60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic UpdaterThis is a summary of the named.conf options supported by
75c0816e8295e180f4bc7f10db3d0d880383bc1cMark Andrewsthis version of BIND 9.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
4a14ce5ba00ab7bc55c99ffdcf59c7a4ab902721Automatic Updateracl <string> { <address_match_element>; ... }; // may occur multiple times
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeincontrols {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein inet ( <ipv4_address> | <ipv6_address> |
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * ) [ port ( <integer> | * ) ] allow
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein { <address_match_element>; ... } [
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein keys { <string>; ... } ] [ read-only
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <boolean> ]; // may occur multiple times
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein unix <quoted_string> perm <integer>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein owner <integer> group <integer> [
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein keys { <string>; ... } ] [ read-only
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <boolean> ]; // may occur multiple times
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater}; // may occur multiple times
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeindlz <string> {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein database <string>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein search <boolean>;
e21a2904f02a03fa06b6db04d348f65fe9c67b2bMark Andrews}; // may occur multiple times
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeindyndb <string> <quoted_string> {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <unspecified-text> }; // may occur multiple times
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinkey <string> {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein algorithm <string>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein secret <string>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein}; // may occur multiple times
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinlogging {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein category <string> { <string>; ... }; // may occur multiple times
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein channel <string> {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein buffered <boolean>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein file <quoted_string> [ versions ( "unlimited" | <integer> )
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ] [ size <size> ];
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein null;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein print-category <boolean>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein print-severity <boolean>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein print-time <boolean>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein severity <log_severity>;
ab8729140b1ad688ab03e1e9ce438fb1cbb49222Automatic Updater stderr;
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater syslog [ <syslog_facility> ];
75c0816e8295e180f4bc7f10db3d0d880383bc1cMark Andrews }; // may occur multiple times
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein};
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinlwres {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein listen-on [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lwres-clients <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lwres-tasks <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ndots <integer>;
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater search { <string>; ... };
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater view <string> [ <class> ];
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater}; // may occur multiple times
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinmanaged-keys { <string> <string> <integer>
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater <integer> <integer> <quoted_string>; ... }; // may occur multiple times
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updatermasters <string> [ port <integer> ] [ dscp
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater <integer> ] { ( <masters> | <ipv4_address> [
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater port <integer> ] | <ipv6_address> [ port
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater <integer> ] ) [ key <string> ]; ... }; // may occur multiple times
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinoptions {
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews acache-cleaning-interval <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein acache-enable <boolean>;
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater additional-from-auth <boolean>;
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater additional-from-cache <boolean>;
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater allow-new-zones <boolean>;
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater allow-notify { <address_match_element>; ... };
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater allow-query { <address_match_element>; ... };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-query-cache { <address_match_element>; ... };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-query-cache-on { <address_match_element>; ... };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-query-on { <address_match_element>; ... };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-recursion { <address_match_element>; ... };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-recursion-on { <address_match_element>; ... };
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater allow-transfer { <address_match_element>; ... };
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater allow-update { <address_match_element>; ... };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-update-forwarding { <address_match_element>; ... };
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater allow-v6-synthesis { <address_match_element>; ... }; // obsolete
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <ipv4_address> [ port <integer> ] | <ipv6_address> [ port
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater <integer> ] ) [ key <string> ]; ... };
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ] [ dscp <integer> ];
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * ) ] [ dscp <integer> ];
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein attach-cache <string>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein auth-nxdomain <boolean>; // default changed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein auto-dnssec ( allow | maintain | off );
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein automatic-interface-scan <boolean>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein avoid-v4-udp-ports { <portrange>; ... };
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater avoid-v6-udp-ports { <portrange>; ... };
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater bindkeys-file <quoted_string>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein blackhole { <address_match_element>; ... };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cache-file <quoted_string>;
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater catalog-zones { zone <quoted_string> [ default-masters [ port
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater <integer> ] [ dscp <integer> ] { ( <masters> | <ipv4_address> [
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater <string> ]; ... } ] [ zone-directory <quoted_string> ] [
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater in-memory <boolean> ] [ min-update-interval <integer> ]; ... };
