statement in the <filename>named.conf</filename> file:
</para>
-<programlisting><command>options</command> {
- <optional> attach-cache <replaceable>cache_name</replaceable>; </optional>
- <optional> version <replaceable>version_string</replaceable>; </optional>
- <optional> hostname <replaceable>hostname_string</replaceable>; </optional>
- <optional> server-id <replaceable>server_id_string</replaceable>; </optional>
- <optional> directory <replaceable>path_name</replaceable>; </optional>
- <optional> dnstap { <replaceable>message_type</replaceable>; ... }; </optional>
- <optional> dnstap-output ( <literal>file</literal> | <literal>unix</literal> ) <replaceable>path_name</replaceable>; </optional>
- <optional> dnstap-identity ( <replaceable>string</replaceable> | <literal>hostname</literal> | <literal>none</literal> ); </optional>
- <optional> dnstap-version ( <replaceable>string</replaceable> | <literal>none</literal> ); </optional>
- <optional> fstrm-set-buffer-hint <replaceable>number</replaceable> ; </optional>
- <optional> fstrm-set-flush-timeout <replaceable>number</replaceable> ; </optional>
- <optional> fstrm-set-input-queue-size <replaceable>number</replaceable> ; </optional>
- <optional> fstrm-set-output-notify-threshold <replaceable>number</replaceable> ; </optional>
- <optional> fstrm-set-output-queue-model ( <replaceable>mpsc</replaceable> |
- <replaceable>spsc</replaceable> ) ; </optional>
- <optional> fstrm-set-output-queue-size <replaceable>number</replaceable> ; </optional>
- <optional> fstrm-set-reopen-interval <replaceable>number</replaceable> ; </optional>
- <optional> geoip-directory <replaceable>path_name</replaceable>; </optional>
- <optional> key-directory <replaceable>path_name</replaceable>; </optional>
- <optional> managed-keys-directory <replaceable>path_name</replaceable>; </optional>
- <optional> named-xfer <replaceable>path_name</replaceable>; </optional>
- <optional> tkey-gssapi-keytab <replaceable>path_name</replaceable>; </optional>
- <optional> tkey-gssapi-credential <replaceable>principal</replaceable>; </optional>
- <optional> tkey-domain <replaceable>domainname</replaceable>; </optional>
- <optional> tkey-dhkey <replaceable>key_name</replaceable> <replaceable>key_tag</replaceable>; </optional>
- <optional> cache-file <replaceable>path_name</replaceable>; </optional>
- <optional> dump-file <replaceable>path_name</replaceable>; </optional>
- <optional> bindkeys-file <replaceable>path_name</replaceable>; </optional>
- <optional> lock-file <replaceable>path_name</replaceable>; </optional>
- <optional> secroots-file <replaceable>path_name</replaceable>; </optional>
- <optional> session-keyfile <replaceable>path_name</replaceable>; </optional>
- <optional> session-keyname <replaceable>key_name</replaceable>; </optional>
- <optional> session-keyalg <replaceable>algorithm_id</replaceable>; </optional>
- <optional> memstatistics <replaceable>yes_or_no</replaceable>; </optional>
- <optional> memstatistics-file <replaceable>path_name</replaceable>; </optional>
- <optional> pid-file <replaceable>path_name</replaceable>; </optional>
- <optional> recursing-file <replaceable>path_name</replaceable>; </optional>
- <optional> statistics-file <replaceable>path_name</replaceable>; </optional>
- <optional> zone-statistics <replaceable>full</replaceable> | <replaceable>terse</replaceable> | <replaceable>none</replaceable>; </optional>
- <optional> auth-nxdomain <replaceable>yes_or_no</replaceable>; </optional>
- <optional> nxdomain-redirect <replaceable>string</replaceable>; </optional>
- <optional> deallocate-on-exit <replaceable>yes_or_no</replaceable>; </optional>
- <optional> dialup <replaceable>dialup_option</replaceable>; </optional>
- <optional> fake-iquery <replaceable>yes_or_no</replaceable>; </optional>
- <optional> fetch-glue <replaceable>yes_or_no</replaceable>; </optional>
- <optional> flush-zones-on-shutdown <replaceable>yes_or_no</replaceable>; </optional>
- <optional> has-old-clients <replaceable>yes_or_no</replaceable>; </optional>
- <optional> host-statistics <replaceable>yes_or_no</replaceable>; </optional>
- <optional> host-statistics-max <replaceable>number</replaceable>; </optional>
- <optional> minimal-any <replaceable>yes_or_no</replaceable>; </optional>
- <optional> minimal-responses (<replaceable>yes_or_no</replaceable> | <constant>no-auth</constant> | <constant>no-auth-recursive</constant>); </optional>
- <optional> multiple-cnames <replaceable>yes_or_no</replaceable>; </optional>
- <optional> notify <replaceable>yes_or_no</replaceable> | <replaceable>explicit</replaceable> | <replaceable>master-only</replaceable>; </optional>
- <optional> recursion <replaceable>yes_or_no</replaceable>; </optional>
- <optional> send-cookie <replaceable>yes_or_no</replaceable>; </optional>
- <optional> require-server-cookie <replaceable>yes_or_no</replaceable>; </optional>
- <optional> cookie-algorithm <replaceable>algorithm_id</replaceable>; </optional>
- <optional> cookie-secret <replaceable>secret_string</replaceable>; </optional>
- <optional> nocookie-udp-size <replaceable>number</replaceable> ; </optional>
- <optional> request-nsid <replaceable>yes_or_no</replaceable>; </optional>
- <optional> rfc2308-type1 <replaceable>yes_or_no</replaceable>; </optional>
- <optional> use-id-pool <replaceable>yes_or_no</replaceable>; </optional>
- <optional> maintain-ixfr-base <replaceable>yes_or_no</replaceable>; </optional>
- <optional> ixfr-from-differences (<replaceable>yes_or_no</replaceable> | <constant>master</constant> | <constant>slave</constant>); </optional>
- <optional> auto-dnssec <constant>allow</constant>|<constant>maintain</constant>|<constant>off</constant>; </optional>
- <optional> dnssec-enable <replaceable>yes_or_no</replaceable>; </optional>
- <optional> dnssec-validation (<replaceable>yes_or_no</replaceable> | <constant>auto</constant>); </optional>
- <optional> dnssec-lookaside ( <replaceable>auto</replaceable> |
- <replaceable>no</replaceable> |
- <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> ); </optional>
- <optional> dnssec-must-be-secure <replaceable>domain yes_or_no</replaceable>; </optional>
