d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews

d9b4174233b951f25cd53a2787b9f14314258c2fMark AndrewsThis is a summary of the named.conf options supported by

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrewsthis version of BIND 9.

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrewsacl <string> { <address_match_element>; ... };

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrewscontrols {

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews ) ] allow { <address_match_element>; ... } [ keys { <string>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews ... } ];

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews unix <quoted_string> perm <integer> owner <integer> group <integer>

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews [ keys { <string>; ... } ];

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews};

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrewsdlz <string> {

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews database <string>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews search <boolean>;

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews};

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrewskey <string> {

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews algorithm <string>;

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews secret <string>;

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews};

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrewslogging {

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews category <string> { <string>; ... };

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews channel <string> {

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews file <quoted_string> [ versions ( "unlimited" | <integer> )

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews ] [ size <size> ];

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews null;

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews print-category <boolean>;

95317501208f3bf5b159e6a40801b7069f68c486Mark Andrews print-severity <boolean>;

73cac2175470e9068829589476dda8bd6d88036fMark Andrews print-time <boolean>;

73cac2175470e9068829589476dda8bd6d88036fMark Andrews severity <log_severity>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews stderr;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews syslog <optional_facility>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews };

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews};

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrewslwres {

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews listen-on [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews ndots <integer>;

01163d188b89911c3a23fe1125a4cab6764a408cMark Andrews search { <string>; ... };

01163d188b89911c3a23fe1125a4cab6764a408cMark Andrews view <string> <optional_class>;

01163d188b89911c3a23fe1125a4cab6764a408cMark Andrews};

01163d188b89911c3a23fe1125a4cab6764a408cMark Andrews

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrewsmanaged-keys { <string> <string> <integer> <integer> <integer>

648ba62b1f156cbca14d54d06c535385f1193d13Mark Andrews <quoted_string>; ... };

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrewsmasters <string> [ port <integer> ] [ dscp <integer> ] { ( <masters> |

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews <ipv4_address> [ port <integer> ] | <ipv6_address> [ port <integer> ] )

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews [ key <string> ]; ... };

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrewsoptions {

35665db4e49e3e4c0e3776e635449f931f3732cfMark Andrews acache-cleaning-interval <integer>;

c6313caa6cd9d011ac075048d2b62fd3410162dfMark Andrews acache-enable <boolean>;

d6dc0d4f584352d2e4305435599ae8c93776d9b4Mark Andrews additional-from-auth <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews additional-from-cache <boolean>;

bdfd62f497fe0d5281c25b61271595a4c821a040Mark Andrews allow-new-zones <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews allow-notify { <address_match_element>; ... };

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews allow-query { <address_match_element>; ... };

bdfd62f497fe0d5281c25b61271595a4c821a040Mark Andrews allow-query-cache { <address_match_element>; ... };

bdfd62f497fe0d5281c25b61271595a4c821a040Mark Andrews allow-query-cache-on { <address_match_element>; ... };

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews allow-query-on { <address_match_element>; ... };

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews allow-recursion { <address_match_element>; ... };

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews allow-recursion-on { <address_match_element>; ... };

bdfd62f497fe0d5281c25b61271595a4c821a040Mark Andrews allow-transfer { <address_match_element>; ... };

bdfd62f497fe0d5281c25b61271595a4c821a040Mark Andrews allow-update { <address_match_element>; ... };

bdfd62f497fe0d5281c25b61271595a4c821a040Mark Andrews allow-update-forwarding { <address_match_element>; ... };

bdfd62f497fe0d5281c25b61271595a4c821a040Mark Andrews allow-v6-synthesis { <address_match_element>; ... }; // obsolete

bdfd62f497fe0d5281c25b61271595a4c821a040Mark Andrews also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews <ipv4_address> [ port <integer> ] | <ipv6_address> [ port

d6dc0d4f584352d2e4305435599ae8c93776d9b4Mark Andrews <integer> ] ) [ key <string> ]; ... };

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews ] [ dscp <integer> ];

64cde9d94a2f6c7050f00d9651df6b05e63d09f2Mark Andrews alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews * ) ] [ dscp <integer> ];

cbb94d52f98b48e8c3a8866dbf8c67860764f349Mark Andrews attach-cache <string>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews auth-nxdomain <boolean>; // default changed

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews auto-dnssec ( allow | maintain | off );

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews avoid-v4-udp-ports { <portrange>; ... };