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater check-dup-records ( fail | warn | ignore );
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein check-integrity <boolean>;
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater check-mx ( fail | warn | ignore );
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater check-mx-cname ( fail | warn | ignore );
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein check-names ( master | slave | response
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ) ( fail | warn | ignore ); // may occur multiple times
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater check-sibling <boolean>;
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater check-spf ( warn | ignore );
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater check-srv-cname ( fail | warn | ignore );
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater check-wildcard <boolean>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater cleaning-interval <integer>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater clients-per-query <integer>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater cookie-algorithm ( aes | sha1 | sha256 );
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater cookie-secret <string>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater coresize ( default | unlimited | <sizeval> );
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater datasize ( default | unlimited | <sizeval> );
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater deallocate-on-exit <boolean>; // obsolete
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater deny-answer-addresses { <address_match_element>; ... } [
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater except-from { <quoted_string>; ... } ];
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater deny-answer-aliases { <quoted_string>; ... } [ except-from {
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater <quoted_string>; ... } ];
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater dialup ( notify | notify-passive | passive | refresh | <boolean> );
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater directory <quoted_string>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater disable-algorithms <string> { <string>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater ... }; // may occur multiple times
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater disable-ds-digests <string> { <string>;
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater ... }; // may occur multiple times
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater disable-empty-zone <string>; // may occur multiple times
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater dns64 <netprefix> {
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater break-dnssec <boolean>;
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater clients { <address_match_element>; ... };
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater exclude { <address_match_element>; ... };
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater mapped { <address_match_element>; ... };
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater recursive-only <boolean>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater suffix <ipv6_address>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater }; // may occur multiple times
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater dns64-contact <string>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater dns64-server <string>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater dnssec-accept-expired <boolean>;
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater dnssec-dnskey-kskonly <boolean>;
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater dnssec-enable <boolean>;
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater dnssec-loadkeys-interval <integer>;
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater dnssec-lookaside ( <string> trust-anchor
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater <string> | auto | no ); // may occur multiple times
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-must-be-secure <string> <boolean>; // may occur multiple times
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-secure-to-insecure <boolean>;
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews dnssec-update-mode ( maintain | no-resign );
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-validation ( yes | no | auto );
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater dnstap { ( all | auth | client | forwarder |
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein resolver ) [ ( query | response ) ]; ... }; // not configured
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnstap-identity ( <quoted_string> | none |
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews hostname ); // not configured
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnstap-output ( file | unix ) <quoted_string>; // not configured
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnstap-version ( <quoted_string> | none ); // not configured
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dscp <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater <integer> ] [ dscp <integer> ] | <ipv4_address> [ port
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <integer> ] [ dscp <integer> ] | <ipv6_address> [ port
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <integer> ] [ dscp <integer> ] ); ... };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dump-file <quoted_string>;
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater edns-udp-size <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein empty-contact <string>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein empty-server <string>;
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater empty-zones-enable <boolean>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fake-iquery <boolean>; // obsolete
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fetch-glue <boolean>; // obsolete
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater fetch-quota-params <integer> <fixedpoint> <fixedpoint> <fixedpoint>;
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater fetches-per-server <integer> [ ( drop | fail ) ];
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fetches-per-zone <integer> [ ( drop | fail ) ];
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater files ( default | unlimited | <sizeval> );
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater filter-aaaa { <address_match_element>; ... }; // not configured
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater filter-aaaa-on-v4 ( break-dnssec | <boolean> ); // not configured
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater filter-aaaa-on-v6 ( break-dnssec | <boolean> ); // not configured
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein flush-zones-on-shutdown <boolean>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater forward ( first | only );
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater fstrm-set-buffer-hint <integer>; // not configured
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fstrm-set-flush-timeout <integer>; // not configured
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater fstrm-set-input-queue-size <integer>; // not configured
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fstrm-set-output-notify-threshold <integer>; // not configured
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fstrm-set-output-queue-model ( mpsc | spsc ); // not configured
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fstrm-set-output-queue-size <integer>; // not configured
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fstrm-set-reopen-interval <integer>; // not configured
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein geoip-directory ( <quoted_string> | none ); // not configured