- <optional> dnssec-accept-expired <replaceable>yes_or_no</replaceable>; </optional>
- <optional> forward ( <replaceable>only</replaceable> | <replaceable>first</replaceable> ); </optional>
- <optional> forwarders { <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional> ; ... </optional> }; </optional>
- <optional> dual-stack-servers <optional>port <replaceable>ip_port</replaceable></optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional> {
- ( <replaceable>domain_name</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional> |
- <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional>) ;
- ... }; </optional>
- <optional> check-names ( <replaceable>master</replaceable> | <replaceable>slave</replaceable> | <replaceable>response</replaceable> )
- ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
- <optional> check-dup-records ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
- <optional> check-mx ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
- <optional> check-wildcard <replaceable>yes_or_no</replaceable>; </optional>
- <optional> check-integrity <replaceable>yes_or_no</replaceable>; </optional>
- <optional> check-mx-cname ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
- <optional> check-srv-cname ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
- <optional> check-sibling <replaceable>yes_or_no</replaceable>; </optional>
- <optional> check-spf ( <replaceable>warn</replaceable> | <replaceable>ignore</replaceable> ); </optional>
- <optional> allow-new-zones { <replaceable>yes_or_no</replaceable> }; </optional>
- <optional> allow-notify { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> allow-query { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> allow-query-on { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> allow-query-cache { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> allow-query-cache-on { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> allow-transfer { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> allow-recursion { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> allow-recursion-on { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> allow-update { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> allow-update-forwarding { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> automatic-interface-scan { <replaceable>yes_or_no</replaceable> }; </optional>
- <optional> geoip-use-ecs <replaceable>yes_or_no</replaceable>;</optional>
- <optional> update-check-ksk <replaceable>yes_or_no</replaceable>; </optional>
- <optional> dnssec-update-mode ( <replaceable>maintain</replaceable> | <replaceable>no-resign</replaceable> ); </optional>
- <optional> dnssec-dnskey-kskonly <replaceable>yes_or_no</replaceable>; </optional>
- <optional> dnssec-loadkeys-interval <replaceable>number</replaceable>; </optional>
- <optional> dnssec-secure-to-insecure <replaceable>yes_or_no</replaceable> ;</optional>
- <optional> try-tcp-refresh <replaceable>yes_or_no</replaceable>; </optional>
- <optional> allow-v6-synthesis { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> blackhole { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> keep-response-order { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> no-case-compress { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> message-compression <replaceable>yes_or_no</replaceable> ; </optional>
- <optional> use-v4-udp-ports { <replaceable>port_list</replaceable> }; </optional>
- <optional> avoid-v4-udp-ports { <replaceable>port_list</replaceable> }; </optional>
- <optional> use-v6-udp-ports { <replaceable>port_list</replaceable> }; </optional>
- <optional> avoid-v6-udp-ports { <replaceable>port_list</replaceable> }; </optional>
- <optional> listen-on <optional> port <replaceable>ip_port</replaceable> </optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional> { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> listen-on-v6 <optional> port <replaceable>ip_port</replaceable></optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional>
-{ <replaceable>address_match_list</replaceable> }; </optional>
- <optional> query-source ( ( <replaceable>ip4_addr</replaceable> | <replaceable>*</replaceable> )
- <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional>
- <optional> dscp <replaceable>ip_dscp</replaceable></optional> |
- <optional> address ( <replaceable>ip4_addr</replaceable> | <replaceable>*</replaceable> ) </optional>
- <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> )
- <optional> dscp <replaceable>ip_dscp</replaceable></optional> ; </optional>
- <optional> query-source-v6 ( ( <replaceable>ip6_addr</replaceable> | <replaceable>*</replaceable> )
- <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional>
- <optional> dscp <replaceable>ip_dscp</replaceable></optional> |
- <optional> address ( <replaceable>ip6_addr</replaceable> | <replaceable>*</replaceable> ) </optional>
- <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> )
- <optional> dscp <replaceable>ip_dscp</replaceable></optional> ; </optional>
- <optional> use-queryport-pool <replaceable>yes_or_no</replaceable>; </optional>
- <optional> queryport-pool-ports <replaceable>number</replaceable>; </optional>
- <optional> queryport-pool-updateinterval <replaceable>number</replaceable>; </optional>
- <optional> max-transfer-time-in <replaceable>number</replaceable>; </optional>
- <optional> max-transfer-time-out <replaceable>number</replaceable>; </optional>
- <optional> max-transfer-idle-in <replaceable>number</replaceable>; </optional>
- <optional> max-transfer-idle-out <replaceable>number</replaceable>; </optional>
- <optional> reserved-sockets <replaceable>number</replaceable>; </optional>
- <optional> recursive-clients <replaceable>number</replaceable>; </optional>
- <optional> tcp-clients <replaceable>number</replaceable>; </optional>
- <optional> clients-per-query <replaceable>number</replaceable> ; </optional>
- <optional> max-clients-per-query <replaceable>number</replaceable> ; </optional>
- <optional> fetches-per-server <replaceable>number</replaceable> <optional><replaceable>(drop | fail)</replaceable></optional>; </optional>
