ) [
+                   dscp <replaceable>integer</replaceable> ];
                request-ixfr <replaceable>boolean</replaceable>;
                request-nsid <replaceable>boolean</replaceable>;
                request-sit <replaceable>boolean</replaceable>;, experimental
                tcp-only <replaceable>boolean</replaceable>;
                transfer-format ( many-answers | one-answer );
-               transfer-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> |
-                   * ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
-               transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port (
-                   <replaceable>integer</replaceable> | * ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
+               transfer-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> |
+                   * ) ] [ dscp <replaceable>integer</replaceable> ];
+               transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port (
+                   <replaceable>integer</replaceable> | * ) ] [ dscp <replaceable>integer</replaceable> ];
                transfers <replaceable>integer</replaceable>;
        };
        sig-signing-nodes <replaceable>integer</replaceable>;
        sig-signing-signatures <replaceable>integer</replaceable>;
        sig-signing-type <replaceable>integer</replaceable>;
-       sig-validity-interval <replaceable>integer</replaceable> <optional> <replaceable>integer</replaceable> </optional>;
+       sig-validity-interval <replaceable>integer</replaceable> [ <replaceable>integer</replaceable> ];
        sortlist { <replaceable>address_match_element</replaceable>; ... };
        transfer-format ( many-answers | one-answer );
-       transfer-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional> <optional>
-           dscp <replaceable>integer</replaceable> </optional>;
-       transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * )
-           </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
+       transfer-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * ) ] [
+           dscp <replaceable>integer</replaceable> ];
+       transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * )
+           ] [ dscp <replaceable>integer</replaceable> ];
        trust-anchor-telemetry <replaceable>boolean</replaceable>; // experimental
        trusted-keys { <replaceable>string</replaceable> <replaceable>integer</replaceable>
            <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>;
@@ -702,21 +700,21 @@ view <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
        use-alt-transfer-source <replaceable>boolean</replaceable>;
        zero-no-soa-ttl <replaceable>boolean</replaceable>;
        zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;
-       zone <replaceable>string</replaceable> <optional> <replaceable>class</replaceable> </optional> {
+       zone <replaceable>string</replaceable> [ <replaceable>class</replaceable> ] {
                allow-notify { <replaceable>address_match_element</replaceable>; ... };
                allow-query { <replaceable>address_match_element</replaceable>; ... };
                allow-query-on { <replaceable>address_match_element</replaceable>; ... };
                allow-transfer { <replaceable>address_match_element</replaceable>; ... };
                allow-update { <replaceable>address_match_element</replaceable>; ... };
                allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
-               also-notify <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> { (
-                   <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> |
-                   <replaceable>ipv6_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>;
+               also-notify [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] { (
+                   <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> [ port <replaceable>integer</replaceable> ] |
+                   <replaceable>ipv6_address</replaceable> [ port <replaceable>integer</replaceable> ] ) [ key <replaceable>string</replaceable> ];
                    ... };
-               alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port (
-                   <replaceable>integer</replaceable> | * ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
-               alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port (
-                   <replaceable>integer</replaceable> | * ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
+               alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * ) [ port (
+                   <replaceable>integer</replaceable> | * ) ] [ dscp <replaceable>integer</replaceable> ];
+               alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port (
+                   <replaceable>integer</replaceable> | * ) ] [ dscp <replaceable>integer</replaceable> ];
                auto-dnssec ( allow | maintain | off );
                check-dup-records ( fail | warn | ignore );
                check-integrity <replaceable>boolean</replaceable>;
@@ -738,18 +736,18 @@ view <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
                dnssec-update-mode ( maintain | no-resign );
                file <replaceable>quoted_string</replaceable>;
                forward ( first | only );
-               forwarders <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> { (
-                   <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional> <optional>
-                   dscp <replaceable>integer</replaceable> </optional>; ... };
+               forwarders [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] { (
+                   <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) [ port <replaceable>integer</replaceable> ] [
+                   dscp <replaceable>integer</replaceable> ]; ... };
                in-view <replaceable>string</replaceable>;
                inline-signing <replaceable>boolean</replaceable>;
                ixfr-from-differences <replaceable>boolean</replaceable>;
                journal <replaceable>quoted_string</replaceable>;
                key-directory <replaceable>quoted_string</replaceable>;
                masterfile-format ( map | raw | text );
-               masters <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> { ( <replaceable>masters</replaceable>
-                   | <replaceable>ipv4_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> | <replaceable>ipv6_address</replaceable> <optional>
-                   port <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ... };
+               masters [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] { ( <replaceable>masters</replaceable>
+                   | <replaceable>ipv4_address</replaceable> [ port <replaceable>integer</replaceable> ] | <replaceable>ipv6_address</replaceable> [
+                   port <replaceable>integer</replaceable> ] ) [ key <replaceable>string</replaceable> ]; ... };
                max-ixfr-log-size ( default | unlimited |
                max-journal-size <replaceable>size_no_default</replaceable>;
                max-records <replaceable>integer</replaceable>;
@@ -765,28 +763,27 @@ view <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
                multi-master <replaceable>boolean</replaceable>;
                notify ( explicit | master-only | <replaceable>boolean</replaceable> );
                notify-delay <replaceable>integer</replaceable>;
-               notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | *
-                   ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
-               notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable>
-                   | * ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
+               notify-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | *
+                   ) ] [ dscp <replaceable>integer</replaceable> ];
+               notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable>
+                   | * ) ] [ dscp <replaceable>integer</replaceable> ];
                notify-to-soa <replaceable>boolean</replaceable>;
-               nsec3-test-zone <replaceable>boolean</replaceable>; // test only
                pubkey <replaceable>integer</replaceable>
                    <replaceable>integer</replaceable>
                    <replaceable>integer</replaceable>
                request-ixfr <replaceable>boolean</replaceable>;
                serial-update-method ( increment | unixtime );
-               server-addresses { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional>
-                   port <replaceable>integer</replaceable> </optional>; ... };
+               server-addresses { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) [
+                   port <replaceable>integer</replaceable> ]; ... };
                server-names { <replaceable>quoted_string</replaceable>; ... };
                sig-signing-nodes <replaceable>integer</replaceable>;
                sig-signing-signatures <replaceable>integer</replaceable>;
                sig-signing-type <replaceable>integer</replaceable>;
-               sig-validity-interval <replaceable>integer</replaceable> <optional> <replaceable>integer</replaceable> </optional>;
-               transfer-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> |
-                   * ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
-               transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port (
-                   <replaceable>integer</replaceable> | * ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
+               sig-validity-interval <replaceable>integer</replaceable> [ <replaceable>integer</replaceable> ];
+               transfer-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> |
+                   * ) ] [ dscp <replaceable>integer</replaceable> ];
+               transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port (
+                   <replaceable>integer</replaceable> | * ) ] [ dscp <replaceable>integer</replaceable> ];
                try-tcp-refresh <replaceable>boolean</replaceable>;
                type ( delegation-only | forward | hint | master | redirect
                    | slave | static-stub | stub );
@@ -795,7 +792,7 @@ view <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
                    6to4-self | external | krb5-self | krb5-subdomain |
                    ms-self | ms-subdomain | name | self | selfsub |
                    selfwild | subdomain | tcp-self | wildcard | zonesub )
-                   <optional> <replaceable>string</replaceable> </optional> <replaceable>rrtypelist</replaceable>; ... };
+                   [ <replaceable>string</replaceable> ] <replaceable>rrtypelist</replaceable>; ... };
                use-alt-transfer-source <replaceable>boolean</replaceable>;
                zero-no-soa-ttl <replaceable>boolean</replaceable>;
                zone-statistics ( full | terse | none | <replaceable>boolean</replaceable> );
@@ -808,20 +805,20 @@ view <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
   <refsection><info><title>ZONE</title></info>
 
     <literallayout class="normal">
-zone <replaceable>string</replaceable> <optional> <replaceable>class</replaceable> </optional> {
+zone <replaceable>string</replaceable> [ <replaceable>class</replaceable> ] {
        allow-notify { <replaceable>address_match_element</replaceable>; ... };
        allow-query { <replaceable>address_match_element</replaceable>; ... };
        allow-query-on { <replaceable>address_match_element</replaceable>; ... };
        allow-transfer { <replaceable>address_match_element</replaceable>; ... };
        allow-update { <replaceable>address_match_element</replaceable>; ... };
        allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
-       also-notify <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> { ( <replaceable>masters</replaceable> |
-           <replaceable>ipv4_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> | <replaceable>ipv6_address</replaceable> <optional> port
-           <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ... };
-       alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * )
-           </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
-       alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> |
-           * ) </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
+       also-notify [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] { ( <replaceable>masters</replaceable> |
+           <replaceable>ipv4_address</replaceable> [ port <replaceable>integer</replaceable> ] | <replaceable>ipv6_address</replaceable> [ port
+           <replaceable>integer</replaceable> ] ) [ key <replaceable>string</replaceable> ]; ... };
+       alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * )
+           ] [ dscp <replaceable>integer</replaceable> ];
+       alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> |
+           * ) ] [ dscp <replaceable>integer</replaceable> ];
        auto-dnssec ( allow | maintain | off );
        check-dup-records ( fail | warn | ignore );
        check-integrity <replaceable>boolean</replaceable>;
@@ -842,17 +839,17 @@ zone <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
