2834197ede0bfaec5b57cb1666e0c21f76408570David Lawrence

0ba23b0a24e0c17ee50073789704edaeeae2c360Andreas GustafssonThis is a summary of the named.conf options supported by

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssonthis version of BIND 9.

1bc9afc3313249d656abae2d298c8d84308891d0Andreas Gustafsson

9c3531d72aeaad6c5f01efe6a1c82023e1379e4dDavid Lawrenceacl <string> { <address_match_element>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssoncontrols {

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson ) ] allow { <address_match_element>; ... } [ keys { <string>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson ... } ];

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson unix <quoted_string> perm <integer> owner <integer> group <integer>

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ keys { <string>; ... } ];

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson};

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrencedlz <string> {

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson database <string>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson search <boolean>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson};

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

113251976d99be74da788bdb78300957b77a1381Andreas Gustafssonkey <string> {

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson algorithm <string>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson secret <string>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson};

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson

dbeb32261081835bb9ba44db68df5dfed0fda411Andreas Gustafssonlogging {

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson category <string> { <string>; ... };

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence channel <string> {

a1747570262ed336c213aaf6bd31bc91993a46deAndreas Gustafsson buffered <boolean>;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence file <quoted_string> [ versions ( "unlimited" | <integer> )

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson ] [ size <size> ];

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson null;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson print-category <boolean>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson print-severity <boolean>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson print-time <boolean>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson severity <log_severity>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson stderr;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson syslog <optional_facility>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson};

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssonlwres {

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson listen-on [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson lwres-clients <integer>;

51b951ab2a5e45e6a3994d033fec9b68e1f07985Mark Andrews lwres-tasks <integer>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson ndots <integer>;

1bc9afc3313249d656abae2d298c8d84308891d0Andreas Gustafsson search { <string>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson view <string> <optional_class>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson};

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

113251976d99be74da788bdb78300957b77a1381Andreas Gustafssonmanaged-keys { <string> <string> <integer> <integer> <integer>

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson <quoted_string>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssonmasters <string> [ port <integer> ] [ dscp <integer> ] { ( <masters> |

dbeb32261081835bb9ba44db68df5dfed0fda411Andreas Gustafsson <ipv4_address> [ port <integer> ] | <ipv6_address> [ port <integer> ] )

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson [ key <string> ]; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssonoptions {

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson acache-cleaning-interval <integer>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson acache-enable <boolean>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson additional-from-auth <boolean>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson additional-from-cache <boolean>;

e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington allow-new-zones <boolean>;

ef45c94e927e97ad0c804780a1eca59240088f60Andreas Gustafsson allow-notify { <address_match_element>; ... };

ef45c94e927e97ad0c804780a1eca59240088f60Andreas Gustafsson allow-query { <address_match_element>; ... };

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson allow-query-cache { <address_match_element>; ... };

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson allow-query-cache-on { <address_match_element>; ... };

bfcdcde570be11e3d210cfdd262fae8b8e6c62ceMark Andrews allow-query-on { <address_match_element>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson allow-recursion { <address_match_element>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson allow-recursion-on { <address_match_element>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson allow-transfer { <address_match_element>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson allow-update { <address_match_element>; ... };

7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson allow-update-forwarding { <address_match_element>; ... };

7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson allow-v6-synthesis { <address_match_element>; ... }; // obsolete

19ab334c3f47db2550ff6ad13bbab67ff4090139Andreas Gustafsson also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |

51b951ab2a5e45e6a3994d033fec9b68e1f07985Mark Andrews <ipv4_address> [ port <integer> ] | <ipv6_address> [ port

51b951ab2a5e45e6a3994d033fec9b68e1f07985Mark Andrews <integer> ] ) [ key <string> ]; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )

cfab2f4e039052fd5c71f8de93a9510bec0581f9Andreas Gustafsson ] [ dscp <integer> ];