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews avoid-v6-udp-ports { <portrange>; ... };

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews bindkeys-file <quoted_string>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews blackhole { <address_match_element>; ... };

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews cache-file <quoted_string>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews check-dup-records ( fail | warn | ignore );

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews check-integrity <boolean>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews check-mx ( fail | warn | ignore );

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews check-mx-cname ( fail | warn | ignore );

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews check-names ( master | slave | response ) ( fail | warn | ignore );

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews check-sibling <boolean>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews check-srv-cname ( fail | warn | ignore );

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews check-wildcard <boolean>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews cleaning-interval <integer>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews clients-per-query <integer>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews coresize <size>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews datasize <size>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews deallocate-on-exit <boolean>; // obsolete

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews deny-answer-addresses { <address_match_element>; ... } [

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews except-from { <quoted_string>; ... } ];

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews deny-answer-aliases { <quoted_string>; ... } [ except-from {

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews <quoted_string>; ... } ];

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews dialup <dialuptype>;

d6dc0d4f584352d2e4305435599ae8c93776d9b4Mark Andrews directory <quoted_string>;

d6dc0d4f584352d2e4305435599ae8c93776d9b4Mark Andrews disable-algorithms <string> { <string>; ... };

d6dc0d4f584352d2e4305435599ae8c93776d9b4Mark Andrews disable-ds-digests <string> { <string>; ... };

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews disable-empty-zone <string>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews dns64 <netprefix> {

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews break-dnssec <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews clients { <address_match_element>; ... };

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews exclude { <address_match_element>; ... };

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews mapped { <address_match_element>; ... };

61a03692ab84504fb2bd85b71facfe0f6456b466Mark Andrews recursive-only <boolean>;

61a03692ab84504fb2bd85b71facfe0f6456b466Mark Andrews suffix <ipv6_address>;

61a03692ab84504fb2bd85b71facfe0f6456b466Mark Andrews };

61a03692ab84504fb2bd85b71facfe0f6456b466Mark Andrews dns64-contact <string>;

61a03692ab84504fb2bd85b71facfe0f6456b466Mark Andrews dns64-server <string>;

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews dnssec-accept-expired <boolean>;

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews dnssec-dnskey-kskonly <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews dnssec-enable <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews dnssec-loadkeys-interval <integer>;

8f8634e66351e292925dde8ab6b0418a0141f86aMark Andrews dnssec-lookaside ( <string> trust-anchor <string> | auto | no );

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews dnssec-must-be-secure <string> <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews dnssec-secure-to-insecure <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews dnssec-update-mode ( maintain | no-resign );

61a03692ab84504fb2bd85b71facfe0f6456b466Mark Andrews dnssec-validation ( yes | no | auto );

68843c99b695bf194b019d465f6d33e6297fd02aMark Andrews dscp <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews <integer> ] [ dscp <integer> ] | <ipv4_address> [ port

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews <integer> ] [ dscp <integer> ] | <ipv6_address> [ port

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews <integer> ] [ dscp <integer> ] ); ... };

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews dump-file <quoted_string>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews edns-udp-size <integer>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews empty-contact <string>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews empty-server <string>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews empty-zones-enable <boolean>;

514f6f14245f42c96f3d5e90462ce2ebe0597d2eMark Andrews fake-iquery <boolean>; // obsolete

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews fetch-glue <boolean>; // obsolete

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews files <size>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews filter-aaaa { <address_match_element>; ... }; // not configured

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews filter-aaaa-on-v4 <filter_aaaa>; // not configured

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews filter-aaaa-on-v6 <filter_aaaa>; // not configured

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews flush-zones-on-shutdown <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews forward ( first | only );

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews has-old-clients <boolean>; // obsolete

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews heartbeat-interval <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews host-statistics <boolean>; // not implemented

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews host-statistics-max <integer>; // not implemented

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews hostname ( <quoted_string> | none );

d6dc0d4f584352d2e4305435599ae8c93776d9b4Mark Andrews inline-signing <boolean>;

d6dc0d4f584352d2e4305435599ae8c93776d9b4Mark Andrews interface-interval <integer>;

d6dc0d4f584352d2e4305435599ae8c93776d9b4Mark Andrews ixfr-from-differences <ixfrdiff>;

d6dc0d4f584352d2e4305435599ae8c93776d9b4Mark Andrews key-directory <quoted_string>;

d6dc0d4f584352d2e4305435599ae8c93776d9b4Mark Andrews lame-ttl <integer>;

d6dc0d4f584352d2e4305435599ae8c93776d9b4Mark Andrews listen-on [ port <integer> ] [ dscp <integer> ] {

d6dc0d4f584352d2e4305435599ae8c93776d9b4Mark Andrews <address_match_element>; ... };