        dnssec-update-mode ( maintain | no-resign );
        file <replaceable>quoted_string</replaceable>;
        forward ( first | only );
-       forwarders <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable>
-           | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional>; ... };
+       forwarders [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] { ( <replaceable>ipv4_address</replaceable>
+           | <replaceable>ipv6_address</replaceable> ) [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ]; ... };
        in-view <replaceable>string</replaceable>;
        inline-signing <replaceable>boolean</replaceable>;
        ixfr-from-differences <replaceable>boolean</replaceable>;
        journal <replaceable>quoted_string</replaceable>;
        key-directory <replaceable>quoted_string</replaceable>;
        masterfile-format ( map | raw | text );
-       masters <optional> port <replaceable>integer</replaceable> </optional> <optional> dscp <replaceable>integer</replaceable> </optional> { ( <replaceable>masters</replaceable> |
-           <replaceable>ipv4_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> | <replaceable>ipv6_address</replaceable> <optional> port
-           <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ... };
+       masters [ port <replaceable>integer</replaceable> ] [ dscp <replaceable>integer</replaceable> ] { ( <replaceable>masters</replaceable> |
+           <replaceable>ipv4_address</replaceable> [ port <replaceable>integer</replaceable> ] | <replaceable>ipv6_address</replaceable> [ port
+           <replaceable>integer</replaceable> ] ) [ key <replaceable>string</replaceable> ]; ... };
        max-journal-size <replaceable>size_no_default</replaceable>;
        max-records <replaceable>integer</replaceable>;
        max-refresh-time <replaceable>integer</replaceable>;
@@ -867,26 +864,25 @@ zone <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
        multi-master <replaceable>boolean</replaceable>;
        notify ( explicit | master-only | <replaceable>boolean</replaceable> );
        notify-delay <replaceable>integer</replaceable>;
-       notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional> <optional>
-           dscp <replaceable>integer</replaceable> </optional>;
-       notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>
-           <optional> dscp <replaceable>integer</replaceable> </optional>;
+       notify-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * ) ] [
+           dscp <replaceable>integer</replaceable> ];
+       notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * ) ]
+           [ dscp <replaceable>integer</replaceable> ];
        notify-to-soa <replaceable>boolean</replaceable>;
-       nsec3-test-zone <replaceable>boolean</replaceable>; // test only
        pubkey <replaceable>integer</replaceable> <replaceable>integer</replaceable>
        request-ixfr <replaceable>boolean</replaceable>;
        serial-update-method ( increment | unixtime );
-       server-addresses { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port
-           <replaceable>integer</replaceable> </optional>; ... };
+       server-addresses { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) [ port
+           <replaceable>integer</replaceable> ]; ... };
        server-names { <replaceable>quoted_string</replaceable>; ... };
        sig-signing-nodes <replaceable>integer</replaceable>;
        sig-signing-signatures <replaceable>integer</replaceable>;
        sig-signing-type <replaceable>integer</replaceable>;
-       sig-validity-interval <replaceable>integer</replaceable> <optional> <replaceable>integer</replaceable> </optional>;
-       transfer-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional> <optional>
-           dscp <replaceable>integer</replaceable> </optional>;
-       transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * )
-           </optional> <optional> dscp <replaceable>integer</replaceable> </optional>;
+       sig-validity-interval <replaceable>integer</replaceable> [ <replaceable>integer</replaceable> ];
+       transfer-source ( <replaceable>ipv4_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * ) ] [
+           dscp <replaceable>integer</replaceable> ];
+       transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> | * )
+           ] [ dscp <replaceable>integer</replaceable> ];
        try-tcp-refresh <replaceable>boolean</replaceable>;
        type ( delegation-only | forward | hint | master | redirect | slave
            | static-stub | stub );
@@ -894,7 +890,7 @@ zone <replaceable>string</replaceable> <optional> <replaceable>class</replaceabl
        update-policy ( local | { ( deny | grant ) <replaceable>string</replaceable> ( 6to4-self |
            external | krb5-self | krb5-subdomain | ms-self | ms-subdomain
            | name | self | selfsub | selfwild | subdomain | tcp-self |
-           wildcard | zonesub ) <optional> <replaceable>string</replaceable> </optional> <replaceable>rrtypelist</replaceable>; ... };
+           wildcard | zonesub ) [ <replaceable>string</replaceable> ] <replaceable>rrtypelist</replaceable>; ... };
        use-alt-transfer-source <replaceable>boolean</replaceable>;
        zero-no-soa-ttl <replaceable>boolean</replaceable>;
        zone-statistics ( full | terse | none | <replaceable>boolean</replaceable> );
index c917f821283e859c23f3c11d9447b9e07ddcb215..07085f5917ab1353884cab7b6ccf601e42418437 100644 (file)
@@ -1,6 +1,6 @@
 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
 <!--
- - Copyright (C) 2004-2017 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2018 Internet Systems Consortium, Inc. ("ISC")
  - 
  - Permission to use, copy, modify, and/or distribute this software for any
  - purpose with or without fee is hereby granted, provided that the above
@@ -79,12 +79,12 @@ acl
     <div class="literallayout"><p><br>
 controls {<br>
        inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> |<br>
-           * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] allow<br>
-           { <em class="replaceable"><code>address_match_element</code></em>; ... } [<span class="optional"><br>
-           keys { <em class="replaceable"><code>string</code></em>; ... } </span>];<br>
+           * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] allow<br>
+           { <em class="replaceable"><code>address_match_element</code></em>; ... } [<br>
+           keys { <em class="replaceable"><code>string</code></em>; ... } ];<br>
        unix <em class="replaceable"><code>quoted_string</code></em> perm <em class="replaceable"><code>integer</code></em><br>
-           owner <em class="replaceable"><code>integer</code></em> group <em class="replaceable"><code>integer</code></em> [<span class="optional"><br>
-           keys { <em class="replaceable"><code>string</code></em>; ... } </span>];<br>
+           owner <em class="replaceable"><code>integer</code></em> group <em class="replaceable"><code>integer</code></em> [<br>
+           keys { <em class="replaceable"><code>string</code></em>; ... } ];<br>
 };<br>
 </p></div>
   </div>
@@ -118,15 +118,15 @@ key
 logging {<br>
        category <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
        channel <em class="replaceable"><code>string</code></em> {<br>
-               file <em class="replaceable"><code>quoted_string</code></em> [<span class="optional"> versions ( "unlimited" | <em class="replaceable"><code>integer</code></em> )<br>
-                   </span>] [<span class="optional"> size <em class="replaceable"><code>size</code></em> </span>];<br>
+               file <em class="replaceable"><code>quoted_string</code></em> [ versions ( "unlimited" | <em class="replaceable"><code>integer</code></em> )<br>
+                   ] [ size <em class="replaceable"><code>size</code></em> ];<br>
                null;<br>
                print-category <em class="replaceable"><code>boolean</code></em>;<br>
                print-severity <em class="replaceable"><code>boolean</code></em>;<br>
                print-time <em class="replaceable"><code>boolean</code></em>;<br>
                severity <em class="replaceable"><code>log_severity</code></em>;<br>
                stderr;<br>
-               syslog [<span class="optional"> <em class="replaceable"><code>syslog_facility</code></em> </span>];<br>
+               syslog [ <em class="replaceable"><code>syslog_facility</code></em> ];<br>
        };<br>
 };<br>
 </p></div>
@@ -137,11 +137,11 @@ logging
 
     <div class="literallayout"><p><br>
 lwres {<br>
-       listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
-           | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+       listen-on [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
+           | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
        ndots <em class="replaceable"><code>integer</code></em>;<br>
        search { <em class="replaceable"><code>string</code></em>; ... };<br>
-       view <em class="replaceable"><code>string</code></em> [<span class="optional"> <em class="replaceable"><code>class</code></em> </span>];<br>
+       view <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ];<br>
 };<br>
 </p></div>
   </div>
@@ -159,10 +159,10 @@ managed-keys
 <a name="id-1.15"></a><h2>MASTERS</h2>
 
     <div class="literallayout"><p><br>
-masters <em class="replaceable"><code>string</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp<br>
-    <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"><br>
-    port <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-    <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ... };<br>
+masters <em class="replaceable"><code>string</code></em> [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
+    <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<br>
+    port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+    <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
 </p></div>
   </div>
 
@@ -186,13 +186,13 @@ options
        allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
-       also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>masters</code></em> |<br>
-           <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ... };<br>
-       alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> |<br>
-           * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
+           <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
+       alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
+           * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        attach-cache <em class="replaceable"><code>string</code></em>;<br>
        auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
        auto-dnssec ( allow | maintain | off );<br>
@@ -216,10 +216,10 @@ options
        clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
        coresize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
        datasize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
-       deny-answer-addresses { <em class="replaceable"><code>address_match_element</code></em>; ... } [<span class="optional"><br>
-           except-from { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
-       deny-answer-aliases { <em class="replaceable"><code>quoted_string</code></em>; ... } [<span class="optional"> except-from {<br>
-           <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
+       deny-answer-addresses { <em class="replaceable"><code>address_match_element</code></em>; ... } [<br>
+           except-from { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       deny-answer-aliases { <em class="replaceable"><code>quoted_string</code></em>; ... } [ except-from {<br>
+           <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
        dialup ( notify | notify-passive | passive | refresh | <em class="replaceable"><code>boolean</code></em> );<br>
        directory <em class="replaceable"><code>quoted_string</code></em>;<br>
        disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>;<br>
@@ -248,10 +248,10 @@ options
        dnssec-update-mode ( maintain | no-resign );<br>
        dnssec-validation ( yes | no | auto );<br>
        dscp <em class="replaceable"><code>integer</code></em>;<br>
-       dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] ); ... };<br>
+       dual-stack-servers [ port <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>quoted_string</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv4_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] ); ... };<br>
        dump-file <em class="replaceable"><code>quoted_string</code></em>;<br>
        edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
        empty-contact <em class="replaceable"><code>string</code></em>;<br>
@@ -259,16 +259,16 @@ options
        empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
        fetch-quota-params <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>fixedpoint</code></em><br>
            <em class="replaceable"><code>fixedpoint</code></em> <em class="replaceable"><code>fixedpoint</code></em>;<br>
-       fetches-per-server <em class="replaceable"><code>integer</code></em> [<span class="optional"> ( drop | fail ) </span>];<br>