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater geoip-use-ecs <boolean>; // not configured
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater has-old-clients <boolean>; // obsolete
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater heartbeat-interval <integer>;
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater host-statistics <boolean>; // not implemented
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater host-statistics-max <integer>; // not implemented
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater hostname ( <quoted_string> | none );
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater inline-signing <boolean>;
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater interface-interval <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ixfr-from-differences ( master | slave | <boolean> );
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein keep-response-order { <address_match_element>; ... };
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater key-directory <quoted_string>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lame-ttl <ttlval>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein listen-on [ port <integer> ] [ dscp
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater <integer> ] {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <address_match_element>; ... }; // may occur multiple times
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater listen-on-v6 [ port <integer> ] [ dscp
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <integer> ] {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <address_match_element>; ... }; // may occur multiple times
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater lmdb-mapsize <sizeval>; // non-operational
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lock-file ( <quoted_string> | none );
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater maintain-ixfr-base <boolean>; // obsolete
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater managed-keys-directory <quoted_string>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater masterfile-format ( map | raw | text );
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews masterfile-style ( full | relative );
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein match-mapped-addresses <boolean>;
507151045be68c671ffd4e2f37e17cdfa0376fc4Automatic Updater max-acache-size ( unlimited | <sizeval> );
507151045be68c671ffd4e2f37e17cdfa0376fc4Automatic Updater max-cache-size ( default | unlimited | <sizeval> | <percentage> );
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein max-cache-ttl <integer>;
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews max-clients-per-query <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein max-ixfr-log-size ( default | unlimited | <sizeval> ); // obsolete
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein max-journal-size ( unlimited | <sizeval> );
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater max-ncache-ttl <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein max-records <integer>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater max-recursion-depth <integer>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater max-recursion-queries <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein max-refresh-time <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein max-retry-time <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein max-rsa-exponent-size <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein max-transfer-idle-in <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein max-transfer-idle-out <integer>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater max-transfer-time-in <integer>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater max-transfer-time-out <integer>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater max-udp-size <integer>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater max-zone-ttl ( unlimited | <ttlval> );
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein memstatistics <boolean>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein memstatistics-file <quoted_string>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein message-compression <boolean>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater min-refresh-time <integer>;
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews min-retry-time <integer>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater min-roots <integer>; // not implemented
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein minimal-any <boolean>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein minimal-responses ( no-auth | no-auth-recursive | <boolean> );
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein multi-master <boolean>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein multiple-cnames <boolean>; // obsolete
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named-xfer <quoted_string>; // obsolete
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater no-case-compress { <address_match_element>; ... };
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater nocookie-udp-size <integer>;
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater nosit-udp-size <integer>; // obsolete
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater notify ( explicit | master-only | <boolean> );
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater notify-delay <integer>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater notify-rate <integer>;
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater dscp <integer> ];
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater [ dscp <integer> ];
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater notify-to-soa <boolean>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein nsec3-test-zone <boolean>; // test only
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein nta-lifetime <ttlval>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews nta-recheck <ttlval>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews nxdomain-redirect <string>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews pid-file ( <quoted_string> | none );
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews port <integer>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews preferred-glue <string>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews prefetch <integer> [ <integer> ];
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews provide-ixfr <boolean>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews query-source ( ( [ address ] ( <ipv4_address> | * ) [ port (
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <integer> | * ) ] ) | ( [ [ address ] ( <ipv4_address> | * ) ]
922312472e2e05ebc64993d465999c5351b83036Automatic Updater port ( <integer> | * ) ) ) [ dscp <integer> ];
922312472e2e05ebc64993d465999c5351b83036Automatic Updater query-source-v6 ( ( [ address ] ( <ipv6_address> | * ) [ port (
922312472e2e05ebc64993d465999c5351b83036Automatic Updater <integer> | * ) ] ) | ( [ [ address ] ( <ipv6_address> | * ) ]
28b3569d6248168e6c00caab951521cc8141a49dAutomatic Updater port ( <integer> | * ) ) ) [ dscp <integer> ];
28b3569d6248168e6c00caab951521cc8141a49dAutomatic Updater querylog <boolean>;
28b3569d6248168e6c00caab951521cc8141a49dAutomatic Updater queryport-pool-ports <integer>; // obsolete
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews queryport-pool-updateinterval <integer>; // obsolete
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews random-device <quoted_string>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews rate-limit {
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater all-per-second <integer>;
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater errors-per-second <integer>;
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater exempt-clients { <address_match_element>; ... };