- <optional> fetch-quota-params <replaceable>number fixedpoint fixedpoint fixedpoint</replaceable> ; </optional>
- <optional> fetches-per-zone <replaceable>number</replaceable> <optional><replaceable>(drop | fail)</replaceable></optional>; </optional>
- <optional> notify-rate <replaceable>number</replaceable>; </optional>
- <optional> startup-notify-rate <replaceable>number</replaceable>; </optional>
- <optional> serial-query-rate <replaceable>number</replaceable>; </optional>
- <optional> serial-queries <replaceable>number</replaceable>; </optional>
- <optional> tcp-listen-queue <replaceable>number</replaceable>; </optional>
- <optional> transfer-format <replaceable>( one-answer | many-answers )</replaceable>; </optional>
- <optional> transfer-message-size <replaceable>number</replaceable>; </optional>
- <optional> transfers-in <replaceable>number</replaceable>; </optional>
- <optional> transfers-out <replaceable>number</replaceable>; </optional>
- <optional> transfers-per-ns <replaceable>number</replaceable>; </optional>
- <optional> transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional> ; </optional>
- <optional> transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional> ; </optional>
- <optional> alt-transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional> ; </optional>
- <optional> alt-transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional> ; </optional>
- <optional> use-alt-transfer-source <replaceable>yes_or_no</replaceable>; </optional>
- <optional> notify-delay <replaceable>seconds</replaceable> ; </optional>
- <optional> notify-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional> ; </optional>
- <optional> notify-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional> ; </optional>
- <optional> notify-to-soa <replaceable>yes_or_no</replaceable> ; </optional>
- <optional> also-notify <optional>port <replaceable>ip_port</replaceable></optional> <optional>dscp <replaceable>ip_dscp</replaceable></optional> { ( <replaceable>masters</replaceable> | <replaceable>ip_addr</replaceable>
- <optional>port <replaceable>ip_port</replaceable></optional> ) <optional>key <replaceable>keyname</replaceable></optional> ; ... }; </optional>
- <optional> max-ixfr-log-size <replaceable>number</replaceable>; </optional>
- <optional> max-journal-size <replaceable>size_spec</replaceable>; </optional>
- <optional> coresize <replaceable>size_spec</replaceable> ; </optional>
- <optional> datasize <replaceable>size_spec</replaceable> ; </optional>
- <optional> files <replaceable>size_spec</replaceable> ; </optional>
- <optional> stacksize <replaceable>size_spec</replaceable> ; </optional>
- <optional> cleaning-interval <replaceable>number</replaceable>; </optional>
- <optional> heartbeat-interval <replaceable>number</replaceable>; </optional>
- <optional> interface-interval <replaceable>number</replaceable>; </optional>
- <optional> statistics-interval <replaceable>number</replaceable>; </optional>
- <optional> topology { <replaceable>address_match_list</replaceable> }</optional>;
- <optional> sortlist { <replaceable>address_match_list</replaceable> }</optional>;
- <optional> rrset-order { <replaceable>order_spec</replaceable> ; <optional> <replaceable>order_spec</replaceable> ; ... </optional> </optional> };
- <optional> lame-ttl <replaceable>number</replaceable>; </optional>
- <optional> max-ncache-ttl <replaceable>number</replaceable>; </optional>
- <optional> max-cache-ttl <replaceable>number</replaceable>; </optional>
- <optional> max-zone-ttl ( <constant>unlimited</constant> | <replaceable>number</replaceable> ; </optional>
- <optional> serial-update-method <constant>increment</constant>|<constant>unixtime</constant>|<constant>date</constant>; </optional>
- <optional> servfail-ttl <replaceable>number</replaceable>; </optional>
- <optional> sig-validity-interval <replaceable>number</replaceable> <optional><replaceable>number</replaceable></optional> ; </optional>
- <optional> sig-signing-nodes <replaceable>number</replaceable> ; </optional>
- <optional> sig-signing-signatures <replaceable>number</replaceable> ; </optional>
- <optional> sig-signing-type <replaceable>number</replaceable> ; </optional>
- <optional> min-roots <replaceable>number</replaceable>; </optional>
- <optional> use-ixfr <replaceable>yes_or_no</replaceable> ; </optional>
- <optional> provide-ixfr <replaceable>yes_or_no</replaceable>; </optional>
- <optional> request-ixfr <replaceable>yes_or_no</replaceable>; </optional>
- <optional> request-expire <replaceable>yes_or_no</replaceable>; </optional>
- <optional> treat-cr-as-space <replaceable>yes_or_no</replaceable> ; </optional>
- <optional> min-refresh-time <replaceable>number</replaceable> ; </optional>
- <optional> max-refresh-time <replaceable>number</replaceable> ; </optional>
- <optional> min-retry-time <replaceable>number</replaceable> ; </optional>
- <optional> max-retry-time <replaceable>number</replaceable> ; </optional>
- <optional> nta-lifetime <replaceable>duration</replaceable> ; </optional>
- <optional> nta-recheck <replaceable>duration</replaceable> ; </optional>
- <optional> port <replaceable>ip_port</replaceable>; </optional>
- <optional> dscp <replaceable>ip_dscp</replaceable></optional> ;
- <optional> additional-from-auth <replaceable>yes_or_no</replaceable> ; </optional>
- <optional> additional-from-cache <replaceable>yes_or_no</replaceable> ; </optional>
- <optional> random-device <replaceable>path_name</replaceable> ; </optional>
- <optional> max-cache-size <replaceable>size_or_percent</replaceable> ; </optional>
- <optional> match-mapped-addresses <replaceable>yes_or_no</replaceable>; </optional>
- <optional> filter-aaaa-on-v4 ( <replaceable>yes_or_no</replaceable> | <replaceable>break-dnssec</replaceable> ); </optional>
- <optional> filter-aaaa-on-v6 ( <replaceable>yes_or_no</replaceable> | <replaceable>break-dnssec</replaceable> ); </optional>
- <optional> filter-aaaa { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> dns64 <replaceable>ipv6-prefix</replaceable> {
- <optional> clients { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> mapped { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> exclude { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> suffix <replaceable>IPv6-address</replaceable>; </optional>