-       fetches-per-zone <em class="replaceable"><code>integer</code></em> [<span class="optional"> ( drop | fail ) </span>];<br>
+       fetches-per-server <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
+       fetches-per-zone <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
        files ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
        filter-aaaa { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        filter-aaaa-on-v4 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
        filter-aaaa-on-v6 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
        flush-zones-on-shutdown <em class="replaceable"><code>boolean</code></em>;<br>
        forward ( first | only );<br>
-       forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
-           | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+       forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
+           | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
        geoip-directory ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
        heartbeat-interval <em class="replaceable"><code>integer</code></em>;<br>
        hostname ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
@@ -277,11 +277,11 @@ options
        ixfr-from-differences ( master | slave | <em class="replaceable"><code>boolean</code></em> );<br>
        key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
        lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
-       listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp<br>
-           <em class="replaceable"><code>integer</code></em> </span>] {<br>
+       listen-on [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
+           <em class="replaceable"><code>integer</code></em> ] {<br>
            <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
-       listen-on-v6 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp<br>
-           <em class="replaceable"><code>integer</code></em> </span>] {<br>
+       listen-on-v6 [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
+           <em class="replaceable"><code>integer</code></em> ] {<br>
            <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        managed-keys-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
        masterfile-format ( map | raw | text );<br>
@@ -314,23 +314,22 @@ options
        nosit-udp-size <em class="replaceable"><code>integer</code></em>;, experimental<br>
        notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
        notify-delay <em class="replaceable"><code>integer</code></em>;<br>
-       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
-           [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
+           [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
-       nsec3-test-zone <em class="replaceable"><code>boolean</code></em>; // test only<br>
        pid-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
        port <em class="replaceable"><code>integer</code></em>;<br>
        preferred-glue <em class="replaceable"><code>string</code></em>;<br>
-       prefetch <em class="replaceable"><code>integer</code></em> [<span class="optional"> <em class="replaceable"><code>integer</code></em> </span>];<br>
+       prefetch <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
        provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
-       query-source ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port (<br>
-           <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>]<br>
-           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       query-source-v6 ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port (<br>
-           <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>]<br>
-           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
+           <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) ]<br>
+           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
+           <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) ]<br>
+           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        querylog <em class="replaceable"><code>boolean</code></em>;<br>
        random-device <em class="replaceable"><code>quoted_string</code></em>;<br>
        rate-limit {<br>
@@ -358,15 +357,15 @@ options
        request-sit <em class="replaceable"><code>boolean</code></em>;, experimental<br>
        reserved-sockets <em class="replaceable"><code>integer</code></em>;<br>
        resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
-       response-policy { zone <em class="replaceable"><code>quoted_string</code></em> [<span class="optional"> policy ( cname | disabled<br>
+       response-policy { zone <em class="replaceable"><code>quoted_string</code></em> [ policy ( cname | disabled<br>
            | drop | given | no-op | nodata | nxdomain | passthru |<br>
-           tcp-only <em class="replaceable"><code>quoted_string</code></em> ) </span>] [<span class="optional"> recursive-only <em class="replaceable"><code>boolean</code></em> </span>] [<span class="optional"><br>
-           max-policy-ttl <em class="replaceable"><code>integer</code></em> </span>]; ... } [<span class="optional"> recursive-only <em class="replaceable"><code>boolean</code></em> </span>]<br>
-           [<span class="optional"> break-dnssec <em class="replaceable"><code>boolean</code></em> </span>] [<span class="optional"> max-policy-ttl <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"><br>
-           min-ns-dots <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> qname-wait-recurse <em class="replaceable"><code>boolean</code></em> </span>];<br>
-       root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
-       rrset-order { [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> name<br>
-           <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
+           tcp-only <em class="replaceable"><code>quoted_string</code></em> ) ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ] [<br>
+           max-policy-ttl <em class="replaceable"><code>integer</code></em> ]; ... } [ recursive-only <em class="replaceable"><code>boolean</code></em> ]<br>
+           [ break-dnssec <em class="replaceable"><code>boolean</code></em> ] [ max-policy-ttl <em class="replaceable"><code>integer</code></em> ] [<br>
+           min-ns-dots <em class="replaceable"><code>integer</code></em> ] [ qname-wait-recurse <em class="replaceable"><code>boolean</code></em> ];<br>
+       root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
+           <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
        secroots-file <em class="replaceable"><code>quoted_string</code></em>;<br>
        serial-query-rate <em class="replaceable"><code>integer</code></em>;<br>
        serial-update-method ( increment | unixtime );<br>
@@ -377,7 +376,7 @@ options
        sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
        sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
        sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
-       sig-validity-interval <em class="replaceable"><code>integer</code></em> [<span class="optional"> <em class="replaceable"><code>integer</code></em> </span>];<br>
+       sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
        sit-secret <em class="replaceable"><code>string</code></em>;, experimental<br>
        sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        stacksize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
@@ -389,10 +388,10 @@ options
        tkey-gssapi-credential <em class="replaceable"><code>quoted_string</code></em>;<br>
        tkey-gssapi-keytab <em class="replaceable"><code>quoted_string</code></em>;<br>
        transfer-format ( many-answers | one-answer );<br>
-       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        transfers-in <em class="replaceable"><code>integer</code></em>;<br>
        transfers-out <em class="replaceable"><code>integer</code></em>;<br>
        transfers-per-ns <em class="replaceable"><code>integer</code></em>;<br>
@@ -420,26 +419,26 @@ server
        edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
        keys <em class="replaceable"><code>server_key</code></em>;<br>
        max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
-       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
-           [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
+           [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
-       query-source ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port (<br>
-           <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>]<br>
-           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       query-source-v6 ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port (<br>
-           <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>]<br>
-           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
+           <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) ]<br>
+           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
+           <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) ]<br>
+           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
        request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
        request-sit <em class="replaceable"><code>boolean</code></em>;, experimental<br>
        tcp-only <em class="replaceable"><code>boolean</code></em>;<br>
        transfer-format ( many-answers | one-answer );<br>
-       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        transfers <em class="replaceable"><code>integer</code></em>;<br>
 };<br>
 </p></div>
@@ -451,9 +450,9 @@ server
     <div class="literallayout"><p><br>
 statistics-channels {<br>
        inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> |<br>
-           * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
+           * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
            allow { <em class="replaceable"><code>address_match_element</code></em>; ...<br>
-           } </span>];<br>
+           } ];<br>
 };<br>
 </p></div>
   </div>
@@ -471,7 +470,7 @@ trusted-keys
 <a name="id-1.20"></a><h2>VIEW</h2>
 
     <div class="literallayout"><p><br>
-view <em class="replaceable"><code>string</code></em> [<span class="optional"> <em class="replaceable"><code>class</code></em> </span>] {<br>
+view <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
        acache-cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
        acache-enable <em class="replaceable"><code>boolean</code></em>;<br>
        additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
@@ -487,13 +486,13 @@ view
        allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
-       also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>masters</code></em> |<br>
-           <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ... };<br>
-       alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> |<br>
-           * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
+           <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
+       alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
+           * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        attach-cache <em class="replaceable"><code>string</code></em>;<br>
        auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
        auto-dnssec ( allow | maintain | off );<br>
@@ -510,10 +509,10 @@ view
        check-wildcard <em class="replaceable"><code>boolean</code></em>;<br>
        cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
        clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
-       deny-answer-addresses { <em class="replaceable"><code>address_match_element</code></em>; ... } [<span class="optional"><br>
-           except-from { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
-       deny-answer-aliases { <em class="replaceable"><code>quoted_string</code></em>; ... } [<span class="optional"> except-from {<br>
-           <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
+       deny-answer-addresses { <em class="replaceable"><code>address_match_element</code></em>; ... } [<br>
+           except-from { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       deny-answer-aliases { <em class="replaceable"><code>quoted_string</code></em>; ... } [ except-from {<br>
+           <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
        dialup ( notify | notify-passive | passive | refresh | <em class="replaceable"><code>boolean</code></em> );<br>
        disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>;<br>
            ... };<br>
@@ -544,24 +543,24 @@ view
        dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
        dnssec-update-mode ( maintain | no-resign );<br>
        dnssec-validation ( yes | no | auto );<br>
-       dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] ); ... };<br>
+       dual-stack-servers [ port <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>quoted_string</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv4_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] ); ... };<br>
        edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
        empty-contact <em class="replaceable"><code>string</code></em>;<br>