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

e01ecff4b1562a24e6de7e9396c60e9dffdb78ceAndreas Gustafsson * ) ] [ dscp <integer> ];

cbe5f076ba5595c3d63daa223ea373bef55561b2Andreas Gustafsson attach-cache <string>;

cbe5f076ba5595c3d63daa223ea373bef55561b2Andreas Gustafsson auth-nxdomain <boolean>; // default changed

4bc5101166ec97bf88448efb9a65da600e82040eAndreas Gustafsson auto-dnssec ( allow | maintain | off );

e240e36503adf4d2073adfee98fb17b5b9d10fddAndreas Gustafsson automatic-interface-scan <boolean>;

e240e36503adf4d2073adfee98fb17b5b9d10fddAndreas Gustafsson avoid-v4-udp-ports { <portrange>; ... };

51b951ab2a5e45e6a3994d033fec9b68e1f07985Mark Andrews avoid-v6-udp-ports { <portrange>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson bindkeys-file <quoted_string>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson blackhole { <address_match_element>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson cache-file <quoted_string>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson check-dup-records ( fail | warn | ignore );

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson check-integrity <boolean>;

51b951ab2a5e45e6a3994d033fec9b68e1f07985Mark Andrews check-mx ( fail | warn | ignore );

9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson check-mx-cname ( fail | warn | ignore );

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson check-names ( master | slave | response ) ( fail | warn | ignore );

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson check-sibling <boolean>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson check-spf ( warn | ignore );

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson check-srv-cname ( fail | warn | ignore );

2cc3f128610eb9e42d7c386160665583b63882bfAndreas Gustafsson check-wildcard <boolean>;

2cc3f128610eb9e42d7c386160665583b63882bfAndreas Gustafsson cleaning-interval <integer>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson clients-per-query <integer>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson coresize <size>;

88eee65d8dd3e6051d855ec9f7b375207ed40a87Andreas Gustafsson datasize <size>;

d2148c21700b9739ef125a49897288ad2636f706Andreas Gustafsson deallocate-on-exit <boolean>; // obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson deny-answer-addresses { <address_match_element>; ... } [

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson except-from { <quoted_string>; ... } ];

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson deny-answer-aliases { <quoted_string>; ... } [ except-from {

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson <quoted_string>; ... } ];

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson dialup <dialuptype>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson directory <quoted_string>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson disable-algorithms <string> { <string>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson disable-ds-digests <string> { <string>; ... };

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson disable-empty-zone <string>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson dns64 <netprefix> {

4034406393893f4d07ab07b56da3541155493855Andreas Gustafsson break-dnssec <boolean>;

4034406393893f4d07ab07b56da3541155493855Andreas Gustafsson clients { <address_match_element>; ... };

4034406393893f4d07ab07b56da3541155493855Andreas Gustafsson exclude { <address_match_element>; ... };

4034406393893f4d07ab07b56da3541155493855Andreas Gustafsson mapped { <address_match_element>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson recursive-only <boolean>;

c011a692803976aa5100f7a4e6a1fa8a1ea2c3f3Andreas Gustafsson suffix <ipv6_address>;

fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington };

4bc5101166ec97bf88448efb9a65da600e82040eAndreas Gustafsson dns64-contact <string>;

e240e36503adf4d2073adfee98fb17b5b9d10fddAndreas Gustafsson dns64-server <string>;

4bc5101166ec97bf88448efb9a65da600e82040eAndreas Gustafsson dnssec-accept-expired <boolean>;

e01ecff4b1562a24e6de7e9396c60e9dffdb78ceAndreas Gustafsson dnssec-dnskey-kskonly <boolean>;

2bc0dee981fd5d9c7d7d6fe67278dfafbe614bc3Andreas Gustafsson dnssec-enable <boolean>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson dnssec-loadkeys-interval <integer>;

c011a692803976aa5100f7a4e6a1fa8a1ea2c3f3Andreas Gustafsson dnssec-lookaside ( <string> trust-anchor <string> | auto | no );