0a7ed88633a680bb881868b75ded4d09a7bbbc50Automatic Updater ipv4-prefix-length <integer>;
0a7ed88633a680bb881868b75ded4d09a7bbbc50Automatic Updater ipv6-prefix-length <integer>;
0a7ed88633a680bb881868b75ded4d09a7bbbc50Automatic Updater log-only <boolean>;
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews max-table-size <integer>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews min-table-size <integer>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews nodata-per-second <integer>;
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews nxdomains-per-second <integer>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews qps-scale <integer>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews referrals-per-second <integer>;
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews responses-per-second <integer>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews slip <integer>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews window <integer>;
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews };
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews recursing-file <quoted_string>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews recursion <boolean>;
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater recursive-clients <integer>;
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater request-expire <boolean>;
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater request-ixfr <boolean>;
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater request-nsid <boolean>;
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater request-sit <boolean>; // obsolete
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater require-server-cookie <boolean>;
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews reserved-sockets <integer>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews resolver-query-timeout <integer>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews response-policy { zone <quoted_string> [ log <boolean> ] [
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews max-policy-ttl <integer> ] [ policy ( cname | disabled | drop |
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews given | no-op | nodata | nxdomain | passthru | tcp-only
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater <quoted_string> ) ] [ recursive-only <boolean> ]; ... } [
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater break-dnssec <boolean> ] [ max-policy-ttl <integer> ] [
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater min-ns-dots <integer> ] [ nsip-wait-recurse <boolean> ] [
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater qname-wait-recurse <boolean> ] [ recursive-only <boolean> ];
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater rfc2308-type1 <boolean>; // not yet implemented
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater root-delegation-only [ exclude { <quoted_string>; ... } ];
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater rrset-order { [ class <string> ] [ type <string> ] [ name
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater <quoted_string> ] <string> <string>; ... };
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater secroots-file <quoted_string>;
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater send-cookie <boolean>;
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater serial-queries <integer>; // obsolete
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater serial-query-rate <integer>;
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater serial-update-method ( date | increment | unixtime );
fdd80e9a55c70b36a3bf3e409b86897301c44ff8Automatic Updater server-id ( <quoted_string> | none | hostname );
fdd80e9a55c70b36a3bf3e409b86897301c44ff8Automatic Updater servfail-ttl <ttlval>;
fdd80e9a55c70b36a3bf3e409b86897301c44ff8Automatic Updater session-keyalg <string>;
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater session-keyfile ( <quoted_string> | none );
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater session-keyname <string>;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews sig-signing-nodes <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sig-signing-signatures <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sig-signing-type <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sig-validity-interval <integer> [ <integer> ];
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sit-secret <string>; // obsolete
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sortlist { <address_match_element>; ... };
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein stacksize ( default | unlimited | <sizeval> );
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein startup-notify-rate <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein statistics-file <quoted_string>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein statistics-interval <integer>; // not yet implemented
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein suppress-initial-notify <boolean>; // not yet implemented
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein tcp-clients <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein tcp-listen-queue <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein tkey-dhkey <quoted_string> <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein tkey-domain <quoted_string>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein tkey-gssapi-credential <quoted_string>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein tkey-gssapi-keytab <quoted_string>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein topology { <address_match_element>; ... }; // not implemented
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein transfer-format ( many-answers | one-answer );
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein transfer-message-size <integer>;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dscp <integer> ];
transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )
] [ dscp <integer> ];
transfers-in <integer>;
transfers-out <integer>;
transfers-per-ns <integer>;
treat-cr-as-space <boolean>; // obsolete
trust-anchor-telemetry <boolean>; // experimental
try-tcp-refresh <boolean>;
update-check-ksk <boolean>;
use-alt-transfer-source <boolean>;
use-id-pool <boolean>; // obsolete
use-ixfr <boolean>; // obsolete
use-queryport-pool <boolean>; // obsolete
use-v4-udp-ports { <portrange>; ... };
use-v6-udp-ports { <portrange>; ... };
v6-bias <integer>;
version ( <quoted_string> | none );
zero-no-soa-ttl <boolean>;
zero-no-soa-ttl-cache <boolean>;
zone-statistics ( full | terse | none | <boolean> );
};
server <netprefix> {
bogus <boolean>;
edns <boolean>;
edns-udp-size <integer>;
edns-version <integer>;
keys <server_key>;
max-udp-size <integer>;
notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
dscp <integer> ];
notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]
[ dscp <integer> ];
provide-ixfr <boolean>;
query-source ( ( [ address ] ( <ipv4_address> | * ) [ port (
<integer> | * ) ] ) | ( [ [ address ] ( <ipv4_address> | * ) ]
port ( <integer> | * ) ) ) [ dscp <integer> ];
query-source-v6 ( ( [ address ] ( <ipv6_address> | * ) [ port (
<integer> | * ) ] ) | ( [ [ address ] ( <ipv6_address> | * ) ]
port ( <integer> | * ) ) ) [ dscp <integer> ];
request-expire <boolean>;
request-ixfr <boolean>;
request-nsid <boolean>;
request-sit <boolean>; // obsolete
send-cookie <boolean>;
support-ixfr <boolean>; // obsolete
tcp-only <boolean>;
transfer-format ( many-answers | one-answer );
transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
dscp <integer> ];
transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )
] [ dscp <integer> ];
transfers <integer>;
}; // may occur multiple times
statistics-channels {
inet ( <ipv4_address> | <ipv6_address> |
* ) [ port ( <integer> | * ) ] [
allow { <address_match_element>; ...