        empty-server <em class="replaceable"><code>string</code></em>;<br>
        empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
        fetch-quota-params <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>fixedpoint</code></em><br>
            <em class="replaceable"><code>fixedpoint</code></em> <em class="replaceable"><code>fixedpoint</code></em>;<br>
-       fetches-per-server <em class="replaceable"><code>integer</code></em> [<span class="optional"> ( drop | fail ) </span>];<br>
-       fetches-per-zone <em class="replaceable"><code>integer</code></em> [<span class="optional"> ( drop | fail ) </span>];<br>
+       fetches-per-server <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
+       fetches-per-zone <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
        filter-aaaa { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        filter-aaaa-on-v4 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
        filter-aaaa-on-v6 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
        forward ( first | only );<br>
-       forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
-           | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+       forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
+           | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
        inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
        ixfr-from-differences ( master | slave | <em class="replaceable"><code>boolean</code></em> );<br>
        key <em class="replaceable"><code>string</code></em> {<br>
@@ -602,21 +601,20 @@ view
        nosit-udp-size <em class="replaceable"><code>integer</code></em>;, experimental<br>
        notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
        notify-delay <em class="replaceable"><code>integer</code></em>;<br>
-       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
-           [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
+           [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
-       nsec3-test-zone <em class="replaceable"><code>boolean</code></em>; // test only<br>
        preferred-glue <em class="replaceable"><code>string</code></em>;<br>
-       prefetch <em class="replaceable"><code>integer</code></em> [<span class="optional"> <em class="replaceable"><code>integer</code></em> </span>];<br>
+       prefetch <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
        provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
-       query-source ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port (<br>
-           <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>]<br>
-           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       query-source-v6 ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port (<br>
-           <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>]<br>
-           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
+           <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) ]<br>
+           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
+           <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) ]<br>
+           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        rate-limit {<br>
                all-per-second <em class="replaceable"><code>integer</code></em>;<br>
                errors-per-second <em class="replaceable"><code>integer</code></em>;<br>
@@ -639,15 +637,15 @@ view
        request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
        request-sit <em class="replaceable"><code>boolean</code></em>;, experimental<br>
        resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
-       response-policy { zone <em class="replaceable"><code>quoted_string</code></em> [<span class="optional"> policy ( cname | disabled<br>
+       response-policy { zone <em class="replaceable"><code>quoted_string</code></em> [ policy ( cname | disabled<br>
            | drop | given | no-op | nodata | nxdomain | passthru |<br>
-           tcp-only <em class="replaceable"><code>quoted_string</code></em> ) </span>] [<span class="optional"> recursive-only <em class="replaceable"><code>boolean</code></em> </span>] [<span class="optional"><br>
-           max-policy-ttl <em class="replaceable"><code>integer</code></em> </span>]; ... } [<span class="optional"> recursive-only <em class="replaceable"><code>boolean</code></em> </span>]<br>
-           [<span class="optional"> break-dnssec <em class="replaceable"><code>boolean</code></em> </span>] [<span class="optional"> max-policy-ttl <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"><br>
-           min-ns-dots <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> qname-wait-recurse <em class="replaceable"><code>boolean</code></em> </span>];<br>
-       root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
-       rrset-order { [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> name<br>
-           <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
+           tcp-only <em class="replaceable"><code>quoted_string</code></em> ) ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ] [<br>
+           max-policy-ttl <em class="replaceable"><code>integer</code></em> ]; ... } [ recursive-only <em class="replaceable"><code>boolean</code></em> ]<br>
+           [ break-dnssec <em class="replaceable"><code>boolean</code></em> ] [ max-policy-ttl <em class="replaceable"><code>integer</code></em> ] [<br>
+           min-ns-dots <em class="replaceable"><code>integer</code></em> ] [ qname-wait-recurse <em class="replaceable"><code>boolean</code></em> ];<br>
+       root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
+           <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
        serial-update-method ( increment | unixtime );<br>
        server <em class="replaceable"><code>netprefix</code></em> {<br>
                bogus <em class="replaceable"><code>boolean</code></em>;<br>
@@ -655,40 +653,40 @@ view
                edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
                keys <em class="replaceable"><code>server_key</code></em>;<br>
                max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
-               notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | *<br>
-                   ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-               notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em><br>
-                   | * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+               notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | *<br>
+                   ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+               notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em><br>
+                   | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
-               query-source ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port<br>
-                   ( <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] (<br>
-                   <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"><br>
-                   dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-               query-source-v6 ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"><br>
-                   port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] (<br>
-                   <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"><br>
-                   dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+               query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port<br>
+                   ( <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] (<br>
+                   <em class="replaceable"><code>ipv4_address</code></em> | * ) ] port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<br>
+                   dscp <em class="replaceable"><code>integer</code></em> ];<br>
+               query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<br>
+                   port ( <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] (<br>
+                   <em class="replaceable"><code>ipv6_address</code></em> | * ) ] port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<br>
+                   dscp <em class="replaceable"><code>integer</code></em> ];<br>
                request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
                request-sit <em class="replaceable"><code>boolean</code></em>;, experimental<br>
                tcp-only <em class="replaceable"><code>boolean</code></em>;<br>
                transfer-format ( many-answers | one-answer );<br>
-               transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> |<br>
-                   * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-               transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port (<br>
-                   <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+               transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
+                   * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+               transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
+                   <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                transfers <em class="replaceable"><code>integer</code></em>;<br>
        };<br>
        sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
        sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
        sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
-       sig-validity-interval <em class="replaceable"><code>integer</code></em> [<span class="optional"> <em class="replaceable"><code>integer</code></em> </span>];<br>
+       sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
        sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        transfer-format ( many-answers | one-answer );<br>
-       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        trust-anchor-telemetry <em class="replaceable"><code>boolean</code></em>; // experimental<br>
        trusted-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em><br>
            <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>;<br>
@@ -698,21 +696,21 @@ view
        use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
        zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
        zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
-       zone <em class="replaceable"><code>string</code></em> [<span class="optional"> <em class="replaceable"><code>class</code></em> </span>] {<br>
+       zone <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
                allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
-               also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { (<br>
-                   <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] |<br>
-                   <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>];<br>
+               also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { (<br>
+                   <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] |<br>
+                   <em class="replaceable"><code>ipv6_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ];<br>
                    ... };<br>
-               alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port (<br>
-                   <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-               alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port (<br>
-                   <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+               alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
+                   <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+               alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
+                   <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                auto-dnssec ( allow | maintain | off );<br>
                check-dup-records ( fail | warn | ignore );<br>
                check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
@@ -734,18 +732,18 @@ view
                dnssec-update-mode ( maintain | no-resign );<br>
                file <em class="replaceable"><code>quoted_string</code></em>;<br>
                forward ( first | only );<br>
-               forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { (<br>
-                   <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"><br>
-                   dscp <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+               forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { (<br>
+                   <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [<br>
+                   dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
                in-view <em class="replaceable"><code>string</code></em>;<br>
                inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
                ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
                journal <em class="replaceable"><code>quoted_string</code></em>;<br>
                key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
                masterfile-format ( map | raw | text );<br>
-               masters [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>masters</code></em><br>
-                   | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"><br>