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson dnssec-must-be-secure <string> <boolean>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson dnssec-secure-to-insecure <boolean>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson dnssec-update-mode ( maintain | no-resign );

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence dnssec-validation ( yes | no | auto );

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson dscp <integer>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port

4334d2e8a16c4e154e8eb6fb7c7c8e8862771c8cBrian Wellington <integer> ] [ dscp <integer> ] | <ipv4_address> [ port

4334d2e8a16c4e154e8eb6fb7c7c8e8862771c8cBrian Wellington <integer> ] [ dscp <integer> ] | <ipv6_address> [ port

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson <integer> ] [ dscp <integer> ] ); ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson dump-file <quoted_string>;

d2148c21700b9739ef125a49897288ad2636f706Andreas Gustafsson edns-udp-size <integer>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson empty-contact <string>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson empty-server <string>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson empty-zones-enable <boolean>;

38e62f7bfbe301b4718bc9e8525bf141cc080e71Andreas Gustafsson fake-iquery <boolean>; // obsolete

38e62f7bfbe301b4718bc9e8525bf141cc080e71Andreas Gustafsson fetch-glue <boolean>; // obsolete

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson files <size>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson filter-aaaa { <address_match_element>; ... }; // not configured

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson filter-aaaa-on-v4 <filter_aaaa>; // not configured

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson filter-aaaa-on-v6 <filter_aaaa>; // not configured

d2148c21700b9739ef125a49897288ad2636f706Andreas Gustafsson flush-zones-on-shutdown <boolean>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson forward ( first | only );

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson geoip-directory ( <quoted_string> | none ); // not configured

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson geoip-use-ecs ( <quoted_string> | none ); // not configured

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson has-old-clients <boolean>; // obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson heartbeat-interval <integer>;

4334d2e8a16c4e154e8eb6fb7c7c8e8862771c8cBrian Wellington host-statistics <boolean>; // not implemented

4334d2e8a16c4e154e8eb6fb7c7c8e8862771c8cBrian Wellington host-statistics-max <integer>; // not implemented

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson hostname ( <quoted_string> | none );

02da394e0c3220ca2f37c5c6258994bd3ba07993Andreas Gustafsson inline-signing <boolean>;

7eabdeaeeebf4be93de87af803d020d380eb7273Andreas Gustafsson interface-interval <integer>;

38e62f7bfbe301b4718bc9e8525bf141cc080e71Andreas Gustafsson ixfr-from-differences <ixfrdiff>;

38e62f7bfbe301b4718bc9e8525bf141cc080e71Andreas Gustafsson key-directory <quoted_string>;

cbe5f076ba5595c3d63daa223ea373bef55561b2Andreas Gustafsson lame-ttl <ttlval>;

cbe5f076ba5595c3d63daa223ea373bef55561b2Andreas Gustafsson listen-on [ port <integer> ] [ dscp <integer> ] {

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson <address_match_element>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson listen-on-v6 [ port <integer> ] [ dscp <integer> ] {

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson <address_match_element>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson maintain-ixfr-base <boolean>; // obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson managed-keys-directory <quoted_string>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson masterfile-format ( text | raw | map );

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson masterfile-style ( full | relative );

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson match-mapped-addresses <boolean>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson max-acache-size <size_no_default>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson max-cache-size <size_no_default>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson max-cache-ttl <integer>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson max-clients-per-query <integer>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson max-ixfr-log-size <size>; // obsolete

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson max-journal-size <size_no_default>;

4334d2e8a16c4e154e8eb6fb7c7c8e8862771c8cBrian Wellington max-ncache-ttl <integer>;

4334d2e8a16c4e154e8eb6fb7c7c8e8862771c8cBrian Wellington max-recursion-depth <integer>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson max-refresh-time <integer>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson max-retry-time <integer>;

51b951ab2a5e45e6a3994d033fec9b68e1f07985Mark Andrews max-rsa-exponent-size <integer>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson max-transfer-idle-in <integer>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson max-transfer-idle-out <integer>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson max-transfer-time-in <integer>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson max-transfer-time-out <integer>;