- <optional> recursive-only <replaceable>yes_or_no</replaceable>; </optional>
- <optional> break-dnssec <replaceable>yes_or_no</replaceable>; </optional>
- }; </optional>;
- <optional> dns64-server <replaceable>name</replaceable> </optional>
- <optional> dns64-contact <replaceable>name</replaceable> </optional>
- <optional> preferred-glue ( <replaceable>A</replaceable> | <replaceable>AAAA</replaceable> | <replaceable>NONE</replaceable> ); </optional>
- <optional> edns-udp-size <replaceable>number</replaceable>; </optional>
- <optional> max-udp-size <replaceable>number</replaceable>; </optional>
- <optional> max-rsa-exponent-size <replaceable>number</replaceable>; </optional>
- <optional> root-delegation-only <optional> exclude { <replaceable>namelist</replaceable> } </optional> ; </optional>
- <optional> querylog <replaceable>yes_or_no</replaceable> ; </optional>
- <optional> disable-algorithms <replaceable>domain</replaceable> { <replaceable>algorithm</replaceable>;
- <optional> <replaceable>algorithm</replaceable>; </optional> }; </optional>
- <optional> disable-ds-digests <replaceable>domain</replaceable> { <replaceable>digest_type</replaceable>;
- <optional> <replaceable>digest_type</replaceable>; </optional> }; </optional>
- <optional> acache-enable <replaceable>yes_or_no</replaceable> ; </optional>
- <optional> acache-cleaning-interval <replaceable>number</replaceable>; </optional>
- <optional> max-acache-size <replaceable>size_spec</replaceable> ; </optional>
- <optional> max-recursion-depth <replaceable>number</replaceable> ; </optional>
- <optional> max-recursion-queries <replaceable>number</replaceable> ; </optional>
- <optional> masterfile-format
- (<constant>text</constant>|<constant>raw</constant>|<constant>map</constant>) ; </optional>
- <optional> masterfile-style
- (<constant>relative</constant>|<constant>full</constant>) ; </optional>
- <optional> empty-server <replaceable>name</replaceable> ; </optional>
- <optional> empty-contact <replaceable>name</replaceable> ; </optional>
- <optional> empty-zones-enable <replaceable>yes_or_no</replaceable> ; </optional>
- <optional> disable-empty-zone <replaceable>zone_name</replaceable> ; </optional>
- <optional> zero-no-soa-ttl <replaceable>yes_or_no</replaceable> ; </optional>
- <optional> zero-no-soa-ttl-cache <replaceable>yes_or_no</replaceable> ; </optional>
- <optional> resolver-query-timeout <replaceable>number</replaceable> ; </optional>
- <optional> deny-answer-addresses { <replaceable>address_match_list</replaceable> } <optional> except-from { <replaceable>namelist</replaceable> } </optional>;</optional>
- <optional> deny-answer-aliases { <replaceable>namelist</replaceable> } <optional> except-from { <replaceable>namelist</replaceable> } </optional>;</optional>
- <optional> prefetch <replaceable>number</replaceable> <optional><replaceable>number</replaceable></optional> ; </optional>
-
- <optional> rate-limit {
- <optional> responses-per-second <replaceable>number</replaceable> ; </optional>
- <optional> referrals-per-second <replaceable>number</replaceable> ; </optional>
- <optional> nodata-per-second <replaceable>number</replaceable> ; </optional>
- <optional> nxdomains-per-second <replaceable>number</replaceable> ; </optional>
- <optional> errors-per-second <replaceable>number</replaceable> ; </optional>
- <optional> all-per-second <replaceable>number</replaceable> ; </optional>
- <optional> window <replaceable>number</replaceable> ; </optional>
- <optional> log-only <replaceable>yes_or_no</replaceable> ; </optional>
- <optional> qps-scale <replaceable>number</replaceable> ; </optional>
- <optional> ipv4-prefix-length <replaceable>number</replaceable> ; </optional>
- <optional> ipv6-prefix-length <replaceable>number</replaceable> ; </optional>
- <optional> slip <replaceable>number</replaceable> ; </optional>
- <optional> exempt-clients { <replaceable>address_match_list</replaceable> } ; </optional>
- <optional> max-table-size <replaceable>number</replaceable> ; </optional>
- <optional> min-table-size <replaceable>number</replaceable> ; </optional>
- } ; </optional>
- <optional> response-policy {
- zone <replaceable>zone_name</replaceable>
- <optional> policy <replaceable>(given | disabled | passthru | drop |
- tcp-only | nxdomain | nodata | cname domain</replaceable>) </optional>
- <optional> recursive-only <replaceable>yes_or_no</replaceable> </optional>
- <optional> log <replaceable>yes_or_no</replaceable> </optional>
- <optional> max-policy-ttl <replaceable>number</replaceable> </optional>
- <optional> min-update-interval <replaceable>number</replaceable> </optional>
- ; <optional>...</optional>
- } <optional> recursive-only <replaceable>yes_or_no</replaceable> </optional>
- <optional> max-policy-ttl <replaceable>number</replaceable> </optional>
- <optional> min-update-interval <replaceable>number</replaceable> </optional>
- <optional> break-dnssec <replaceable>yes_or_no</replaceable> </optional>
- <optional> min-ns-dots <replaceable>number</replaceable> </optional>
- <optional> nsip-wait-recurse <replaceable>yes_or_no</replaceable> </optional>
- <optional> qname-wait-recurse <replaceable>yes_or_no</replaceable> </optional>
- <optional> automatic-interface-scan <replaceable>yes_or_no</replaceable> </optional>
- ; </optional>
- <optional> catalog-zones {
- zone <replaceable>quoted_string</replaceable>
- <optional> default-masters
- <optional>port <replaceable>ip_port</replaceable></optional>
- <optional>dscp <replaceable>ip_dscp</replaceable></optional>
- { ( <replaceable>masters_list</replaceable> | <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> <optional>key <replaceable>key</replaceable></optional> ) ; <optional>...</optional> }</optional>
- <optional>in-memory <replaceable>yes_or_no</replaceable></optional>
- <optional>min-update-interval <replaceable>interval</replaceable></optional>
- ; <optional>...</optional> };
- ; </optional>
- <optional>v6-bias <replaceable>number</replaceable> ; </optional>
-};
+<programlisting><command>options {</command>
+ [ <command>attach-cache</command> <replaceable>cache_name</replaceable> ; ]