-                   port <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ... };<br>
+               masters [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em><br>
+                   | <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [<br>
+                   port <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
                max-ixfr-log-size ( default | unlimited |<br>
                max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
                max-records <em class="replaceable"><code>integer</code></em>;<br>
@@ -761,28 +759,27 @@ view
                multi-master <em class="replaceable"><code>boolean</code></em>;<br>
                notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
                notify-delay <em class="replaceable"><code>integer</code></em>;<br>
-               notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | *<br>
-                   ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-               notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em><br>
-                   | * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+               notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | *<br>
+                   ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+               notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em><br>
+                   | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
-               nsec3-test-zone <em class="replaceable"><code>boolean</code></em>; // test only<br>
                pubkey <em class="replaceable"><code>integer</code></em><br>
                    <em class="replaceable"><code>integer</code></em><br>
                    <em class="replaceable"><code>integer</code></em><br>
                request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                serial-update-method ( increment | unixtime );<br>
-               server-addresses { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"><br>
-                   port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+               server-addresses { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<br>
+                   port <em class="replaceable"><code>integer</code></em> ]; ... };<br>
                server-names { <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
                sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
                sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
                sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
-               sig-validity-interval <em class="replaceable"><code>integer</code></em> [<span class="optional"> <em class="replaceable"><code>integer</code></em> </span>];<br>
-               transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> |<br>
-                   * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-               transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port (<br>
-                   <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+               sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
+               transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
+                   * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+               transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
+                   <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
                type ( delegation-only | forward | hint | master | redirect<br>
                    | slave | static-stub | stub );<br>
@@ -791,7 +788,7 @@ view
                    6to4-self | external | krb5-self | krb5-subdomain |<br>
                    ms-self | ms-subdomain | name | self | selfsub |<br>
                    selfwild | subdomain | tcp-self | wildcard | zonesub )<br>
-                   [<span class="optional"> <em class="replaceable"><code>string</code></em> </span>] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
+                   [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
                use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
                zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
                zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
@@ -805,20 +802,20 @@ view
 <a name="id-1.21"></a><h2>ZONE</h2>
 
     <div class="literallayout"><p><br>
-zone <em class="replaceable"><code>string</code></em> [<span class="optional"> <em class="replaceable"><code>class</code></em> </span>] {<br>
+zone <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
        allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
-       also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>masters</code></em> |<br>
-           <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ... };<br>
-       alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> |<br>
-           * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
+           <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
+       alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
+           * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        auto-dnssec ( allow | maintain | off );<br>
        check-dup-records ( fail | warn | ignore );<br>
        check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
@@ -839,17 +836,17 @@ zone
        dnssec-update-mode ( maintain | no-resign );<br>
        file <em class="replaceable"><code>quoted_string</code></em>;<br>
        forward ( first | only );<br>
-       forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
-           | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+       forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
+           | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
        in-view <em class="replaceable"><code>string</code></em>;<br>
        inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
        ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
        journal <em class="replaceable"><code>quoted_string</code></em>;<br>
        key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
        masterfile-format ( map | raw | text );<br>
-       masters [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>masters</code></em> |<br>
-           <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ... };<br>
+       masters [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
+           <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
        max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
        max-records <em class="replaceable"><code>integer</code></em>;<br>
        max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
@@ -864,26 +861,25 @@ zone
        multi-master <em class="replaceable"><code>boolean</code></em>;<br>
        notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
        notify-delay <em class="replaceable"><code>integer</code></em>;<br>
-       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
-           [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
+           [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
-       nsec3-test-zone <em class="replaceable"><code>boolean</code></em>; // test only<br>
        pubkey <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em><br>
        request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
        serial-update-method ( increment | unixtime );<br>
-       server-addresses { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+       server-addresses { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [ port<br>
+           <em class="replaceable"><code>integer</code></em> ]; ... };<br>
        server-names { <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
        sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
        sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
        sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
-       sig-validity-interval <em class="replaceable"><code>integer</code></em> [<span class="optional"> <em class="replaceable"><code>integer</code></em> </span>];<br>
-       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
+       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
        type ( delegation-only | forward | hint | master | redirect | slave<br>
            | static-stub | stub );<br>
@@ -891,7 +887,7 @@ zone
        update-policy ( local | { ( deny | grant ) <em class="replaceable"><code>string</code></em> ( 6to4-self |<br>
            external | krb5-self | krb5-subdomain | ms-self | ms-subdomain<br>
            | name | self | selfsub | selfwild | subdomain | tcp-self |<br>
-           wildcard | zonesub ) [<span class="optional"> <em class="replaceable"><code>string</code></em> </span>] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
+           wildcard | zonesub ) [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
        use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
        zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
        zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
index 3b7c25327f70d857cbfd64bf2d90832317e9ac2b..bc07d68c63aefbc6de608114cf7c1fbcb939bde9 100644 (file)
@@ -98,12 +98,12 @@ acl
     <div class="literallayout"><p><br>
 controls {<br>
        inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> |<br>
-           * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] allow<br>
-           { <em class="replaceable"><code>address_match_element</code></em>; ... } [<span class="optional"><br>
-           keys { <em class="replaceable"><code>string</code></em>; ... } </span>];<br>
+           * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] allow<br>
+           { <em class="replaceable"><code>address_match_element</code></em>; ... } [<br>
+           keys { <em class="replaceable"><code>string</code></em>; ... } ];<br>
        unix <em class="replaceable"><code>quoted_string</code></em> perm <em class="replaceable"><code>integer</code></em><br>
-           owner <em class="replaceable"><code>integer</code></em> group <em class="replaceable"><code>integer</code></em> [<span class="optional"><br>
-           keys { <em class="replaceable"><code>string</code></em>; ... } </span>];<br>
+           owner <em class="replaceable"><code>integer</code></em> group <em class="replaceable"><code>integer</code></em> [<br>
+           keys { <em class="replaceable"><code>string</code></em>; ... } ];<br>
 };<br>
 </p></div>
   </div>
@@ -137,15 +137,15 @@ key
 logging {<br>
        category <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
        channel <em class="replaceable"><code>string</code></em> {<br>
-               file <em class="replaceable"><code>quoted_string</code></em> [<span class="optional"> versions ( "unlimited" | <em class="replaceable"><code>integer</code></em> )<br>
-                   </span>] [<span class="optional"> size <em class="replaceable"><code>size</code></em> </span>];<br>
+               file <em class="replaceable"><code>quoted_string</code></em> [ versions ( "unlimited" | <em class="replaceable"><code>integer</code></em> )<br>
+                   ] [ size <em class="replaceable"><code>size</code></em> ];<br>
                null;<br>
                print-category <em class="replaceable"><code>boolean</code></em>;<br>
                print-severity <em class="replaceable"><code>boolean</code></em>;<br>
                print-time <em class="replaceable"><code>boolean</code></em>;<br>
                severity <em class="replaceable"><code>log_severity</code></em>;<br>
                stderr;<br>
-               syslog [<span class="optional"> <em class="replaceable"><code>syslog_facility</code></em> </span>];<br>
+               syslog [ <em class="replaceable"><code>syslog_facility</code></em> ];<br>
        };<br>
 };<br>
 </p></div>
@@ -156,11 +156,11 @@ logging
 
     <div class="literallayout"><p><br>
 lwres {<br>
-       listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
-           | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+       listen-on [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
+           | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
        ndots <em class="replaceable"><code>integer</code></em>;<br>
        search { <em class="replaceable"><code>string</code></em>; ... };<br>
-       view <em class="replaceable"><code>string</code></em> [<span class="optional"> <em class="replaceable"><code>class</code></em> </span>];<br>
+       view <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ];<br>
 };<br>
 </p></div>
   </div>
@@ -178,10 +178,10 @@ managed-keys
 <a name="id-1.14.18.15"></a><h2>MASTERS</h2>
 
     <div class="literallayout"><p><br>
-masters <em class="replaceable"><code>string</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp<br>
-    <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"><br>
-    port <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-    <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ... };<br>
+masters <em class="replaceable"><code>string</code></em> [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
+    <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<br>
+    port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+    <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