51b951ab2a5e45e6a3994d033fec9b68e1f07985Mark Andrews max-udp-size <integer>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson max-zone-ttl <maxttl_no_default>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson memstatistics <boolean>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson memstatistics-file <quoted_string>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson min-refresh-time <integer>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson min-retry-time <integer>;

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson min-roots <integer>; // not implemented

335a4599898f181f18b618a5ac4fe4e083ecd308Andreas Gustafsson minimal-responses <boolean>;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence multi-master <boolean>;

4334d2e8a16c4e154e8eb6fb7c7c8e8862771c8cBrian Wellington multiple-cnames <boolean>; // obsolete

4334d2e8a16c4e154e8eb6fb7c7c8e8862771c8cBrian Wellington named-xfer <quoted_string>; // obsolete

4334d2e8a16c4e154e8eb6fb7c7c8e8862771c8cBrian Wellington no-case-compress { <address_match_element>; ... };

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson nosit-udp-size <integer>; // not configured

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson notify <notifytype>;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence notify-delay <integer>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson notify-rate <integer>;

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson dscp <integer> ];

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson [ dscp <integer> ];

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson notify-to-soa <boolean>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson nsec3-test-zone <boolean>; // test only

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson nta-lifetime <ttlval>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson nta-recheck <ttlval>;

1bc9afc3313249d656abae2d298c8d84308891d0Andreas Gustafsson pid-file ( <quoted_string> | none );

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson port <integer>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson preferred-glue <string>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson prefetch <integer> [ <integer> ];

fea398993b583058fb8167902eed3eedd26f464cAndreas Gustafsson provide-ixfr <boolean>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson query-source <querysource4>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson query-source-v6 <querysource6>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson querylog <boolean>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson queryport-pool-ports <integer>; // obsolete

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson queryport-pool-updateinterval <integer>; // obsolete

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson random-device <quoted_string>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson rate-limit {

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson all-per-second <integer>;

51b951ab2a5e45e6a3994d033fec9b68e1f07985Mark Andrews errors-per-second <integer>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson exempt-clients { <address_match_element>; ... };

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson ipv4-prefix-length <integer>;

7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson ipv6-prefix-length <integer>;

7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson log-only <boolean>;

19ab334c3f47db2550ff6ad13bbab67ff4090139Andreas Gustafsson max-table-size <integer>;

51b951ab2a5e45e6a3994d033fec9b68e1f07985Mark Andrews min-table-size <integer>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson nodata-per-second <integer>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson nxdomains-per-second <integer>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson qps-scale <integer>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson referrals-per-second <integer>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson responses-per-second <integer>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson slip <integer>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson window <integer>;

98c7e0d8ba881f06f56716d6f7098d54643f4f2fAndreas Gustafsson };

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson recursing-file <quoted_string>;

98c7e0d8ba881f06f56716d6f7098d54643f4f2fAndreas Gustafsson recursion <boolean>;

98c7e0d8ba881f06f56716d6f7098d54643f4f2fAndreas Gustafsson recursive-clients <integer>;

fea398993b583058fb8167902eed3eedd26f464cAndreas Gustafsson request-expire <boolean>;

d2148c21700b9739ef125a49897288ad2636f706Andreas Gustafsson request-ixfr <boolean>;

113251976d99be74da788bdb78300957b77a1381Andreas Gustafsson request-nsid <boolean>;

request-sit <boolean>; // not configured

reserved-sockets <integer>;

resolver-query-timeout <integer>;

response-policy { zone <quoted_string> [ policy ( given | disabled

| passthru | no-op | drop | tcp-only | nxdomain | nodata |

cname <quoted_string> ) ] [ recursive-only <boolean> ] [

max-policy-ttl <integer> ]; ... } [ recursive-only <boolean> ]