+ [ <command>version</command> <replaceable>version_string</replaceable> ; ]
+ [ <command>hostname</command> <replaceable>hostname_string</replaceable> ; ]
+ [ <command>server-id</command> <replaceable>server_id_string</replaceable> ; ]
+ [ <command>directory</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>dnstap {</command> <replaceable>message_type</replaceable> ; ... <command>}</command> ; ]
+ [ <command>dnstap-output</command> ( <option>file</option> | <option>unix</option> ) <replaceable>path_name</replaceable> [ <command>size</command> <replaceable>size_spec</replaceable> ] [ <command>versions</command> ( <replaceable>number</replaceable> | <option>unlimited</option> ) ] ; ]
+ [ <command>dnstap-identity</command> ( <replaceable>string</replaceable> | <option>hostname</option> | <option>none</option> ) ; ]
+ [ <command>dnstap-version</command> ( <replaceable>string</replaceable> | <option>none</option> ) ; ]
+ [ <command>fstrm-set-buffer-hint</command> <replaceable>number</replaceable> ; ]
+ [ <command>fstrm-set-flush-timeout</command> <replaceable>number</replaceable> ; ]
+ [ <command>fstrm-set-input-queue-size</command> <replaceable>number</replaceable> ; ]
+ [ <command>fstrm-set-output-notify-threshold</command> <replaceable>number</replaceable> ; ]
+ [ <command>fstrm-set-output-queue-model</command> ( <option>mpsc</option> | <option>spsc</option> ) ; ]
+ [ <command>fstrm-set-output-queue-size</command> <replaceable>number</replaceable> ; ]
+ [ <command>fstrm-set-reopen-interval</command> <replaceable>number</replaceable> ; ]
+ [ <command>geoip-directory</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>key-directory</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>managed-keys-directory</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>named-xfer</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>tkey-gssapi-keytab</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>tkey-gssapi-credential</command> <replaceable>principal</replaceable> ; ]
+ [ <command>tkey-domain</command> <replaceable>domain_name</replaceable> ; ]
+ [ <command>tkey-dhkey</command> <replaceable>key_name</replaceable> <replaceable>key_tag</replaceable> ; ]
+ [ <command>cache-file</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>dump-file</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>bindkeys-file</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>lock-file</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>secroots-file</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>session-keyfile</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>session-keyname</command> <replaceable>key_name</replaceable> ; ]
+ [ <command>session-keyalg</command> <replaceable>algorithm_id</replaceable> ; ]
+ [ <command>memstatistics</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>memstatistics-file</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>pid-file</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>recursing-file</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>statistics-file</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>zone-statistics</command> ( <option>full</option> | <option>terse</option> | <option>none</option> ) ; ]
+ [ <command>auth-nxdomain</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>nxdomain-redirect</command> <replaceable>string</replaceable> ; ]
+ [ <command>deallocate-on-exit</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>dialup</command> <replaceable>dialup_option</replaceable> ; ]
+ [ <command>fake-iquery</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>fetch-glue</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>flush-zones-on-shutdown</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>has-old-clients</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>host-statistics</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>host-statistics-max</command> <replaceable>number</replaceable> ; ]
+ [ <command>minimal-any</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>minimal-responses</command> ( <replaceable>yes_or_no</replaceable> | <option>no-auth</option> | <option>no-auth-recursive</option> ) ; ]
+ [ <command>multiple-cnames</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>notify</command> ( <replaceable>yes_or_no</replaceable> | <option>explicit</option> | <option>master-only</option> ) ; ]
+ [ <command>recursion</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>send-cookie</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>require-server-cookie</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>cookie-algorithm</command> <replaceable>algorithm_id</replaceable> ; ]
+ [ <command>cookie-secret</command> <replaceable>secret_string</replaceable> ; ]
+ [ <command>nocookie-udp-size</command> <replaceable>number</replaceable> ; ]
+ [ <command>request-nsid</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>rfc2308-type1</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>use-id-pool</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>maintain-ixfr-base</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>ixfr-from-differences</command> ( <replaceable>yes_or_no</replaceable> | <option>master</option> | <option>slave</option> ) ; ]
+ [ <command>auto-dnssec</command> ( <option>allow</option> | <option>maintain</option> | <option>off</option> ) ; ]
+ [ <command>dnssec-enable</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>dnssec-validation</command> ( <replaceable>yes_or_no</replaceable> | <option>auto</option> ) ; ]
+ [ <command>dnssec-lookaside</command> ( <option>auto</option> | <option>no</option> | <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> ) ; ]
+ [ <command>dnssec-must-be-secure</command> <replaceable>domain yes_or_no</replaceable> ; ]
+ [ <command>dnssec-accept-expired</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>forward</command> ( <option>only</option> | <option>first</option> ) ; ]
+ [ <command>forwarders {</command>
+ ( <replaceable>ip_addr</replaceable> [ <command>port</command> <replaceable>ip_port</replaceable> ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] ; )
+ ...