 </p></div>
   </div>
 
@@ -205,13 +205,13 @@ options
        allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
-       also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>masters</code></em> |<br>
-           <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ... };<br>
-       alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> |<br>
-           * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
+           <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
+       alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
+           * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        attach-cache <em class="replaceable"><code>string</code></em>;<br>
        auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
        auto-dnssec ( allow | maintain | off );<br>
@@ -235,10 +235,10 @@ options
        clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
        coresize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
        datasize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
-       deny-answer-addresses { <em class="replaceable"><code>address_match_element</code></em>; ... } [<span class="optional"><br>
-           except-from { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
-       deny-answer-aliases { <em class="replaceable"><code>quoted_string</code></em>; ... } [<span class="optional"> except-from {<br>
-           <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
+       deny-answer-addresses { <em class="replaceable"><code>address_match_element</code></em>; ... } [<br>
+           except-from { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       deny-answer-aliases { <em class="replaceable"><code>quoted_string</code></em>; ... } [ except-from {<br>
+           <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
        dialup ( notify | notify-passive | passive | refresh | <em class="replaceable"><code>boolean</code></em> );<br>
        directory <em class="replaceable"><code>quoted_string</code></em>;<br>
        disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>;<br>
@@ -267,10 +267,10 @@ options
        dnssec-update-mode ( maintain | no-resign );<br>
        dnssec-validation ( yes | no | auto );<br>
        dscp <em class="replaceable"><code>integer</code></em>;<br>
-       dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] ); ... };<br>
+       dual-stack-servers [ port <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>quoted_string</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv4_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] ); ... };<br>
        dump-file <em class="replaceable"><code>quoted_string</code></em>;<br>
        edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
        empty-contact <em class="replaceable"><code>string</code></em>;<br>
@@ -278,16 +278,16 @@ options
        empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
        fetch-quota-params <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>fixedpoint</code></em><br>
            <em class="replaceable"><code>fixedpoint</code></em> <em class="replaceable"><code>fixedpoint</code></em>;<br>
-       fetches-per-server <em class="replaceable"><code>integer</code></em> [<span class="optional"> ( drop | fail ) </span>];<br>
-       fetches-per-zone <em class="replaceable"><code>integer</code></em> [<span class="optional"> ( drop | fail ) </span>];<br>
+       fetches-per-server <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
+       fetches-per-zone <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
        files ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
        filter-aaaa { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        filter-aaaa-on-v4 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
        filter-aaaa-on-v6 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
        flush-zones-on-shutdown <em class="replaceable"><code>boolean</code></em>;<br>
        forward ( first | only );<br>
-       forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
-           | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+       forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
+           | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
        geoip-directory ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
        heartbeat-interval <em class="replaceable"><code>integer</code></em>;<br>
        hostname ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
@@ -296,11 +296,11 @@ options
        ixfr-from-differences ( master | slave | <em class="replaceable"><code>boolean</code></em> );<br>
        key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
        lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
-       listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp<br>
-           <em class="replaceable"><code>integer</code></em> </span>] {<br>
+       listen-on [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
+           <em class="replaceable"><code>integer</code></em> ] {<br>
            <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
-       listen-on-v6 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp<br>
-           <em class="replaceable"><code>integer</code></em> </span>] {<br>
+       listen-on-v6 [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
+           <em class="replaceable"><code>integer</code></em> ] {<br>
            <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        managed-keys-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
        masterfile-format ( map | raw | text );<br>
@@ -333,23 +333,22 @@ options
        nosit-udp-size <em class="replaceable"><code>integer</code></em>;, experimental<br>
        notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
        notify-delay <em class="replaceable"><code>integer</code></em>;<br>
-       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
-           [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
+           [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
-       nsec3-test-zone <em class="replaceable"><code>boolean</code></em>; // test only<br>
        pid-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
        port <em class="replaceable"><code>integer</code></em>;<br>
        preferred-glue <em class="replaceable"><code>string</code></em>;<br>
-       prefetch <em class="replaceable"><code>integer</code></em> [<span class="optional"> <em class="replaceable"><code>integer</code></em> </span>];<br>
+       prefetch <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
        provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
-       query-source ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port (<br>
-           <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>]<br>
-           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       query-source-v6 ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port (<br>
-           <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>]<br>
-           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
+           <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) ]<br>
+           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
+           <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) ]<br>
+           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        querylog <em class="replaceable"><code>boolean</code></em>;<br>
        random-device <em class="replaceable"><code>quoted_string</code></em>;<br>
        rate-limit {<br>
@@ -377,15 +376,15 @@ options
        request-sit <em class="replaceable"><code>boolean</code></em>;, experimental<br>
        reserved-sockets <em class="replaceable"><code>integer</code></em>;<br>
        resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
-       response-policy { zone <em class="replaceable"><code>quoted_string</code></em> [<span class="optional"> policy ( cname | disabled<br>
+       response-policy { zone <em class="replaceable"><code>quoted_string</code></em> [ policy ( cname | disabled<br>
            | drop | given | no-op | nodata | nxdomain | passthru |<br>
-           tcp-only <em class="replaceable"><code>quoted_string</code></em> ) </span>] [<span class="optional"> recursive-only <em class="replaceable"><code>boolean</code></em> </span>] [<span class="optional"><br>
-           max-policy-ttl <em class="replaceable"><code>integer</code></em> </span>]; ... } [<span class="optional"> recursive-only <em class="replaceable"><code>boolean</code></em> </span>]<br>
-           [<span class="optional"> break-dnssec <em class="replaceable"><code>boolean</code></em> </span>] [<span class="optional"> max-policy-ttl <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"><br>
-           min-ns-dots <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> qname-wait-recurse <em class="replaceable"><code>boolean</code></em> </span>];<br>
-       root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
-       rrset-order { [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> name<br>
-           <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
+           tcp-only <em class="replaceable"><code>quoted_string</code></em> ) ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ] [<br>
+           max-policy-ttl <em class="replaceable"><code>integer</code></em> ]; ... } [ recursive-only <em class="replaceable"><code>boolean</code></em> ]<br>
+           [ break-dnssec <em class="replaceable"><code>boolean</code></em> ] [ max-policy-ttl <em class="replaceable"><code>integer</code></em> ] [<br>
+           min-ns-dots <em class="replaceable"><code>integer</code></em> ] [ qname-wait-recurse <em class="replaceable"><code>boolean</code></em> ];<br>
+       root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
+           <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
        secroots-file <em class="replaceable"><code>quoted_string</code></em>;<br>
        serial-query-rate <em class="replaceable"><code>integer</code></em>;<br>
        serial-update-method ( increment | unixtime );<br>
@@ -396,7 +395,7 @@ options
        sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
        sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
        sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
-       sig-validity-interval <em class="replaceable"><code>integer</code></em> [<span class="optional"> <em class="replaceable"><code>integer</code></em> </span>];<br>
+       sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
        sit-secret <em class="replaceable"><code>string</code></em>;, experimental<br>
        sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        stacksize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
@@ -408,10 +407,10 @@ options
        tkey-gssapi-credential <em class="replaceable"><code>quoted_string</code></em>;<br>
        tkey-gssapi-keytab <em class="replaceable"><code>quoted_string</code></em>;<br>
        transfer-format ( many-answers | one-answer );<br>
-       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        transfers-in <em class="replaceable"><code>integer</code></em>;<br>
        transfers-out <em class="replaceable"><code>integer</code></em>;<br>
        transfers-per-ns <em class="replaceable"><code>integer</code></em>;<br>
@@ -439,26 +438,26 @@ server
        edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
        keys <em class="replaceable"><code>server_key</code></em>;<br>
        max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
-       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
-           [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
+           [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
-       query-source ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port (<br>
-           <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>]<br>
-           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       query-source-v6 ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port (<br>
-           <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>]<br>
-           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
+           <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) ]<br>
+           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
+           <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) ]<br>
+           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
        request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
        request-sit <em class="replaceable"><code>boolean</code></em>;, experimental<br>
        tcp-only <em class="replaceable"><code>boolean</code></em>;<br>
        transfer-format ( many-answers | one-answer );<br>
-       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        transfers <em class="replaceable"><code>integer</code></em>;<br>
 };<br>
 </p></div>
@@ -470,9 +469,9 @@ server
     <div class="literallayout"><p><br>
 statistics-channels {<br>
        inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> |<br>
-           * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
+           * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