} ]; // may occur multiple times
}; // may occur multiple times
trusted-keys { <string> <integer> <integer>
<integer> <quoted_string>; ... }; // may occur multiple times
view <string> [ <class> ] {
acache-cleaning-interval <integer>;
acache-enable <boolean>;
additional-from-auth <boolean>;
additional-from-cache <boolean>;
allow-new-zones <boolean>;
allow-notify { <address_match_element>; ... };
allow-query { <address_match_element>; ... };
allow-query-cache { <address_match_element>; ... };
allow-query-cache-on { <address_match_element>; ... };
allow-query-on { <address_match_element>; ... };
allow-recursion { <address_match_element>; ... };
allow-recursion-on { <address_match_element>; ... };
allow-transfer { <address_match_element>; ... };
allow-update { <address_match_element>; ... };
allow-update-forwarding { <address_match_element>; ... };
allow-v6-synthesis { <address_match_element>; ... }; // obsolete
also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |
<ipv4_address> [ port <integer> ] | <ipv6_address> [ port
<integer> ] ) [ key <string> ]; ... };
alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )
] [ dscp <integer> ];
alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
* ) ] [ dscp <integer> ];
attach-cache <string>;
auth-nxdomain <boolean>; // default changed
auto-dnssec ( allow | maintain | off );
cache-file <quoted_string>;
catalog-zones { zone <quoted_string> [ default-masters [ port
<integer> ] [ dscp <integer> ] { ( <masters> | <ipv4_address> [
port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
<string> ]; ... } ] [ zone-directory <quoted_string> ] [
in-memory <boolean> ] [ min-update-interval <integer> ]; ... };
check-dup-records ( fail | warn | ignore );
check-integrity <boolean>;
check-mx ( fail | warn | ignore );
check-mx-cname ( fail | warn | ignore );
check-names ( master | slave | response
) ( fail | warn | ignore ); // may occur multiple times
check-sibling <boolean>;
check-spf ( warn | ignore );
check-srv-cname ( fail | warn | ignore );
check-wildcard <boolean>;
cleaning-interval <integer>;
clients-per-query <integer>;
deny-answer-addresses { <address_match_element>; ... } [
except-from { <quoted_string>; ... } ];
deny-answer-aliases { <quoted_string>; ... } [ except-from {
<quoted_string>; ... } ];
dialup ( notify | notify-passive | passive | refresh | <boolean> );
disable-algorithms <string> { <string>;
... }; // may occur multiple times
disable-ds-digests <string> { <string>;
... }; // may occur multiple times
disable-empty-zone <string>; // may occur multiple times
dlz <string> {
database <string>;
search <boolean>;
}; // may occur multiple times
dns64 <netprefix> {
break-dnssec <boolean>;
clients { <address_match_element>; ... };
exclude { <address_match_element>; ... };
mapped { <address_match_element>; ... };
recursive-only <boolean>;
suffix <ipv6_address>;
}; // may occur multiple times
dns64-contact <string>;
dns64-server <string>;
dnssec-accept-expired <boolean>;
dnssec-dnskey-kskonly <boolean>;
dnssec-enable <boolean>;
dnssec-loadkeys-interval <integer>;
dnssec-lookaside ( <string> trust-anchor
<string> | auto | no ); // may occur multiple times
dnssec-must-be-secure <string> <boolean>; // may occur multiple times
dnssec-secure-to-insecure <boolean>;
dnssec-update-mode ( maintain | no-resign );
dnssec-validation ( yes | no | auto );
dnstap { ( all | auth | client | forwarder |
resolver ) [ ( query | response ) ]; ... }; // not configured
dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
<integer> ] [ dscp <integer> ] | <ipv4_address> [ port
<integer> ] [ dscp <integer> ] | <ipv6_address> [ port
<integer> ] [ dscp <integer> ] ); ... };
dyndb <string> <quoted_string> {
<unspecified-text> }; // may occur multiple times
edns-udp-size <integer>;
empty-contact <string>;
empty-server <string>;
empty-zones-enable <boolean>;
fetch-glue <boolean>; // obsolete
fetch-quota-params <integer> <fixedpoint> <fixedpoint> <fixedpoint>;
fetches-per-server <integer> [ ( drop | fail ) ];
fetches-per-zone <integer> [ ( drop | fail ) ];
filter-aaaa { <address_match_element>; ... }; // not configured
filter-aaaa-on-v4 ( break-dnssec | <boolean> ); // not configured
filter-aaaa-on-v6 ( break-dnssec | <boolean> ); // not configured
forward ( first | only );
forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>
| <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };
inline-signing <boolean>;
ixfr-from-differences ( master | slave | <boolean> );
key <string> {
algorithm <string>;