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews listen-on-v6 [ port <integer> ] [ dscp <integer> ] {

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews <address_match_element>; ... };

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews maintain-ixfr-base <boolean>; // obsolete

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews managed-keys-directory <quoted_string>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews masterfile-format ( text | raw | map );

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews match-mapped-addresses <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-acache-size <size_no_default>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-cache-size <size_no_default>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-cache-ttl <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-clients-per-query <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-ixfr-log-size <size>; // obsolete

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-journal-size <size_no_default>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-ncache-ttl <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-refresh-time <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-retry-time <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-rsa-exponent-size <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-transfer-idle-in <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-transfer-idle-out <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-transfer-time-in <integer>;

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews max-transfer-time-out <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-udp-size <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews memstatistics <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews memstatistics-file <quoted_string>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews min-refresh-time <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews min-retry-time <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews min-roots <integer>; // not implemented

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews minimal-responses <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews multi-master <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews multiple-cnames <boolean>; // obsolete

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews named-xfer <quoted_string>; // obsolete

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews notify <notifytype>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews notify-delay <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews dscp <integer> ];

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews [ dscp <integer> ];

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews notify-to-soa <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews nsec3-test-zone <boolean>; // test only

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews pid-file ( <quoted_string> | none );

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews port <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews preferred-glue <string>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews provide-ixfr <boolean>;

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews query-source <querysource4>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews query-source-v6 <querysource6>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews querylog <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews queryport-pool-ports <integer>; // obsolete

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews queryport-pool-updateinterval <integer>; // obsolete

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews random-device <quoted_string>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews rate-limit {

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews all-per-second <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews errors-per-second <integer>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews exempt-clients { <address_match_element>; ... };

b08e3be5dbfba22719ae9c428bd6853ac6f09798Mark Andrews ipv4-prefix-length <integer>;

f91671c7dc877a52adc06d0a7d0ed1c7f6391e6eMark Andrews ipv6-prefix-length <integer>;

f91671c7dc877a52adc06d0a7d0ed1c7f6391e6eMark Andrews log-only <boolean>;

d9b4174233b951f25cd53a2787b9f14314258c2fMark Andrews max-table-size <integer>;

min-table-size <integer>;

nodata-per-second <integer>;

nxdomains-per-second <integer>;

qps-scale <integer>;

referrals-per-second <integer>;

responses-per-second <integer>;

slip <integer>;

window <integer>;

};

recursing-file <quoted_string>;

recursion <boolean>;

recursive-clients <integer>;

request-ixfr <boolean>;

request-ixfr <boolean>;

request-nsid <boolean>;

reserved-sockets <integer>;

resolver-query-timeout <integer>;

response-policy { zone <quoted_string> [ policy ( given | disabled

| passthru | no-op | nxdomain | nodata | cname <quoted_string>

) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ];

... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [

max-policy-ttl <integer> ] [ min-ns-dots <integer> ] [

qname-wait-recurse <boolean> ];

rfc2308-type1 <boolean>; // not yet implemented

root-delegation-only [ exclude { <quoted_string>; ... } ];

rrset-order { [ class <string> ] [ type <string> ] [ name

<quoted_string> ] <string> <string>; ... };

secroots-file <quoted_string>;

serial-queries <integer>; // obsolete

serial-query-rate <integer>;

serial-update-method ( increment | unixtime );

server-id ( <quoted_string> | none | hostname );

session-keyalg <string>;

session-keyfile ( <quoted_string> | none );

session-keyname <string>;

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

sortlist { <address_match_element>; ... };

stacksize <size>;

statistics-file <quoted_string>;

statistics-interval <integer>; // not yet implemented

suppress-initial-notify <boolean>; // not yet implemented

tcp-clients <integer>;

tcp-listen-queue <integer>;

tkey-dhkey <quoted_string> <integer>;

tkey-domain <quoted_string>;

tkey-gssapi-credential <quoted_string>;

tkey-gssapi-keytab <quoted_string>;

topology { <address_match_element>; ... }; // not implemented

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )

] [ dscp <integer> ];

transfers-in <integer>;

transfers-out <integer>;

transfers-per-ns <integer>;

treat-cr-as-space <boolean>; // obsolete

try-tcp-refresh <boolean>;

update-check-ksk <boolean>;

use-alt-transfer-source <boolean>;

use-id-pool <boolean>; // obsolete

use-ixfr <boolean>;

use-queryport-pool <boolean>; // obsolete

use-v4-udp-ports { <portrange>; ... };

use-v6-udp-ports { <portrange>; ... };

version ( <quoted_string> | none );

zero-no-soa-ttl <boolean>;

zero-no-soa-ttl-cache <boolean>;

zone-statistics <zonestat>;

};

server <netprefix> {

bogus <boolean>;

edns <boolean>;

edns-udp-size <integer>;

keys <server_key>;

max-udp-size <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]

[ dscp <integer> ];

provide-ixfr <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

request-ixfr <boolean>;

support-ixfr <boolean>; // obsolete

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )

] [ dscp <integer> ];

transfers <integer>;

};

statistics-channels {

inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *

) ] [ allow { <address_match_element>; ... } ];

};

trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };

view <string> <optional_class> {

acache-cleaning-interval <integer>;

acache-enable <boolean>;

additional-from-auth <boolean>;

additional-from-cache <boolean>;

allow-new-zones <boolean>;

allow-notify { <address_match_element>; ... };

allow-query { <address_match_element>; ... };

allow-query-cache { <address_match_element>; ... };

allow-query-cache-on { <address_match_element>; ... };

allow-query-on { <address_match_element>; ... };

allow-recursion { <address_match_element>; ... };

allow-recursion-on { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

allow-v6-synthesis { <address_match_element>; ... }; // obsolete

also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |

<ipv4_address> [ port <integer> ] | <ipv6_address> [ port

<integer> ] ) [ key <string> ]; ... };

alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )

] [ dscp <integer> ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

* ) ] [ dscp <integer> ];

attach-cache <string>;

auth-nxdomain <boolean>; // default changed

auto-dnssec ( allow | maintain | off );

cache-file <quoted_string>;

check-dup-records ( fail | warn | ignore );

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-names ( master | slave | response ) ( fail | warn | ignore );

check-sibling <boolean>;

check-srv-cname ( fail | warn | ignore );

check-wildcard <boolean>;

cleaning-interval <integer>;

clients-per-query <integer>;

database <string>;

deny-answer-addresses { <address_match_element>; ... } [

except-from { <quoted_string>; ... } ];

deny-answer-aliases { <quoted_string>; ... } [ except-from {

<quoted_string>; ... } ];

dialup <dialuptype>;

disable-algorithms <string> { <string>; ... };

disable-ds-digests <string> { <string>; ... };

disable-empty-zone <string>;

dlz <string> {

database <string>;

search <boolean>;

};

dns64 <netprefix> {

break-dnssec <boolean>;

clients { <address_match_element>; ... };

exclude { <address_match_element>; ... };

mapped { <address_match_element>; ... };

recursive-only <boolean>;

suffix <ipv6_address>;

};

dns64-contact <string>;

dns64-server <string>;

dnssec-accept-expired <boolean>;

dnssec-dnskey-kskonly <boolean>;

dnssec-enable <boolean>;

dnssec-loadkeys-interval <integer>;

dnssec-lookaside ( <string> trust-anchor <string> | auto | no );

dnssec-must-be-secure <string> <boolean>;

dnssec-secure-to-insecure <boolean>;

dnssec-update-mode ( maintain | no-resign );

dnssec-validation ( yes | no | auto );

dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port

<integer> ] [ dscp <integer> ] | <ipv4_address> [ port

<integer> ] [ dscp <integer> ] | <ipv6_address> [ port

<integer> ] [ dscp <integer> ] ); ... };

edns-udp-size <integer>;

empty-contact <string>;

empty-server <string>;

empty-zones-enable <boolean>;

fetch-glue <boolean>; // obsolete

filter-aaaa { <address_match_element>; ... }; // not configured

filter-aaaa-on-v4 <filter_aaaa>; // not configured

filter-aaaa-on-v6 <filter_aaaa>; // not configured

forward ( first | only );

forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>

| <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };

inline-signing <boolean>;

ixfr-from-differences <ixfrdiff>;

key <string> {

algorithm <string>;

secret <string>;