+ <command>}</command> ; ]
+ [ <command>dual-stack-servers</command> [ <command>port</command> <replaceable>ip_port</replaceable> ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] <command>{</command>
+ ( ( <replaceable>domain_name</replaceable> | <replaceable>ip_addr</replaceable> ) [ <command>port</command> <replaceable>ip_port</replaceable> ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] ; )
+ ...
+ <command>}</command> ; ]
+ [ <command>check-names</command> ( <option>master</option> | <option>slave</option> | <option>response</option> )
+ ( <option>warn</option> | <option>fail</option> | <option>ignore</option> ) ; ]
+ [ <command>check-dup-records</command> ( <option>warn</option> | <option>fail</option> | <option>ignore</option> ) ; ]
+ [ <command>check-mx</command> ( <option>warn</option> | <option>fail</option> | <option>ignore</option> ) ; ]
+ [ <command>check-wildcard</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>check-integrity</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>check-mx-cname</command> ( <option>warn</option> | <option>fail</option> | <option>ignore</option> ) ; ]
+ [ <command>check-srv-cname</command> ( <option>warn</option> | <option>fail</option> | <option>ignore</option> ) ; ]
+ [ <command>check-sibling</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>check-spf</command> ( <option>warn</option> | <option>ignore</option> ) ; ]
+ [ <command>allow-new-zones</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>allow-notify {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>allow-query {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>allow-query-on {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>allow-query-cache {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>allow-query-cache-on {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>allow-transfer {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>allow-recursion {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>allow-recursion-on {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>allow-update {</command> <replaceable>address_match_list</replaceable> <command>}</command> ]
+ [ <command>allow-update-forwarding {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>automatic-interface-scan</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>geoip-use-ecs</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>update-check-ksk</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>dnssec-update-mode</command> ( <option>maintain</option> | <option>no-resign</option> ) ; ]
+ [ <command>dnssec-dnskey-kskonly</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>dnssec-loadkeys-interval</command> <replaceable>number</replaceable> ; ]
+ [ <command>dnssec-secure-to-insecure</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>try-tcp-refresh</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>allow-v6-synthesis {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>blackhole {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>keep-response-order {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>no-case-compress {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>message-compression</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>use-v4-udp-ports {</command> <replaceable>port_list</replaceable> <command>}</command> ; ]
+ [ <command>avoid-v4-udp-ports {</command> <replaceable>port_list</replaceable> <command>}</command> ; ]
+ [ <command>use-v6-udp-ports {</command> <replaceable>port_list</replaceable> <command>}</command> ; ]
+ [ <command>avoid-v6-udp-ports {</command> <replaceable>port_list</replaceable> <command>}</command> ; ]
+ [ <command>listen-on</command> [ <command>port</command> <replaceable>ip_port</replaceable> ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] <command>{</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>listen-on-v6</command> [ <command>port</command> <replaceable>ip_port</replaceable> ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] <command>{</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>query-source</command> ( [ <command>address</command> ] ( <replaceable>ip4_addr</replaceable> | <option>*</option> ) )
+ [ <command>port</command> ( <replaceable>ip_port</replaceable> | <option>*</option> ) ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] ] ;
+ [ <command>query-source-v6</command> ( [ <command>address</command> ] ( <replaceable>ip6_addr</replaceable> | <option>*</option> ) )
+ [ <command>port</command> ( <replaceable>ip_port</replaceable> | <option>*</option> ) ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] ] ;
+ [ <command>use-queryport-pool</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>queryport-pool-ports</command> <replaceable>number</replaceable> ; ]
+ [ <command>queryport-pool-updateinterval</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-records</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-transfer-time-in</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-transfer-time-out</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-transfer-idle-in</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-transfer-idle-out</command> <replaceable>number</replaceable> ; ]
+ [ <command>reserved-sockets</command> <replaceable>number</replaceable> ; ]
+ [ <command>recursive-clients</command> <replaceable>number</replaceable> ; ]
+ [ <command>tcp-clients</command> <replaceable>number</replaceable> ; ]
+ [ <command>clients-per-query</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-clients-per-query</command> <replaceable>number</replaceable> ; ]
+ [ <command>fetches-per-server</command> <replaceable>number</replaceable> [ ( <option>drop</option> | <option>fail</option> ) ] ; ]
+ [ <command>fetches-per-zone</command> <replaceable>number</replaceable> [ ( <option>drop</option> | <option>fail</option> ) ] ; ]
+ [ <command>fetch-quota-params</command> <replaceable>number fixedpoint fixedpoint fixedpoint</replaceable> ; ]
+ [ <command>notify-rate</command> <replaceable>number</replaceable> ; ]
+ [ <command>startup-notify-rate</command> <replaceable>number</replaceable> ; ]
+ [ <command>serial-query-rate</command> <replaceable>number</replaceable> ; ]
+ [ <command>serial-queries</command> <replaceable>number</replaceable> ; ]
+ [ <command>tcp-listen-queue</command> <replaceable>number</replaceable> ; ]
+ [ <command>tcp-initial-timeout</command> <replaceable>number</replaceable>; ]