            allow { <em class="replaceable"><code>address_match_element</code></em>; ...<br>
-           } </span>];<br>
+           } ];<br>
 };<br>
 </p></div>
   </div>
@@ -490,7 +489,7 @@ trusted-keys
 <a name="id-1.14.18.20"></a><h2>VIEW</h2>
 
     <div class="literallayout"><p><br>
-view <em class="replaceable"><code>string</code></em> [<span class="optional"> <em class="replaceable"><code>class</code></em> </span>] {<br>
+view <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
        acache-cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
        acache-enable <em class="replaceable"><code>boolean</code></em>;<br>
        additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
@@ -506,13 +505,13 @@ view
        allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
-       also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>masters</code></em> |<br>
-           <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ... };<br>
-       alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> |<br>
-           * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
+           <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
+       alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
+           * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        attach-cache <em class="replaceable"><code>string</code></em>;<br>
        auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
        auto-dnssec ( allow | maintain | off );<br>
@@ -529,10 +528,10 @@ view
        check-wildcard <em class="replaceable"><code>boolean</code></em>;<br>
        cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
        clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
-       deny-answer-addresses { <em class="replaceable"><code>address_match_element</code></em>; ... } [<span class="optional"><br>
-           except-from { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
-       deny-answer-aliases { <em class="replaceable"><code>quoted_string</code></em>; ... } [<span class="optional"> except-from {<br>
-           <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
+       deny-answer-addresses { <em class="replaceable"><code>address_match_element</code></em>; ... } [<br>
+           except-from { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       deny-answer-aliases { <em class="replaceable"><code>quoted_string</code></em>; ... } [ except-from {<br>
+           <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
        dialup ( notify | notify-passive | passive | refresh | <em class="replaceable"><code>boolean</code></em> );<br>
        disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>;<br>
            ... };<br>
@@ -563,24 +562,24 @@ view
        dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
        dnssec-update-mode ( maintain | no-resign );<br>
        dnssec-validation ( yes | no | auto );<br>
-       dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] ); ... };<br>
+       dual-stack-servers [ port <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>quoted_string</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv4_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] ); ... };<br>
        edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
        empty-contact <em class="replaceable"><code>string</code></em>;<br>
        empty-server <em class="replaceable"><code>string</code></em>;<br>
        empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
        fetch-quota-params <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>fixedpoint</code></em><br>
            <em class="replaceable"><code>fixedpoint</code></em> <em class="replaceable"><code>fixedpoint</code></em>;<br>
-       fetches-per-server <em class="replaceable"><code>integer</code></em> [<span class="optional"> ( drop | fail ) </span>];<br>
-       fetches-per-zone <em class="replaceable"><code>integer</code></em> [<span class="optional"> ( drop | fail ) </span>];<br>
+       fetches-per-server <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
+       fetches-per-zone <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
        filter-aaaa { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        filter-aaaa-on-v4 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
        filter-aaaa-on-v6 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
        forward ( first | only );<br>
-       forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
-           | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+       forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
+           | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
        inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
        ixfr-from-differences ( master | slave | <em class="replaceable"><code>boolean</code></em> );<br>
        key <em class="replaceable"><code>string</code></em> {<br>
@@ -621,21 +620,20 @@ view
        nosit-udp-size <em class="replaceable"><code>integer</code></em>;, experimental<br>
        notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
        notify-delay <em class="replaceable"><code>integer</code></em>;<br>
-       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
-           [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
+           [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
-       nsec3-test-zone <em class="replaceable"><code>boolean</code></em>; // test only<br>
        preferred-glue <em class="replaceable"><code>string</code></em>;<br>
-       prefetch <em class="replaceable"><code>integer</code></em> [<span class="optional"> <em class="replaceable"><code>integer</code></em> </span>];<br>
+       prefetch <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
        provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
-       query-source ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port (<br>
-           <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>]<br>
-           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       query-source-v6 ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port (<br>
-           <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>]<br>
-           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
+           <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) ]<br>
+           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
+           <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) ]<br>
+           port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        rate-limit {<br>
                all-per-second <em class="replaceable"><code>integer</code></em>;<br>
                errors-per-second <em class="replaceable"><code>integer</code></em>;<br>
@@ -658,15 +656,15 @@ view
        request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
        request-sit <em class="replaceable"><code>boolean</code></em>;, experimental<br>
        resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
-       response-policy { zone <em class="replaceable"><code>quoted_string</code></em> [<span class="optional"> policy ( cname | disabled<br>
+       response-policy { zone <em class="replaceable"><code>quoted_string</code></em> [ policy ( cname | disabled<br>
            | drop | given | no-op | nodata | nxdomain | passthru |<br>
-           tcp-only <em class="replaceable"><code>quoted_string</code></em> ) </span>] [<span class="optional"> recursive-only <em class="replaceable"><code>boolean</code></em> </span>] [<span class="optional"><br>
-           max-policy-ttl <em class="replaceable"><code>integer</code></em> </span>]; ... } [<span class="optional"> recursive-only <em class="replaceable"><code>boolean</code></em> </span>]<br>
-           [<span class="optional"> break-dnssec <em class="replaceable"><code>boolean</code></em> </span>] [<span class="optional"> max-policy-ttl <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"><br>
-           min-ns-dots <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> qname-wait-recurse <em class="replaceable"><code>boolean</code></em> </span>];<br>
-       root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
-       rrset-order { [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> name<br>
-           <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
+           tcp-only <em class="replaceable"><code>quoted_string</code></em> ) ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ] [<br>
+           max-policy-ttl <em class="replaceable"><code>integer</code></em> ]; ... } [ recursive-only <em class="replaceable"><code>boolean</code></em> ]<br>
+           [ break-dnssec <em class="replaceable"><code>boolean</code></em> ] [ max-policy-ttl <em class="replaceable"><code>integer</code></em> ] [<br>
+           min-ns-dots <em class="replaceable"><code>integer</code></em> ] [ qname-wait-recurse <em class="replaceable"><code>boolean</code></em> ];<br>
+       root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
+           <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
        serial-update-method ( increment | unixtime );<br>
        server <em class="replaceable"><code>netprefix</code></em> {<br>
                bogus <em class="replaceable"><code>boolean</code></em>;<br>
@@ -674,40 +672,40 @@ view
                edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
                keys <em class="replaceable"><code>server_key</code></em>;<br>
                max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
-               notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | *<br>
-                   ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-               notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em><br>
-                   | * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+               notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | *<br>
+                   ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+               notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em><br>
+                   | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
-               query-source ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port<br>
-                   ( <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] (<br>
-                   <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"><br>
-                   dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-               query-source-v6 ( ( [<span class="optional"> address </span>] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"><br>
-                   port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] ) | ( [<span class="optional"> [<span class="optional"> address </span>] (<br>
-                   <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<span class="optional"><br>
-                   dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+               query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port<br>
+                   ( <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] (<br>
+                   <em class="replaceable"><code>ipv4_address</code></em> | * ) ] port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<br>
+                   dscp <em class="replaceable"><code>integer</code></em> ];<br>
+               query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<br>
+                   port ( <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] (<br>
+                   <em class="replaceable"><code>ipv6_address</code></em> | * ) ] port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<br>
+                   dscp <em class="replaceable"><code>integer</code></em> ];<br>
                request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
                request-sit <em class="replaceable"><code>boolean</code></em>;, experimental<br>
                tcp-only <em class="replaceable"><code>boolean</code></em>;<br>
                transfer-format ( many-answers | one-answer );<br>
-               transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> |<br>
-                   * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-               transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port (<br>
-                   <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+               transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
+                   * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+               transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
+                   <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                transfers <em class="replaceable"><code>integer</code></em>;<br>
        };<br>
        sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
        sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
        sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
-       sig-validity-interval <em class="replaceable"><code>integer</code></em> [<span class="optional"> <em class="replaceable"><code>integer</code></em> </span>];<br>
+       sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
        sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        transfer-format ( many-answers | one-answer );<br>