secret <string>;
}; // may occur multiple times
key-directory <quoted_string>;
lame-ttl <ttlval>;
lmdb-mapsize <sizeval>; // non-operational
maintain-ixfr-base <boolean>; // obsolete
managed-keys { <string> <string>
<integer> <integer> <integer>
<quoted_string>; ... }; // may occur multiple times
masterfile-format ( map | raw | text );
masterfile-style ( full | relative );
match-clients { <address_match_element>; ... };
match-destinations { <address_match_element>; ... };
match-recursive-only <boolean>;
max-acache-size ( unlimited | <sizeval> );
max-cache-size ( default | unlimited | <sizeval> | <percentage> );
max-cache-ttl <integer>;
max-clients-per-query <integer>;
max-ixfr-log-size ( default | unlimited | <sizeval> ); // obsolete
max-journal-size ( unlimited | <sizeval> );
max-ncache-ttl <integer>;
max-records <integer>;
max-recursion-depth <integer>;
max-recursion-queries <integer>;
max-refresh-time <integer>;
max-retry-time <integer>;
max-transfer-idle-in <integer>;
max-transfer-idle-out <integer>;
max-transfer-time-in <integer>;
max-transfer-time-out <integer>;
max-udp-size <integer>;
max-zone-ttl ( unlimited | <ttlval> );
message-compression <boolean>;
min-refresh-time <integer>;
min-retry-time <integer>;
min-roots <integer>; // not implemented
minimal-any <boolean>;
minimal-responses ( no-auth | no-auth-recursive | <boolean> );
multi-master <boolean>;
no-case-compress { <address_match_element>; ... };
nocookie-udp-size <integer>;
nosit-udp-size <integer>; // obsolete
notify ( explicit | master-only | <boolean> );
notify-delay <integer>;
notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
dscp <integer> ];
notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]
[ dscp <integer> ];
notify-to-soa <boolean>;
nsec3-test-zone <boolean>; // test only
nta-lifetime <ttlval>;
nta-recheck <ttlval>;
nxdomain-redirect <string>;
preferred-glue <string>;
prefetch <integer> [ <integer> ];
provide-ixfr <boolean>;
query-source ( ( [ address ] ( <ipv4_address> | * ) [ port (
<integer> | * ) ] ) | ( [ [ address ] ( <ipv4_address> | * ) ]
port ( <integer> | * ) ) ) [ dscp <integer> ];
query-source-v6 ( ( [ address ] ( <ipv6_address> | * ) [ port (
<integer> | * ) ] ) | ( [ [ address ] ( <ipv6_address> | * ) ]
port ( <integer> | * ) ) ) [ dscp <integer> ];
queryport-pool-ports <integer>; // obsolete
queryport-pool-updateinterval <integer>; // obsolete
rate-limit {
all-per-second <integer>;
errors-per-second <integer>;
exempt-clients { <address_match_element>; ... };
ipv4-prefix-length <integer>;
ipv6-prefix-length <integer>;
log-only <boolean>;
max-table-size <integer>;
min-table-size <integer>;
nodata-per-second <integer>;
nxdomains-per-second <integer>;
qps-scale <integer>;
referrals-per-second <integer>;
responses-per-second <integer>;
slip <integer>;
window <integer>;
};
recursion <boolean>;
request-expire <boolean>;
request-ixfr <boolean>;
request-nsid <boolean>;
request-sit <boolean>; // obsolete
require-server-cookie <boolean>;
resolver-query-timeout <integer>;
response-policy { zone <quoted_string> [ log <boolean> ] [
max-policy-ttl <integer> ] [ policy ( cname | disabled | drop |
given | no-op | nodata | nxdomain | passthru | tcp-only
<quoted_string> ) ] [ recursive-only <boolean> ]; ... } [
break-dnssec <boolean> ] [ max-policy-ttl <integer> ] [
min-ns-dots <integer> ] [ nsip-wait-recurse <boolean> ] [
qname-wait-recurse <boolean> ] [ recursive-only <boolean> ];
rfc2308-type1 <boolean>; // not yet implemented
root-delegation-only [ exclude { <quoted_string>; ... } ];
rrset-order { [ class <string> ] [ type <string> ] [ name
<quoted_string> ] <string> <string>; ... };
send-cookie <boolean>;
serial-update-method ( date | increment | unixtime );
server <netprefix> {
bogus <boolean>;
edns <boolean>;
edns-udp-size <integer>;
edns-version <integer>;
keys <server_key>;
max-udp-size <integer>;
notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
) ] [ dscp <integer> ];
notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
| * ) ] [ dscp <integer> ];
provide-ixfr <boolean>;
query-source ( ( [ address ] ( <ipv4_address> | * ) [ port
( <integer> | * ) ] ) | ( [ [ address ] (
<ipv4_address> | * ) ] port ( <integer> | * ) ) ) [
dscp <integer> ];
query-source-v6 ( ( [ address ] ( <ipv6_address> | * ) [
port ( <integer> | * ) ] ) | ( [ [ address ] (
<ipv6_address> | * ) ] port ( <integer> | * ) ) ) [
dscp <integer> ];
request-expire <boolean>;
request-ixfr <boolean>;
request-nsid <boolean>;
request-sit <boolean>; // obsolete