};

key-directory <quoted_string>;

lame-ttl <integer>;

maintain-ixfr-base <boolean>; // obsolete

managed-keys { <string> <string> <integer> <integer> <integer>

<quoted_string>; ... };

masterfile-format ( text | raw | map );

match-clients { <address_match_element>; ... };

match-destinations { <address_match_element>; ... };

match-recursive-only <boolean>;

max-acache-size <size_no_default>;

max-cache-size <size_no_default>;

max-cache-ttl <integer>;

max-clients-per-query <integer>;

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-ncache-ttl <integer>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

max-udp-size <integer>;

min-refresh-time <integer>;

min-retry-time <integer>;

min-roots <integer>; // not implemented

minimal-responses <boolean>;

multi-master <boolean>;

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]

[ dscp <integer> ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

preferred-glue <string>;

provide-ixfr <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

queryport-pool-ports <integer>; // obsolete

queryport-pool-updateinterval <integer>; // obsolete

rate-limit {

all-per-second <integer>;

errors-per-second <integer>;

exempt-clients { <address_match_element>; ... };

ipv4-prefix-length <integer>;

ipv6-prefix-length <integer>;

log-only <boolean>;

max-table-size <integer>;

min-table-size <integer>;

nodata-per-second <integer>;

nxdomains-per-second <integer>;

qps-scale <integer>;

referrals-per-second <integer>;

responses-per-second <integer>;

slip <integer>;

window <integer>;

};

recursion <boolean>;

request-ixfr <boolean>;

request-ixfr <boolean>;

request-nsid <boolean>;

resolver-query-timeout <integer>;

response-policy { zone <quoted_string> [ policy ( given | disabled

| passthru | no-op | nxdomain | nodata | cname <quoted_string>

) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ];

... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [

max-policy-ttl <integer> ] [ min-ns-dots <integer> ] [

qname-wait-recurse <boolean> ];

rfc2308-type1 <boolean>; // not yet implemented

root-delegation-only [ exclude { <quoted_string>; ... } ];

rrset-order { [ class <string> ] [ type <string> ] [ name

<quoted_string> ] <string> <string>; ... };

search <boolean>;

serial-update-method ( increment | unixtime );

server <netprefix> {

bogus <boolean>;

edns <boolean>;

edns-udp-size <integer>;

keys <server_key>;

max-udp-size <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | *

) ] [ dscp <integer> ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>

| * ) ] [ dscp <integer> ];

provide-ixfr <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

request-ixfr <boolean>;

support-ixfr <boolean>; // obsolete

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> |

* ) ] [ dscp <integer> ];

transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ] [ dscp <integer> ];

transfers <integer>;

};

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

sortlist { <address_match_element>; ... };

suppress-initial-notify <boolean>; // not yet implemented

topology { <address_match_element>; ... }; // not implemented

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )

] [ dscp <integer> ];

trusted-keys { <string> <integer> <integer> <integer>

<quoted_string>; ... };

try-tcp-refresh <boolean>;

update-check-ksk <boolean>;

use-alt-transfer-source <boolean>;

use-queryport-pool <boolean>; // obsolete

zero-no-soa-ttl <boolean>;

zero-no-soa-ttl-cache <boolean>;

zone <string> <optional_class> {

allow-notify { <address_match_element>; ... };

allow-query { <address_match_element>; ... };

allow-query-on { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

also-notify [ port <integer> ] [ dscp <integer> ] { (

<masters> | <ipv4_address> [ port <integer> ] |

<ipv6_address> [ port <integer> ] ) [ key <string> ];

... };

alt-transfer-source ( <ipv4_address> | * ) [ port (

<integer> | * ) ] [ dscp <integer> ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ] [ dscp <integer> ];

auto-dnssec ( allow | maintain | off );

check-dup-records ( fail | warn | ignore );

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-names ( fail | warn | ignore );

check-sibling <boolean>;

check-srv-cname ( fail | warn | ignore );

check-wildcard <boolean>;

database <string>;

delegation-only <boolean>;

dialup <dialuptype>;

dlz <string>;

dnssec-dnskey-kskonly <boolean>;

dnssec-loadkeys-interval <integer>;

dnssec-secure-to-insecure <boolean>;

dnssec-update-mode ( maintain | no-resign );

file <quoted_string>;

forward ( first | only );

forwarders [ port <integer> ] [ dscp <integer> ] { (

<ipv4_address> | <ipv6_address> ) [ port <integer> ] [

dscp <integer> ]; ... };

inline-signing <boolean>;

ixfr-base <quoted_string>; // obsolete

ixfr-from-differences <boolean>;

ixfr-tmp-file <quoted_string>; // obsolete

journal <quoted_string>;

key-directory <quoted_string>;

maintain-ixfr-base <boolean>; // obsolete

masterfile-format ( text | raw | map );

masters [ port <integer> ] [ dscp <integer> ] { ( <masters>

| <ipv4_address> [ port <integer> ] | <ipv6_address> [

port <integer> ] ) [ key <string> ]; ... };