-       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        trust-anchor-telemetry <em class="replaceable"><code>boolean</code></em>; // experimental<br>
        trusted-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em><br>
            <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>;<br>
@@ -717,21 +715,21 @@ view
        use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
        zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
        zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
-       zone <em class="replaceable"><code>string</code></em> [<span class="optional"> <em class="replaceable"><code>class</code></em> </span>] {<br>
+       zone <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
                allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
-               also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { (<br>
-                   <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] |<br>
-                   <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>];<br>
+               also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { (<br>
+                   <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] |<br>
+                   <em class="replaceable"><code>ipv6_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ];<br>
                    ... };<br>
-               alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port (<br>
-                   <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-               alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port (<br>
-                   <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+               alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
+                   <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+               alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
+                   <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                auto-dnssec ( allow | maintain | off );<br>
                check-dup-records ( fail | warn | ignore );<br>
                check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
@@ -753,18 +751,18 @@ view
                dnssec-update-mode ( maintain | no-resign );<br>
                file <em class="replaceable"><code>quoted_string</code></em>;<br>
                forward ( first | only );<br>
-               forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { (<br>
-                   <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"><br>
-                   dscp <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+               forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { (<br>
+                   <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [<br>
+                   dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
                in-view <em class="replaceable"><code>string</code></em>;<br>
                inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
                ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
                journal <em class="replaceable"><code>quoted_string</code></em>;<br>
                key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
                masterfile-format ( map | raw | text );<br>
-               masters [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>masters</code></em><br>
-                   | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"><br>
-                   port <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ... };<br>
+               masters [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em><br>
+                   | <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [<br>
+                   port <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
                max-ixfr-log-size ( default | unlimited |<br>
                max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
                max-records <em class="replaceable"><code>integer</code></em>;<br>
@@ -780,28 +778,27 @@ view
                multi-master <em class="replaceable"><code>boolean</code></em>;<br>
                notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
                notify-delay <em class="replaceable"><code>integer</code></em>;<br>
-               notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | *<br>
-                   ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-               notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em><br>
-                   | * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+               notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | *<br>
+                   ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+               notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em><br>
+                   | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
-               nsec3-test-zone <em class="replaceable"><code>boolean</code></em>; // test only<br>
                pubkey <em class="replaceable"><code>integer</code></em><br>
                    <em class="replaceable"><code>integer</code></em><br>
                    <em class="replaceable"><code>integer</code></em><br>
                request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                serial-update-method ( increment | unixtime );<br>
-               server-addresses { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"><br>
-                   port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+               server-addresses { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<br>
+                   port <em class="replaceable"><code>integer</code></em> ]; ... };<br>
                server-names { <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
                sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
                sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
                sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
-               sig-validity-interval <em class="replaceable"><code>integer</code></em> [<span class="optional"> <em class="replaceable"><code>integer</code></em> </span>];<br>
-               transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> |<br>
-                   * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-               transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port (<br>
-                   <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+               sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
+               transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
+                   * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+               transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
+                   <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
                type ( delegation-only | forward | hint | master | redirect<br>
                    | slave | static-stub | stub );<br>
@@ -810,7 +807,7 @@ view
                    6to4-self | external | krb5-self | krb5-subdomain |<br>
                    ms-self | ms-subdomain | name | self | selfsub |<br>
                    selfwild | subdomain | tcp-self | wildcard | zonesub )<br>
-                   [<span class="optional"> <em class="replaceable"><code>string</code></em> </span>] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
+                   [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
                use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
                zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
                zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
@@ -824,20 +821,20 @@ view
 <a name="id-1.14.18.21"></a><h2>ZONE</h2>
 
     <div class="literallayout"><p><br>
-zone <em class="replaceable"><code>string</code></em> [<span class="optional"> <em class="replaceable"><code>class</code></em> </span>] {<br>
+zone <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
        allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
        allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
-       also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>masters</code></em> |<br>
-           <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ... };<br>
-       alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> |<br>
-           * ) </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
+           <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
+       alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
+           * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        auto-dnssec ( allow | maintain | off );<br>
        check-dup-records ( fail | warn | ignore );<br>
        check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
@@ -858,17 +855,17 @@ zone
        dnssec-update-mode ( maintain | no-resign );<br>
        file <em class="replaceable"><code>quoted_string</code></em>;<br>
        forward ( first | only );<br>
-       forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
-           | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+       forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
+           | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
        in-view <em class="replaceable"><code>string</code></em>;<br>
        inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
        ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
        journal <em class="replaceable"><code>quoted_string</code></em>;<br>
        key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
        masterfile-format ( map | raw | text );<br>
-       masters [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>masters</code></em> |<br>
-           <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] | <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ... };<br>
+       masters [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
+           <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
+           <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
        max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
        max-records <em class="replaceable"><code>integer</code></em>;<br>
        max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
@@ -883,26 +880,25 @@ zone
        multi-master <em class="replaceable"><code>boolean</code></em>;<br>
        notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
        notify-delay <em class="replaceable"><code>integer</code></em>;<br>
-       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
-           [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
+           [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
-       nsec3-test-zone <em class="replaceable"><code>boolean</code></em>; // test only<br>
        pubkey <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em><br>
        request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
        serial-update-method ( increment | unixtime );<br>
-       server-addresses { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port<br>
-           <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
+       server-addresses { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [ port<br>
+           <em class="replaceable"><code>integer</code></em> ]; ... };<br>
        server-names { <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
        sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
        sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
        sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
-       sig-validity-interval <em class="replaceable"><code>integer</code></em> [<span class="optional"> <em class="replaceable"><code>integer</code></em> </span>];<br>
-       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>] [<span class="optional"><br>
-           dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
-       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * )<br>
-           </span>] [<span class="optional"> dscp <em class="replaceable"><code>integer</code></em> </span>];<br>
+       sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
+       transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
+           dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
+           ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
        type ( delegation-only | forward | hint | master | redirect | slave<br>
            | static-stub | stub );<br>
@@ -910,7 +906,7 @@ zone
        update-policy ( local | { ( deny | grant ) <em class="replaceable"><code>string</code></em> ( 6to4-self |<br>
            external | krb5-self | krb5-subdomain | ms-self | ms-subdomain<br>
            | name | self | selfsub | selfwild | subdomain | tcp-self |<br>
-           wildcard | zonesub ) [<span class="optional"> <em class="replaceable"><code>string</code></em> </span>] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
+           wildcard | zonesub ) [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
        use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
        zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
        zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>