send-cookie <boolean>;
support-ixfr <boolean>; // obsolete
tcp-only <boolean>;
transfer-format ( many-answers | one-answer );
transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
* ) ] [ dscp <integer> ];
transfer-source-v6 ( <ipv6_address> | * ) [ port (
<integer> | * ) ] [ dscp <integer> ];
transfers <integer>;
}; // may occur multiple times
servfail-ttl <ttlval>;
sig-signing-nodes <integer>;
sig-signing-signatures <integer>;
sig-signing-type <integer>;
sig-validity-interval <integer> [ <integer> ];
sortlist { <address_match_element>; ... };
suppress-initial-notify <boolean>; // not yet implemented
topology { <address_match_element>; ... }; // not implemented
transfer-format ( many-answers | one-answer );
transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
dscp <integer> ];
transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )
] [ dscp <integer> ];
trust-anchor-telemetry <boolean>; // experimental
trusted-keys { <string> <integer>
<integer> <integer> <quoted_string>;
... }; // may occur multiple times
try-tcp-refresh <boolean>;
update-check-ksk <boolean>;
use-alt-transfer-source <boolean>;
use-queryport-pool <boolean>; // obsolete
v6-bias <integer>;
zero-no-soa-ttl <boolean>;
zero-no-soa-ttl-cache <boolean>;
zone <string> [ <class> ] {
allow-notify { <address_match_element>; ... };
allow-query { <address_match_element>; ... };
allow-query-on { <address_match_element>; ... };
allow-transfer { <address_match_element>; ... };
allow-update { <address_match_element>; ... };
allow-update-forwarding { <address_match_element>; ... };
also-notify [ port <integer> ] [ dscp <integer> ] { (
<masters> | <ipv4_address> [ port <integer> ] |
<ipv6_address> [ port <integer> ] ) [ key <string> ];
... };
alt-transfer-source ( <ipv4_address> | * ) [ port (
<integer> | * ) ] [ dscp <integer> ];
alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (
<integer> | * ) ] [ dscp <integer> ];
auto-dnssec ( allow | maintain | off );
check-dup-records ( fail | warn | ignore );
check-integrity <boolean>;
check-mx ( fail | warn | ignore );
check-mx-cname ( fail | warn | ignore );
check-names ( fail | warn | ignore );
check-sibling <boolean>;
check-spf ( warn | ignore );
check-srv-cname ( fail | warn | ignore );
check-wildcard <boolean>;
database <string>;
delegation-only <boolean>;
dialup ( notify | notify-passive | passive | refresh |
<boolean> );
dlz <string>;
dnssec-dnskey-kskonly <boolean>;
dnssec-loadkeys-interval <integer>;
dnssec-secure-to-insecure <boolean>;
dnssec-update-mode ( maintain | no-resign );
file <quoted_string>;
forward ( first | only );
forwarders [ port <integer> ] [ dscp <integer> ] { (
<ipv4_address> | <ipv6_address> ) [ port <integer> ] [
dscp <integer> ]; ... };
in-view <string>;
inline-signing <boolean>;
ixfr-base <quoted_string>; // obsolete
ixfr-from-differences <boolean>;
ixfr-tmp-file <quoted_string>; // obsolete
journal <quoted_string>;
key-directory <quoted_string>;
maintain-ixfr-base <boolean>; // obsolete
masterfile-format ( map | raw | text );
masterfile-style ( full | relative );
masters [ port <integer> ] [ dscp <integer> ] { ( <masters>
| <ipv4_address> [ port <integer> ] | <ipv6_address> [
port <integer> ] ) [ key <string> ]; ... };
max-ixfr-log-size ( default | unlimited |
<sizeval> ); // obsolete
max-journal-size ( unlimited | <sizeval> );
max-records <integer>;
max-refresh-time <integer>;
max-retry-time <integer>;
max-transfer-idle-in <integer>;
max-transfer-idle-out <integer>;
max-transfer-time-in <integer>;
max-transfer-time-out <integer>;
max-zone-ttl ( unlimited | <ttlval> );
min-refresh-time <integer>;
min-retry-time <integer>;
multi-master <boolean>;
notify ( explicit | master-only | <boolean> );
notify-delay <integer>;
notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
) ] [ dscp <integer> ];
notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
| * ) ] [ dscp <integer> ];
notify-to-soa <boolean>;
nsec3-test-zone <boolean>; // test only
pubkey <integer>
<integer>
<integer>
<quoted_string>; // obsolete, may occur multiple times
request-expire <boolean>;
request-ixfr <boolean>;
serial-update-method ( date | increment | unixtime );
server-addresses { ( <ipv4_address> | <ipv6_address> ) [
port <integer> ]; ... };
server-names { <quoted_string>; ... };
sig-signing-nodes <integer>;
sig-signing-signatures <integer>;
sig-signing-type <integer>;
sig-validity-interval <integer> [ <integer> ];
transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
* ) ] [ dscp <integer> ];