[ break-dnssec <boolean> ] [ max-policy-ttl <integer> ] [

min-ns-dots <integer> ] [ qname-wait-recurse <boolean> ];

rfc2308-type1 <boolean>; // not yet implemented

root-delegation-only [ exclude { <quoted_string>; ... } ];

rrset-order { [ class <string> ] [ type <string> ] [ name

<quoted_string> ] <string> <string>; ... };

secroots-file <quoted_string>;

serial-queries <integer>; // obsolete

serial-query-rate <integer>;

serial-update-method ( increment | unixtime | date );

server-id ( <quoted_string> | none | hostname );

servfail-ttl <ttlval>;

session-keyalg <string>;

session-keyfile ( <quoted_string> | none );

session-keyname <string>;

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

sit-secret <string>; // not configured

sortlist { <address_match_element>; ... };

stacksize <size>;

startup-notify-rate <integer>;

statistics-file <quoted_string>;

statistics-interval <integer>; // not yet implemented

suppress-initial-notify <boolean>; // not yet implemented

tcp-clients <integer>;

tcp-listen-queue <integer>;

tkey-dhkey <quoted_string> <integer>;

tkey-domain <quoted_string>;

tkey-gssapi-credential <quoted_string>;

tkey-gssapi-keytab <quoted_string>;

topology { <address_match_element>; ... }; // not implemented

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )

] [ dscp <integer> ];

transfers-in <integer>;

transfers-out <integer>;

transfers-per-ns <integer>;

treat-cr-as-space <boolean>; // obsolete

try-tcp-refresh <boolean>;

update-check-ksk <boolean>;

use-alt-transfer-source <boolean>;

use-id-pool <boolean>; // obsolete

use-ixfr <boolean>;

use-queryport-pool <boolean>; // obsolete

use-v4-udp-ports { <portrange>; ... };

use-v6-udp-ports { <portrange>; ... };

version ( <quoted_string> | none );

zero-no-soa-ttl <boolean>;

zero-no-soa-ttl-cache <boolean>;

zone-statistics <zonestat>;

};

server <netprefix> {

bogus <boolean>;

edns <boolean>;

edns-udp-size <integer>;

edns-version <integer>;

keys <server_key>;

max-udp-size <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]

[ dscp <integer> ];

provide-ixfr <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

request-expire <boolean>;

request-ixfr <boolean>;

request-nsid <boolean>;

request-sit <boolean>; // not configured

support-ixfr <boolean>; // obsolete

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )

] [ dscp <integer> ];

transfers <integer>;

};

statistics-channels {

inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *

) ] [ allow { <address_match_element>; ... } ];

};

trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };

view <string> <optional_class> {

acache-cleaning-interval <integer>;

acache-enable <boolean>;

additional-from-auth <boolean>;

additional-from-cache <boolean>;

allow-new-zones <boolean>;

allow-notify { <address_match_element>; ... };

allow-query { <address_match_element>; ... };

allow-query-cache { <address_match_element>; ... };

allow-query-cache-on { <address_match_element>; ... };

allow-query-on { <address_match_element>; ... };

allow-recursion { <address_match_element>; ... };

allow-recursion-on { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

allow-v6-synthesis { <address_match_element>; ... }; // obsolete

also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |

<ipv4_address> [ port <integer> ] | <ipv6_address> [ port

<integer> ] ) [ key <string> ]; ... };

alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )

] [ dscp <integer> ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

* ) ] [ dscp <integer> ];

attach-cache <string>;

auth-nxdomain <boolean>; // default changed

auto-dnssec ( allow | maintain | off );

cache-file <quoted_string>;

check-dup-records ( fail | warn | ignore );

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-names ( master | slave | response ) ( fail | warn | ignore );

check-sibling <boolean>;

check-spf ( warn | ignore );

check-srv-cname ( fail | warn | ignore );

check-wildcard <boolean>;

cleaning-interval <integer>;

clients-per-query <integer>;

deny-answer-addresses { <address_match_element>; ... } [

except-from { <quoted_string>; ... } ];

deny-answer-aliases { <quoted_string>; ... } [ except-from {

<quoted_string>; ... } ];

dialup <dialuptype>;

disable-algorithms <string> { <string>; ... };

disable-ds-digests <string> { <string>; ... };

disable-empty-zone <string>;

dlz <string> {

database <string>;

search <boolean>;