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

min-refresh-time <integer>;

min-retry-time <integer>;

multi-master <boolean>;

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | *

) ] [ dscp <integer> ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>

| * ) ] [ dscp <integer> ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

pubkey <integer> <integer> <integer>

<quoted_string>; // obsolete

request-ixfr <boolean>;

serial-update-method ( increment | unixtime );

server-addresses { ( <ipv4_address> | <ipv6_address> ) [

port <integer> ]; ... };

server-names { <quoted_string>; ... };

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

transfer-source ( <ipv4_address> | * ) [ port ( <integer> |

* ) ] [ dscp <integer> ];

transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ] [ dscp <integer> ];

try-tcp-refresh <boolean>;

type ( master | slave | stub | static-stub | hint | forward

| delegation-only | redirect );

update-check-ksk <boolean>;

update-policy ( local | { ( grant | deny ) <string> ( name

| subdomain | wildcard | self | selfsub | selfwild |

krb5-self | ms-self | krb5-subdomain | ms-subdomain |

tcp-self | 6to4-self | zonesub | external ) [ <string>

] <rrtypelist>; ... };

use-alt-transfer-source <boolean>;

zero-no-soa-ttl <boolean>;

zone-statistics <zonestat>;

};

zone-statistics <zonestat>;

};

zone <string> <optional_class> {

allow-notify { <address_match_element>; ... };

allow-query { <address_match_element>; ... };

allow-query-on { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |

<ipv4_address> [ port <integer> ] | <ipv6_address> [ port

<integer> ] ) [ key <string> ]; ... };

alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )

] [ dscp <integer> ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

* ) ] [ dscp <integer> ];

auto-dnssec ( allow | maintain | off );

check-dup-records ( fail | warn | ignore );

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-names ( fail | warn | ignore );

check-sibling <boolean>;

check-srv-cname ( fail | warn | ignore );

check-wildcard <boolean>;

database <string>;

delegation-only <boolean>;

dialup <dialuptype>;

dlz <string>;

dnssec-dnskey-kskonly <boolean>;

dnssec-loadkeys-interval <integer>;

dnssec-secure-to-insecure <boolean>;

dnssec-update-mode ( maintain | no-resign );

file <quoted_string>;

forward ( first | only );

forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>

| <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };

inline-signing <boolean>;

ixfr-base <quoted_string>; // obsolete

ixfr-from-differences <boolean>;

ixfr-tmp-file <quoted_string>; // obsolete

journal <quoted_string>;

key-directory <quoted_string>;

maintain-ixfr-base <boolean>; // obsolete

masterfile-format ( text | raw | map );

masters [ port <integer> ] [ dscp <integer> ] { ( <masters> |

<ipv4_address> [ port <integer> ] | <ipv6_address> [ port

<integer> ] ) [ key <string> ]; ... };

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

min-refresh-time <integer>;

min-retry-time <integer>;

multi-master <boolean>;

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]

[ dscp <integer> ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

pubkey <integer> <integer> <integer> <quoted_string>; // obsolete

request-ixfr <boolean>;

serial-update-method ( increment | unixtime );

server-addresses { ( <ipv4_address> | <ipv6_address> ) [ port

<integer> ]; ... };

server-names { <quoted_string>; ... };

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )

] [ dscp <integer> ];

try-tcp-refresh <boolean>;

type ( master | slave | stub | static-stub | hint | forward |

delegation-only | redirect );

update-check-ksk <boolean>;

update-policy ( local | { ( grant | deny ) <string> ( name |

subdomain | wildcard | self | selfsub | selfwild | krb5-self |

ms-self | krb5-subdomain | ms-subdomain | tcp-self | 6to4-self

| zonesub | external ) [ <string> ] <rrtypelist>; ... };

use-alt-transfer-source <boolean>;

zero-no-soa-ttl <boolean>;

zone-statistics <zonestat>;

};