named.conf.docbook revision 744c1db6352c4c3f11c8538e4a2a57c8b0e0d570
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - Copyright (C) 2004-2016 Internet Systems Consortium, Inc. ("ISC")
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - This Source Code Form is subject to the terms of the Mozilla Public
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - License, v. 2.0. If a copy of the MPL was not distributed with this
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - file, You can obtain one at http://mozilla.org/MPL/2.0/.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<!-- Converted by db4-upgrade version 1.0 -->
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<refentry xmlns="http://docbook.org/ns/docbook" version="5.0" xml:id="man.named.conf">
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <refentryinfo>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <corpauthor>Internet Systems Consortium, Inc.</corpauthor>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refentryinfo>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <refentrytitle><filename>named.conf</filename></refentrytitle>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <refnamediv>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <refname><filename>named.conf</filename></refname>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <refpurpose>configuration file for <command>named</command></refpurpose>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refnamediv>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </copyright>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <refsynopsisdiv>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </cmdsynopsis>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsynopsisdiv>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <refsection><info><title>DESCRIPTION</title></info>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <para><filename>named.conf</filename> is the configuration file
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce in braces and terminated with a semi-colon. Clauses in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the statements are also semi-colon terminated. The usual
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce comment styles are supported:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce C style: /* */
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce C++ style: // to end of line
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Unix style: # to end of line
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceacl <replaceable>string</replaceable> { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce</literallayout>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce</literallayout>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemasters <replaceable>string</replaceable> <optional> port <replaceable>integer</replaceable> </optional> {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ( <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce</literallayout>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver ( <replaceable>ipv4_address<optional>/prefixlen</optional></replaceable> | <replaceable>ipv6_address<optional>/prefixlen</optional></replaceable> ) {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfer-format ( many-answers | one-answer );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfer-source ( <replaceable>ipv4_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce support-ixfr <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce</literallayout>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <refsection><info><title>TRUSTED-KEYS</title></info>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucetrusted-keys {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <replaceable>domain_name</replaceable> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce</literallayout>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <refsection><info><title>MANAGED-KEYS</title></info>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemanaged-keys {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <replaceable>domain_name</replaceable> <constant>initial-key</constant> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce</literallayout>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce inet ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow { <replaceable>address_match_element</replaceable>; ... }
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> keys { <replaceable>string</replaceable>; ... } </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce unix <replaceable>unsupported</replaceable>; // not implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce</literallayout>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce syslog <replaceable>optional_facility</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce print-severity <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce print-category <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce category <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce</literallayout>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce listen-on <optional> port <replaceable>integer</replaceable> </optional> {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce view <replaceable>string</replaceable> <replaceable>optional_class</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce search { <replaceable>string</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce</literallayout>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce avoid-v4-udp-ports { <replaceable>port</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce avoid-v6-udp-ports { <replaceable>port</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce blackhole { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce directory <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnstap { <replaceable>message_type</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnstap-output ( <literal>file</literal> | <literal>unix</literal> ) <replaceable>path_name</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnstap-identity ( <replaceable>string</replaceable> | <literal>hostname</literal> | <literal>none</literal> );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnstap-version ( <replaceable>string</replaceable> | <literal>none</literal> );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dump-file <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce fstrm-set-buffer-hint <replaceable>number</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce fstrm-set-flush-timeout <replaceable>number</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce fstrm-set-input-queue-size <replaceable>number</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce fstrm-set-output-notify-threshold <replaceable>number</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce fstrm-set-output-queue-model ( <replaceable>mpsc</replaceable> | <replaceable>spsc</replaceable> ) ;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce fstrm-set-output-queue-size <replaceable>number</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce fstrm-set-reopen-interval <replaceable>number</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce heartbeat-interval <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce host-statistics <replaceable>boolean</replaceable>; // not implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce host-statistics-max <replaceable>number</replaceable>; // not implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce hostname ( <replaceable>quoted_string</replaceable> | none );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce interface-interval <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce keep-response-order { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce listen-on <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce listen-on-v6 <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce match-mapped-addresses <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce memstatistics-file <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce pid-file ( <replaceable>quoted_string</replaceable> | none );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce recursing-file <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce reserved-sockets <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce random-device <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce recursive-clients <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce serial-query-rate <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce server-id ( <replaceable>quoted_string</replaceable> | hostname | none );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce statistics-file <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce statistics-interval <replaceable>integer</replaceable>; // not yet implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce tcp-listen-queue <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce tkey-dhkey <replaceable>quoted_string</replaceable> <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce tkey-gssapi-credential <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce tkey-gssapi-keytab <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce tkey-domain <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfer-message-size <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfers-per-ns <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce version ( <replaceable>quoted_string</replaceable> | none );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-recursion { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-recursion-on { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sortlist { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce auth-nxdomain <replaceable>boolean</replaceable>; // default changed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce minimal-responses ( <replaceable>boolean</replaceable> | no-auth | no-auth-recursive );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce rrset-order {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce additional-from-auth <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce additional-from-cache <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce query-source ( ( <replaceable>ipv4_address</replaceable> | * ) | <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce query-source-v6 ( ( <replaceable>ipv6_address</replaceable> | * ) | <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce use-queryport-pool <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce queryport-pool-ports <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce queryport-pool-updateinterval <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce cleaning-interval <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce resolver-query-timeout <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce min-roots <replaceable>integer</replaceable>; // not implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-ncache-ttl <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfer-format ( many-answers | one-answer );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce clients-per-query <replaceable>number</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-clients-per-query <replaceable>number</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-names ( master | slave | response )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ( fail | warn | ignore );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-mx ( fail | warn | ignore );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-integrity <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-mx-cname ( fail | warn | ignore );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-srv-cname ( fail | warn | ignore );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce cache-file <replaceable>quoted_string</replaceable>; // test option
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce catalog-zones {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> default-masters
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional>port <replaceable>ip_port</replaceable></optional>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional>dscp <replaceable>ip_dscp</replaceable></optional>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce { ( <replaceable>masters_list</replaceable> | <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> <optional>key <replaceable>key</replaceable></optional> ) ; <optional>...</optional> }</optional>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional>in-memory <replaceable>yes_or_no</replaceable></optional>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional>min-update-interval <replaceable>interval</replaceable></optional>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce disable-ds-digests <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-validation <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-lookaside ( <replaceable>auto</replaceable> | <replaceable>no</replaceable> | <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-accept-expired <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce recursive-only <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce empty-zones-enable <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce disable-empty-zone <replaceable>string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query-on { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query-cache { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query-cache-on { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-transfer { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-update { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce update-check-ksk <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce masterfile-format ( text | raw | map );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port <replaceable>integer</replaceable> </optional>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> key <replaceable>keyname</replaceable> </optional> ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-notify { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce forward ( first | only );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce forwarders <optional> port <replaceable>integer</replaceable> </optional> {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-journal-size <replaceable>size_no_default</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-transfer-time-in <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-transfer-time-out <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-transfer-idle-in <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-transfer-idle-out <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-retry-time <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce min-retry-time <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-refresh-time <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce min-refresh-time <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sig-validity-interval <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sig-re-signing-interval <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sig-signing-nodes <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sig-signing-signatures <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sig-signing-type <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfer-source ( <replaceable>ipv4_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce use-alt-transfer-source <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zone-statistics <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce key-directory <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce managed-keys-directory <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce auto-dnssec <constant>allow</constant>|<constant>maintain</constant>|<constant>off</constant>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce try-tcp-refresh <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zero-no-soa-ttl <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce automatic-interface-scan <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce cookie-algorithm ( <replaceable>aes</replaceable> | <replaceable>sha1</replaceable> | <replaceable>sha256</replaceable> );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce require-server-cookie <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce nocookie-udp-size <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce deny-answer-addresses {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce } <optional> except-from { <replaceable>namelist</replaceable> } </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce deny-answer-aliases {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce } <optional> except-from { <replaceable>namelist</replaceable> } </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce nsec3-test-zone <replaceable>boolean</replaceable>; // testing only
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce deallocate-on-exit <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce fake-iquery <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce fetch-glue <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce has-old-clients <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce multiple-cnames <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce named-xfer <replaceable>quoted_string</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce serial-queries <replaceable>integer</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce treat-cr-as-space <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce use-id-pool <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce use-ixfr <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce</literallayout>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceview <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce match-clients { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce match-destinations { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce match-recursive-only <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce server ( <replaceable>ipv4_address<optional>/prefixlen</optional></replaceable> | <replaceable>ipv6_address<optional>/prefixlen</optional></replaceable> ) {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce trusted-keys {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <replaceable>string</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce managed-keys {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <replaceable>domain_name</replaceable> <constant>initial-key</constant> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-recursion { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-recursion-on { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sortlist { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce auth-nxdomain <replaceable>boolean</replaceable>; // default changed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce minimal-responses <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce rrset-order {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce additional-from-auth <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce additional-from-cache <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce query-source ( ( <replaceable>ipv4_address</replaceable> | * ) | <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce query-source-v6 ( ( <replaceable>ipv6_address</replaceable> | * ) | <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce use-queryport-pool <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce queryport-pool-ports <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce queryport-pool-updateinterval <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce cleaning-interval <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce resolver-query-timeout <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce min-roots <replaceable>integer</replaceable>; // not implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-ncache-ttl <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfer-format ( many-answers | one-answer );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce clients-per-query <replaceable>number</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-clients-per-query <replaceable>number</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-names ( master | slave | response )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ( fail | warn | ignore );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-mx ( fail | warn | ignore );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-integrity <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-mx-cname ( fail | warn | ignore );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-srv-cname ( fail | warn | ignore );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce cache-file <replaceable>quoted_string</replaceable>; // test option
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce disable-ds-digests <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-validation <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-lookaside ( <replaceable>auto</replaceable> | <replaceable>no</replaceable> | <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-accept-expired <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce recursive-only <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce empty-zones-enable <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce disable-empty-zone <replaceable>string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query-on { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query-cache { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query-cache-on { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-transfer { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-update { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce update-check-ksk <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce masterfile-format ( text | raw | map );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port <replaceable>integer</replaceable> </optional>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> key <replaceable>keyname</replaceable> </optional> ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-notify { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce forward ( first | only );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce forwarders <optional> port <replaceable>integer</replaceable> </optional> {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-journal-size <replaceable>size_no_default</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-transfer-time-in <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-transfer-time-out <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-transfer-idle-in <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-transfer-idle-out <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-retry-time <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce min-retry-time <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-refresh-time <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce min-refresh-time <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sig-validity-interval <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfer-source ( <replaceable>ipv4_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce use-alt-transfer-source <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zone-statistics <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce try-tcp-refresh <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce key-directory <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zero-no-soa-ttl <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce require-server-cookie <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce nocookie-udp-size <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce fetch-glue <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce</literallayout>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce type ( master | slave | stub | hint | redirect |
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce forward | delegation-only );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce masters <optional> port <replaceable>integer</replaceable> </optional> {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <replaceable>ipv6_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce delegation-only <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-names ( fail | warn | ignore );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-mx ( fail | warn | ignore );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-integrity <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-mx-cname ( fail | warn | ignore );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce check-srv-cname ( fail | warn | ignore );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ixfr-from-differences <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zero-no-soa-ttl <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query-on { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-transfer { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-update { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce update-policy <replaceable>local</replaceable> | <replaceable> {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ( grant | deny ) <replaceable>string</replaceable>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ( name | subdomain | wildcard | self | selfsub | selfwild |
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce krb5-self | ms-self | krb5-subdomain | ms-subdomain |
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce tcp-self | zonesub | 6to4-self ) <replaceable>string</replaceable>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce }</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce update-check-ksk <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce masterfile-format ( text | raw | map );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port <replaceable>integer</replaceable> </optional>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> key <replaceable>keyname</replaceable> </optional> ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-notify { <replaceable>address_match_element</replaceable>; ... };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce forward ( first | only );
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce forwarders <optional> port <replaceable>integer</replaceable> </optional> {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-journal-size <replaceable>size_no_default</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-transfer-time-in <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-transfer-time-out <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-transfer-idle-in <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-transfer-idle-out <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-retry-time <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce min-retry-time <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-refresh-time <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce min-refresh-time <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sig-validity-interval <replaceable>integer</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfer-source ( <replaceable>ipv4_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce use-alt-transfer-source <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zone-statistics <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce try-tcp-refresh <replaceable>boolean</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce key-directory <replaceable>quoted_string</replaceable>;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce nsec3-test-zone <replaceable>boolean</replaceable>; // testing only
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ixfr-base <replaceable>quoted_string</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ixfr-tmp-file <replaceable>quoted_string</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce pubkey <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>; // obsolete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce</literallayout>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </citerefentry>,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <citerefentry>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <refentrytitle>named-checkconf</refentrytitle><manvolnum>8</manvolnum>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </citerefentry>,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <citerefentry>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <refentrytitle>rndc</refentrytitle><manvolnum>8</manvolnum>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </citerefentry>,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce </refsection>