transfer-source-v6 ( <ipv6_address> | * ) [ port (
<integer> | * ) ] [ dscp <integer> ];
try-tcp-refresh <boolean>;
type ( delegation-only | forward | hint | master | redirect
| slave | static-stub | stub );
update-check-ksk <boolean>;
update-policy ( local | { ( deny | grant ) <string> (
6to4-self | external | krb5-self | krb5-subdomain |
ms-self | ms-subdomain | name | self | selfsub |
selfwild | subdomain | tcp-self | wildcard | zonesub )
[ <string> ] <rrtypelist>; ... };
use-alt-transfer-source <boolean>;
zero-no-soa-ttl <boolean>;
zone-statistics ( full | terse | none | <boolean> );
}; // may occur multiple times
zone-statistics ( full | terse | none | <boolean> );
}; // may occur multiple times
zone <string> [ <class> ] {
allow-notify { <address_match_element>; ... };
allow-query { <address_match_element>; ... };
allow-query-on { <address_match_element>; ... };
allow-transfer { <address_match_element>; ... };
allow-update { <address_match_element>; ... };
allow-update-forwarding { <address_match_element>; ... };
also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |
<ipv4_address> [ port <integer> ] | <ipv6_address> [ port
<integer> ] ) [ key <string> ]; ... };
alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )
] [ dscp <integer> ];
alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
* ) ] [ dscp <integer> ];
auto-dnssec ( allow | maintain | off );
check-dup-records ( fail | warn | ignore );
check-integrity <boolean>;
check-mx ( fail | warn | ignore );
check-mx-cname ( fail | warn | ignore );
check-names ( fail | warn | ignore );
check-sibling <boolean>;
check-spf ( warn | ignore );
check-srv-cname ( fail | warn | ignore );
check-wildcard <boolean>;
database <string>;
delegation-only <boolean>;
dialup ( notify | notify-passive | passive | refresh | <boolean> );
dlz <string>;
dnssec-dnskey-kskonly <boolean>;
dnssec-loadkeys-interval <integer>;
dnssec-secure-to-insecure <boolean>;
dnssec-update-mode ( maintain | no-resign );
file <quoted_string>;
forward ( first | only );
forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>
| <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };
in-view <string>;
inline-signing <boolean>;
ixfr-base <quoted_string>; // obsolete
ixfr-from-differences <boolean>;
ixfr-tmp-file <quoted_string>; // obsolete
journal <quoted_string>;
key-directory <quoted_string>;
maintain-ixfr-base <boolean>; // obsolete
masterfile-format ( map | raw | text );
masterfile-style ( full | relative );
masters [ port <integer> ] [ dscp <integer> ] { ( <masters> |
<ipv4_address> [ port <integer> ] | <ipv6_address> [ port
<integer> ] ) [ key <string> ]; ... };
max-ixfr-log-size ( default | unlimited | <sizeval> ); // obsolete
max-journal-size ( unlimited | <sizeval> );
max-records <integer>;
max-refresh-time <integer>;
max-retry-time <integer>;
max-transfer-idle-in <integer>;
max-transfer-idle-out <integer>;
max-transfer-time-in <integer>;
max-transfer-time-out <integer>;
max-zone-ttl ( unlimited | <ttlval> );
min-refresh-time <integer>;
min-retry-time <integer>;
multi-master <boolean>;
notify ( explicit | master-only | <boolean> );
notify-delay <integer>;
notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
dscp <integer> ];
notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]
[ dscp <integer> ];
notify-to-soa <boolean>;
nsec3-test-zone <boolean>; // test only
pubkey <integer> <integer>
<integer> <quoted_string>; // obsolete, may occur multiple times
request-expire <boolean>;
request-ixfr <boolean>;
serial-update-method ( date | increment | unixtime );
server-addresses { ( <ipv4_address> | <ipv6_address> ) [ port
<integer> ]; ... };
server-names { <quoted_string>; ... };
sig-signing-nodes <integer>;
sig-signing-signatures <integer>;
sig-signing-type <integer>;
sig-validity-interval <integer> [ <integer> ];
transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
dscp <integer> ];
transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )
] [ dscp <integer> ];
try-tcp-refresh <boolean>;
type ( delegation-only | forward | hint | master | redirect | slave
| static-stub | stub );
update-check-ksk <boolean>;
update-policy ( local | { ( deny | grant ) <string> ( 6to4-self |
external | krb5-self | krb5-subdomain | ms-self | ms-subdomain
| name | self | selfsub | selfwild | subdomain | tcp-self |
wildcard | zonesub ) [ <string> ] <rrtypelist>; ... };
use-alt-transfer-source <boolean>;
zero-no-soa-ttl <boolean>;
zone-statistics ( full | terse | none | <boolean> );
}; // may occur multiple times