};

dns64 <netprefix> {

break-dnssec <boolean>;

clients { <address_match_element>; ... };

exclude { <address_match_element>; ... };

mapped { <address_match_element>; ... };

recursive-only <boolean>;

suffix <ipv6_address>;

};

dns64-contact <string>;

dns64-server <string>;

dnssec-accept-expired <boolean>;

dnssec-dnskey-kskonly <boolean>;

dnssec-enable <boolean>;

dnssec-loadkeys-interval <integer>;

dnssec-lookaside ( <string> trust-anchor <string> | auto | no );

dnssec-must-be-secure <string> <boolean>;

dnssec-secure-to-insecure <boolean>;

dnssec-update-mode ( maintain | no-resign );

dnssec-validation ( yes | no | auto );

dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port

<integer> ] [ dscp <integer> ] | <ipv4_address> [ port

<integer> ] [ dscp <integer> ] | <ipv6_address> [ port

<integer> ] [ dscp <integer> ] ); ... };

edns-udp-size <integer>;

empty-contact <string>;

empty-server <string>;

empty-zones-enable <boolean>;

fetch-glue <boolean>; // obsolete

filter-aaaa { <address_match_element>; ... }; // not configured

filter-aaaa-on-v4 <filter_aaaa>; // not configured

filter-aaaa-on-v6 <filter_aaaa>; // not configured

forward ( first | only );

forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>

| <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };

inline-signing <boolean>;

ixfr-from-differences <ixfrdiff>;

key <string> {

algorithm <string>;

secret <string>;

};

key-directory <quoted_string>;

lame-ttl <ttlval>;

maintain-ixfr-base <boolean>; // obsolete

managed-keys { <string> <string> <integer> <integer> <integer>

<quoted_string>; ... };

masterfile-format ( text | raw | map );

masterfile-style ( full | relative );

match-clients { <address_match_element>; ... };

match-destinations { <address_match_element>; ... };

match-recursive-only <boolean>;

max-acache-size <size_no_default>;

max-cache-size <size_no_default>;

max-cache-ttl <integer>;

max-clients-per-query <integer>;

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-ncache-ttl <integer>;

max-recursion-depth <integer>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

max-udp-size <integer>;

max-zone-ttl <maxttl_no_default>;

min-refresh-time <integer>;

min-retry-time <integer>;

min-roots <integer>; // not implemented

minimal-responses <boolean>;

multi-master <boolean>;

no-case-compress { <address_match_element>; ... };

nosit-udp-size <integer>; // not configured

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]

[ dscp <integer> ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

nta-lifetime <ttlval>;

nta-recheck <ttlval>;

preferred-glue <string>;

prefetch <integer> [ <integer> ];

provide-ixfr <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

queryport-pool-ports <integer>; // obsolete

queryport-pool-updateinterval <integer>; // obsolete

rate-limit {

all-per-second <integer>;

errors-per-second <integer>;

exempt-clients { <address_match_element>; ... };

ipv4-prefix-length <integer>;

ipv6-prefix-length <integer>;

log-only <boolean>;

max-table-size <integer>;

min-table-size <integer>;

nodata-per-second <integer>;

nxdomains-per-second <integer>;

qps-scale <integer>;

referrals-per-second <integer>;

responses-per-second <integer>;

slip <integer>;

window <integer>;

};

recursion <boolean>;

request-expire <boolean>;

request-ixfr <boolean>;

request-nsid <boolean>;

request-sit <boolean>; // not configured

resolver-query-timeout <integer>;

response-policy { zone <quoted_string> [ policy ( given | disabled

| passthru | no-op | drop | tcp-only | nxdomain | nodata |

cname <quoted_string> ) ] [ recursive-only <boolean> ] [

max-policy-ttl <integer> ]; ... } [ recursive-only <boolean> ]