+ [ <command>tcp-idle-timeout</command> <replaceable>number</replaceable>; ]
+ [ <command>tcp-keepalive-timeout</command> <replaceable>number</replaceable>; ]
+ [ <command>tcp-advertised-timeout</command> <replaceable>number</replaceable>; ]
+ [ <command>transfer-format</command> ( <option>one-answer</option> | <option>many-answers</option> ) ; ]
+ [ <command>transfer-message-size</command> <replaceable>number</replaceable> ; ]
+ [ <command>transfers-in</command> <replaceable>number</replaceable> ; ]
+ [ <command>transfers-out</command> <replaceable>number</replaceable> ; ]
+ [ <command>transfers-per-ns</command> <replaceable>number</replaceable> ; ]
+ [ <command>transfer-source</command> ( <replaceable>ip4_addr</replaceable> | <option>*</option> )
+ [ <command>port</command> <replaceable>ip_port</replaceable> ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] ; ]
+ [ <command>transfer-source-v6</command> ( <replaceable>ip6_addr</replaceable> | <option>*</option> )
+ [ <command>port</command> <replaceable>ip_port</replaceable> ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] ; ]
+ [ <command>alt-transfer-source</command> ( <replaceable>ip4_addr</replaceable> | <option>*</option> )
+ [ <command>port</command> <replaceable>ip_port</replaceable> ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] ; ]
+ [ <command>alt-transfer-source-v6</command> ( <replaceable>ip6_addr</replaceable> | <option>*</option> )
+ [ <command>port</command> <replaceable>ip_port</replaceable> ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] ; ]
+ [ <command>use-alt-transfer-source</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>notify-delay</command> <replaceable>seconds</replaceable> ; ]
+ [ <command>notify-source</command> ( <replaceable>ip4_addr</replaceable> | <option>*</option> )
+ [ <command>port</command> <replaceable>ip_port</replaceable> ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] ; ]
+ [ <command>notify-source-v6</command> ( <replaceable>ip6_addr</replaceable> | <option>*</option> )
+ [ <command>port</command> <replaceable>ip_port</replaceable> ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] ; ]
+ [ <command>notify-to-soa</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>also-notify</command> [ <command>port</command> <replaceable>ip_port</replaceable>] [ <command>dscp</command> <replaceable>ip_dscp</replaceable>] <command>{</command>
+ ( <replaceable>masters</replaceable> | <replaceable>ip_addr</replaceable> [ <command>port</command> <replaceable>ip_port</replaceable> ] ) [ <command>key</command> <replaceable>key_name</replaceable> ] ;
+ ...
+ <command>}</command> ; ]
+ [ <command>max-ixfr-log-size</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-journal-size</command> <replaceable>size_spec</replaceable> ; ]
+ [ <command>coresize</command> <replaceable>size_spec</replaceable> ; ]
+ [ <command>datasize</command> <replaceable>size_spec</replaceable> ; ]
+ [ <command>files</command> <replaceable>size_spec</replaceable> ; ]
+ [ <command>stacksize</command> <replaceable>size_spec</replaceable> ; ]
+ [ <command>cleaning-interval</command> <replaceable>number</replaceable> ; ]
+ [ <command>heartbeat-interval</command> <replaceable>number</replaceable> ; ]
+ [ <command>interface-interval</command> <replaceable>number</replaceable> ; ]
+ [ <command>statistics-interval</command> <replaceable>number</replaceable> ; ]
+ [ <command>topology {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>sortlist {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>rrset-order {</command> <replaceable>order_spec</replaceable> ; ... <command>}</command> ; ]
+ [ <command>lame-ttl</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-ncache-ttl</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-cache-ttl</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-zone-ttl</command> ( <option>unlimited</option> | <replaceable>number</replaceable> ) ; ]
+ [ <command>serial-update-method</command> ( <option>increment</option> | <option>unixtime</option> | <option>date</option> ) ; ]
+ [ <command>servfail-ttl</command> <replaceable>number</replaceable> ; ]
+ [ <command>sig-validity-interval</command> <replaceable>number</replaceable> [<replaceable>number</replaceable>] ; ]
+ [ <command>sig-signing-nodes</command> <replaceable>number</replaceable> ; ]
+ [ <command>sig-signing-signatures</command> <replaceable>number</replaceable> ; ]
+ [ <command>sig-signing-type</command> <replaceable>number</replaceable> ; ]
+ [ <command>min-roots</command> <replaceable>number</replaceable> ; ]
+ [ <command>use-ixfr</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>provide-ixfr</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>request-ixfr</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>request-expire</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>treat-cr-as-space</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>min-refresh-time</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-refresh-time</command> <replaceable>number</replaceable> ; ]
+ [ <command>min-retry-time</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-retry-time</command> <replaceable>number</replaceable> ; ]
+ [ <command>nta-lifetime</command> <replaceable>duration</replaceable> ; ]
+ [ <command>nta-recheck</command> <replaceable>duration</replaceable> ; ]
+ [ <command>port</command> <replaceable>ip_port</replaceable> ; ]
+ [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ; ]
+ [ <command>additional-from-auth</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>additional-from-cache</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>random-device</command> <replaceable>path_name</replaceable> ; ]
+ [ <command>max-cache-size</command> <replaceable>size_or_percent</replaceable> ; ]
+ [ <command>match-mapped-addresses</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>filter-aaaa-on-v4</command> ( <replaceable>yes_or_no</replaceable> | <option>break-dnssec</option> ) ; ]
+ [ <command>filter-aaaa-on-v6</command> ( <replaceable>yes_or_no</replaceable> | <option>break-dnssec</option> ) ; ]
+ [ <command>filter-aaaa {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>dns64</command> <replaceable>ipv6-prefix</replaceable> <command>{</command>
+ [ <command>clients {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>mapped {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>exclude {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>suffix</command> <replaceable>ip6-address</replaceable> ; ]