[ break-dnssec <boolean> ] [ max-policy-ttl <integer> ] [

min-ns-dots <integer> ] [ qname-wait-recurse <boolean> ];

rfc2308-type1 <boolean>; // not yet implemented

root-delegation-only [ exclude { <quoted_string>; ... } ];

rrset-order { [ class <string> ] [ type <string> ] [ name

<quoted_string> ] <string> <string>; ... };

serial-update-method ( increment | unixtime | date );

server <netprefix> {

bogus <boolean>;

edns <boolean>;

edns-udp-size <integer>;

edns-version <integer>;

keys <server_key>;

max-udp-size <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | *

) ] [ dscp <integer> ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>

| * ) ] [ dscp <integer> ];

provide-ixfr <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

request-expire <boolean>;

request-ixfr <boolean>;

request-nsid <boolean>;

request-sit <boolean>; // not configured

support-ixfr <boolean>; // obsolete

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> |

* ) ] [ dscp <integer> ];

transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ] [ dscp <integer> ];

transfers <integer>;

};

servfail-ttl <ttlval>;

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

sortlist { <address_match_element>; ... };

suppress-initial-notify <boolean>; // not yet implemented

topology { <address_match_element>; ... }; // not implemented

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )

] [ dscp <integer> ];

trusted-keys { <string> <integer> <integer> <integer>

<quoted_string>; ... };

try-tcp-refresh <boolean>;

update-check-ksk <boolean>;

use-alt-transfer-source <boolean>;

use-queryport-pool <boolean>; // obsolete

zero-no-soa-ttl <boolean>;

zero-no-soa-ttl-cache <boolean>;

zone <string> <optional_class> {

allow-notify { <address_match_element>; ... };

allow-query { <address_match_element>; ... };

allow-query-on { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

also-notify [ port <integer> ] [ dscp <integer> ] { (

<masters> | <ipv4_address> [ port <integer> ] |

<ipv6_address> [ port <integer> ] ) [ key <string> ];

... };

alt-transfer-source ( <ipv4_address> | * ) [ port (

<integer> | * ) ] [ dscp <integer> ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ] [ dscp <integer> ];

auto-dnssec ( allow | maintain | off );

check-dup-records ( fail | warn | ignore );

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-names ( fail | warn | ignore );

check-sibling <boolean>;

check-spf ( warn | ignore );

check-srv-cname ( fail | warn | ignore );

check-wildcard <boolean>;

database <string>;

delegation-only <boolean>;

dialup <dialuptype>;

dlz <string>;

dnssec-dnskey-kskonly <boolean>;

dnssec-loadkeys-interval <integer>;

dnssec-secure-to-insecure <boolean>;

dnssec-update-mode ( maintain | no-resign );

file <quoted_string>;

forward ( first | only );

forwarders [ port <integer> ] [ dscp <integer> ] { (

<ipv4_address> | <ipv6_address> ) [ port <integer> ] [

dscp <integer> ]; ... };

in-view <string>;

inline-signing <boolean>;

ixfr-base <quoted_string>; // obsolete

ixfr-from-differences <boolean>;

ixfr-tmp-file <quoted_string>; // obsolete

journal <quoted_string>;

key-directory <quoted_string>;

maintain-ixfr-base <boolean>; // obsolete

masterfile-format ( text | raw | map );

masterfile-style ( full | relative );

masters [ port <integer> ] [ dscp <integer> ] { ( <masters>

| <ipv4_address> [ port <integer> ] | <ipv6_address> [

port <integer> ] ) [ key <string> ]; ... };

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

max-zone-ttl <maxttl_no_default>;

min-refresh-time <integer>;

min-retry-time <integer>;

multi-master <boolean>;