+ [ <command>recursive-only</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>break-dnssec</command> <replaceable>yes_or_no</replaceable> ; ]
+ <command>}</command> ; ]
+ [ <command>dns64-server</command> <replaceable>name</replaceable> ]
+ [ <command>dns64-contact</command> <replaceable>name</replaceable> ]
+ [ <command>preferred-glue</command> ( <option>A</option> | <option>AAAA</option> | <option>none</option> ); ]
+ [ <command>edns-udp-size</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-udp-size</command> <replaceable>number</replaceable> ; ]
+ [ <command>response-padding</command> { <replaceable>address_match_list</replaceable> } block-size <replaceable>number</replaceable> ; ]
+ [ <command>max-rsa-exponent-size</command> <replaceable>number</replaceable> ; ]
+ [ <command>root-delegation-only</command> [ <command>exclude {</command> <replaceable>namelist</replaceable> <command>}</command> ] ; ]
+ [ <command>querylog</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>disable-algorithms</command> <replaceable>domain</replaceable> <command>{</command> <replaceable>algorithm</replaceable> ; ... <command>}</command> ; ]
+ [ <command>disable-ds-digests</command> <replaceable>domain</replaceable> <command>{</command> <replaceable>digest_type</replaceable> ; ... <command>}</command> ; ]
+ [ <command>acache-enable</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>acache-cleaning-interval</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-acache-size</command> <replaceable>size_spec</replaceable> ; ]
+ [ <command>max-recursion-depth</command> <replaceable>number</replaceable> ; ]
+ [ <command>max-recursion-queries</command> <replaceable>number</replaceable> ; ]
+ [ <command>masterfile-format</command> ( <option>text</option> | <option>raw</option> | <option>map</option> ) ; ]
+ [ <command>masterfile-style</command> ( <option>relative</option> | <option>full</option> ) ; ]
+ [ <command>empty-server</command> <replaceable>name</replaceable> ; ]
+ [ <command>empty-contact</command> <replaceable>name</replaceable> ; ]
+ [ <command>empty-zones-enable</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>disable-empty-zone</command> <replaceable>zone_name</replaceable> ; ]
+ [ <command>zero-no-soa-ttl</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>zero-no-soa-ttl-cache</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>resolver-query-timeout</command> <replaceable>number</replaceable> ; ]
+ [ <command>deny-answer-addresses {</command> <replaceable>address_match_list</replaceable> <command>}</command>
+ [ <command>except-from {</command> <replaceable>namelist</replaceable> <command>}</command> ] ; ]
+ [ <command>deny-answer-aliases {</command> <replaceable>namelist</replaceable> <command>}</command>
+ [ <command>except-from {</command> <replaceable>namelist</replaceable> <command>}</command> ] ; ]
+ [ <command>prefetch</command> <replaceable>number</replaceable> [ <replaceable>number</replaceable> ] ; ]
+ [ <command>rate-limit {</command>
+ [ <command>responses-per-second</command> <replaceable>number</replaceable> ; ]
+ [ <command>referrals-per-second</command> <replaceable>number</replaceable> ; ]
+ [ <command>nodata-per-second</command> <replaceable>number</replaceable> ; ]
+ [ <command>nxdomains-per-second</command> <replaceable>number</replaceable> ; ]
+ [ <command>errors-per-second</command> <replaceable>number</replaceable> ; ]
+ [ <command>all-per-second</command> <replaceable>number</replaceable> ; ]
+ [ <command>window</command> <replaceable>number</replaceable> ; ]
+ [ <command>log-only</command> <replaceable>yes_or_no</replaceable> ; ]
+ [ <command>qps-scale</command> <replaceable>number</replaceable> ; ]
+ [ <command>ipv4-prefix-length</command> <replaceable>number</replaceable> ; ]
+ [ <command>ipv6-prefix-length</command> <replaceable>number</replaceable> ; ]
+ [ <command>slip</command> <replaceable>number</replaceable> ; ]
+ [ <command>exempt-clients {</command> <replaceable>address_match_list</replaceable> <command>}</command> ; ]
+ [ <command>max-table-size</command> <replaceable>number</replaceable> ; ]
+ [ <command>min-table-size</command> <replaceable>number</replaceable> ; ]
+ <command>}</command> ; ]
+ [ <command>response-policy {</command>
+ <command>zone</command> <replaceable>zone_name</replaceable>
+ [ <command>policy</command> ( given | disabled | passthru | drop |
+ tcp-only | nxdomain | nodata | cname <replaceable>domain</replaceable> ) ]
+ [ <command>recursive-only</command> <replaceable>yes_or_no</replaceable> ]
+ [ <command>log</command> <replaceable>yes_or_no</replaceable> ]
+ [ <command>max-policy-ttl</command> <replaceable>number</replaceable> ]
+ [ <command>min-update-interval</command> <replaceable>number</replaceable> ] ;
+ ...
+ <command>}</command> [ <command>recursive-only</command> <replaceable>yes_or_no</replaceable> ]
+ [ <command>max-policy-ttl</command> <replaceable>number</replaceable> ]
+ [ <command>min-update-interval</command> <replaceable>number</replaceable> ]
+ [ <command>break-dnssec</command> <replaceable>yes_or_no</replaceable> ]
+ [ <command>min-ns-dots</command> <replaceable>number</replaceable> ]
+ [ <command>nsip-wait-recurse</command> <replaceable>yes_or_no</replaceable> ]
+ [ <command>qname-wait-recurse</command> <replaceable>yes_or_no</replaceable> ] ; ]
+ [ <command>catalog-zones {</command>
+ <command>zone</command> <replaceable>quoted_string</replaceable>
+ [ <option>default-masters</option> [ <command>port</command> <replaceable>ip_port</replaceable> ] [ <command>dscp</command> <replaceable>ip_dscp</replaceable> ] <command>{</command>
+ ( <replaceable>masters_list</replaceable> | <replaceable>ip_addr</replaceable> [<command>port</command> <replaceable>ip_port</replaceable>] [ <command>key</command> <replaceable>key_name</replaceable>] ) ;
+ ...
+ <command>}</command> ]
+ [ <command>zone-directory</command> <replaceable>path_name</replaceable> ]
+ [ <command>in-memory</command> <replaceable>yes_or_no</replaceable> ]
+ [ <command>min-update-interval</command> <replaceable>interval</replaceable> ] ;
+ ...
+ <command>}</command> ; ]
+ [ <command>v6-bias</command> <replaceable>number</replaceable> ; ]
+<command>}</command> ; ]
</programlisting>
</section>
projects / thirdparty / bind9.git / commitdiff