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | *

) ] [ dscp <integer> ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>

| * ) ] [ dscp <integer> ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

pubkey <integer> <integer> <integer>

<quoted_string>; // obsolete

request-expire <boolean>;

request-ixfr <boolean>;

serial-update-method ( increment | unixtime | date );

server-addresses { ( <ipv4_address> | <ipv6_address> ) [

port <integer> ]; ... };

server-names { <quoted_string>; ... };

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

transfer-source ( <ipv4_address> | * ) [ port ( <integer> |

* ) ] [ dscp <integer> ];

transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ] [ dscp <integer> ];

try-tcp-refresh <boolean>;

type ( master | slave | stub | static-stub | hint | forward

| delegation-only | redirect );

update-check-ksk <boolean>;

update-policy ( local | { ( grant | deny ) <string> ( name

| subdomain | wildcard | self | selfsub | selfwild |

krb5-self | ms-self | krb5-subdomain | ms-subdomain |

tcp-self | 6to4-self | zonesub | external ) [ <string>

] <rrtypelist>; ... };

use-alt-transfer-source <boolean>;

zero-no-soa-ttl <boolean>;

zone-statistics <zonestat>;

};

zone-statistics <zonestat>;

};

zone <string> <optional_class> {

allow-notify { <address_match_element>; ... };

allow-query { <address_match_element>; ... };

allow-query-on { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |

<ipv4_address> [ port <integer> ] | <ipv6_address> [ port

<integer> ] ) [ key <string> ]; ... };

alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )

] [ dscp <integer> ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

* ) ] [ dscp <integer> ];

auto-dnssec ( allow | maintain | off );

check-dup-records ( fail | warn | ignore );

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-names ( fail | warn | ignore );

check-sibling <boolean>;

check-spf ( warn | ignore );

check-srv-cname ( fail | warn | ignore );

check-wildcard <boolean>;

database <string>;

delegation-only <boolean>;

dialup <dialuptype>;

dlz <string>;

dnssec-dnskey-kskonly <boolean>;

dnssec-loadkeys-interval <integer>;

dnssec-secure-to-insecure <boolean>;

dnssec-update-mode ( maintain | no-resign );

file <quoted_string>;

forward ( first | only );

forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>

| <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };

in-view <string>;

inline-signing <boolean>;

ixfr-base <quoted_string>; // obsolete

ixfr-from-differences <boolean>;

ixfr-tmp-file <quoted_string>; // obsolete

journal <quoted_string>;

key-directory <quoted_string>;

maintain-ixfr-base <boolean>; // obsolete

masterfile-format ( text | raw | map );

masterfile-style ( full | relative );

masters [ port <integer> ] [ dscp <integer> ] { ( <masters> |

<ipv4_address> [ port <integer> ] | <ipv6_address> [ port

<integer> ] ) [ key <string> ]; ... };

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

max-zone-ttl <maxttl_no_default>;

min-refresh-time <integer>;

min-retry-time <integer>;

multi-master <boolean>;

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]

[ dscp <integer> ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

pubkey <integer> <integer> <integer> <quoted_string>; // obsolete

request-expire <boolean>;

request-ixfr <boolean>;

serial-update-method ( increment | unixtime | date );

server-addresses { ( <ipv4_address> | <ipv6_address> ) [ port

<integer> ]; ... };

server-names { <quoted_string>; ... };

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

dscp <integer> ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )

] [ dscp <integer> ];

try-tcp-refresh <boolean>;

type ( master | slave | stub | static-stub | hint | forward |

delegation-only | redirect );

update-check-ksk <boolean>;

update-policy ( local | { ( grant | deny ) <string> ( name |

subdomain | wildcard | self | selfsub | selfwild | krb5-self |

ms-self | krb5-subdomain | ms-subdomain | tcp-self | 6to4-self

| zonesub | external ) [ <string> ] <rrtypelist>; ... };

use-alt-transfer-source <boolean>;

zero-no-soa-ttl <boolean>;

zone-statistics <zonestat>;

};