options revision 10b865e9187fc77cae02f106ddcc9e03eecdfe06
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane GraberThis is a summary of the named.conf options supported by
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graberthis version of BIND 9.
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graberacl <string> { <address_match_element>; ... };
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber ) ] allow { <address_match_element>; ... } [ keys { <string>;
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber unix <quoted_string> perm <integer> owner <integer> group <integer>
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber [ keys { <string>; ... } ];
4295c5de9ed4b2e857cf2d981b4de8188bf2de2eSerge Hallyndlz <string> {
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber database <string>;
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber search <boolean>;
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graberdyndb <string> <quoted_string> { <unspecified text> };
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graberkey <string> {
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber algorithm <string>;
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber secret <string>;
e827ff7e2f3c1c18e5823312482f0f45e03cb6a8Stéphane Graber category <string> { <string>; ... };
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber channel <string> {
4ba0d9af63fbf7e9acfa068a1fe36b3d287b9c6bStéphane Graber buffered <boolean>;
edaf8b1bf1ca57202af0ffb53dcd665b01695888Stéphane Graber file <quoted_string> [ versions ( "unlimited" | <integer> )
edaf8b1bf1ca57202af0ffb53dcd665b01695888Stéphane Graber ] [ size <size> ];
e827ff7e2f3c1c18e5823312482f0f45e03cb6a8Stéphane Graber print-category <boolean>;
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber print-severity <boolean>;
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber print-time <boolean>;
2b25068a3dc719a7b107d2c7009b06104b53a520Stéphane Graber severity <log_severity>;
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber syslog [ <syslog_facility> ];
9dbcd668334605c79f89a1e6890cc1ecdead858cStéphane Graber listen-on [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater lwres-clients <integer>;
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater lwres-tasks <integer>;
0ad19a3fc3de5592e2453070a818a5a41687900edlezcano ndots <integer>;
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen search { <string>; ... };
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen view <string> [ <class> ];
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engenmanaged-keys { <string> <string> <integer> <integer> <integer>
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen <quoted_string>; ... };
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engenmasters <string> [ port <integer> ] [ dscp <integer> ] { ( <masters> |
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen <ipv4_address> [ port <integer> ] | <ipv6_address> [ port <integer> ] )
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen [ key <string> ]; ... };
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater acache-cleaning-interval <integer>;
cda02a28c0f41feb359ebbddd68ed5f1dcd4930eMichel Normand acache-enable <boolean>;
ff462013b67312c730e0c177c439708f28a8c36dSerge Hallyn additional-from-auth <boolean>;
724e753cb0055b84f896522e8c5ec45ad996c195Michel Normand additional-from-cache <boolean>;
563f2f2ccd2891661836c96f92f047a735355c1bDaniel Lezcano allow-new-zones <boolean>;
0ae4f887a40947d6a85e17927224b982bcd35047Greg Kurz allow-notify { <address_match_element>; ... };
0ad19a3fc3de5592e2453070a818a5a41687900edlezcano allow-query { <address_match_element>; ... };
b0a33c1eb65d2c87e886c740a0dadd8ad5f8d87ddlezcano allow-query-cache { <address_match_element>; ... };
0ad19a3fc3de5592e2453070a818a5a41687900edlezcano allow-query-cache-on { <address_match_element>; ... };
5841258071d756a14321b863e01e752f0a9b02d4dlezcano allow-query-on { <address_match_element>; ... };
b2718c72a7f6ffed1fe359f49dba92f067207afadlezcano allow-recursion { <address_match_element>; ... };
4fb3cba5bc6b256b774e780f2bbf47b1dbcc0ce9Dwight Engen allow-recursion-on { <address_match_element>; ... };
4fb3cba5bc6b256b774e780f2bbf47b1dbcc0ce9Dwight Engen allow-transfer { <address_match_element>; ... };
0ad19a3fc3de5592e2453070a818a5a41687900edlezcano allow-update { <address_match_element>; ... };
4295c5de9ed4b2e857cf2d981b4de8188bf2de2eSerge Hallyn allow-update-forwarding { <address_match_element>; ... };
e3642c43e6599fb1bfdd2e763e034c5c46299a46Daniel Lezcano allow-v6-synthesis { <address_match_element>; ... }; // obsolete
3c22086fe242c1cbb51e1df4add3052d3618c2caCedric Le Goater also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |
5bb3ba8acd29d11c92845b06a1f0852b642f02c7Daniel Lezcano <ipv4_address> [ port <integer> ] | <ipv6_address> [ port
13954cce6335d9a642ebd9859c60a2f01c4513ecDaniel Lezcano <integer> ] ) [ key <string> ]; ... };
df83bf6f97e5ddbe50a31aaa75078014d52c0288Daniel Lezcano alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )
951cc719a3e71a3ac98c92b343f2391af400e830Daniel Lezcano ] [ dscp <integer> ];
35d2c3e71d5e7ada9878e9cb8f6039f0b02b3458Daniel Lezcano alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
731cc33fb7e75085e4281f295c6c9d806f8d3ad5Daniel Lezcano * ) ] [ dscp <integer> ];
e073270504f2f5c5df90bfcc4917d2d20b73d1e7Christian Seiler attach-cache <string>;
e29fe1dd21a58d1deddb3ca3bf3eaf260c525b10Tycho Andersen auth-nxdomain <boolean>; // default changed
0ad19a3fc3de5592e2453070a818a5a41687900edlezcano auto-dnssec ( allow | maintain | off );
0ad19a3fc3de5592e2453070a818a5a41687900edlezcano automatic-interface-scan <boolean>;
1c8e4ee0a08638e35732a0ddd0052ecde49fbecbStéphane Graber avoid-v4-udp-ports { <portrange>; ... };
1c8e4ee0a08638e35732a0ddd0052ecde49fbecbStéphane Graber avoid-v6-udp-ports { <portrange>; ... };
1c8e4ee0a08638e35732a0ddd0052ecde49fbecbStéphane Graber bindkeys-file <quoted_string>;
13832f48ed30e150f5f6cebab7b78b2c99cbcb05dlezcano blackhole { <address_match_element>; ... };
b3357a6f5b90f1e342c270de66491afc412c1cf7Daniel Lezcano cache-file <quoted_string>;
c8dee0f165d19271bb0a83069dcbb65fbc02e73fSerge Hallyn check-dup-records ( fail | warn | ignore );
b0a33c1eb65d2c87e886c740a0dadd8ad5f8d87ddlezcano check-integrity <boolean>;
563f2f2ccd2891661836c96f92f047a735355c1bDaniel Lezcano check-mx ( fail | warn | ignore );
563f2f2ccd2891661836c96f92f047a735355c1bDaniel Lezcano check-mx-cname ( fail | warn | ignore );
565c2d76a30d29ecce76ca595cf79dd1e528399eStéphane Graber check-names ( master | slave | response ) ( fail | warn | ignore );
72d0e1cb2facaa4b8ba2f15e311d6bb9491badb7Stéphane Graber check-sibling <boolean>;
b6b918a1d4f91da7bb41da202112ac8fddf947f7Stéphane Graber check-spf ( warn | ignore );
95ee490bbdb97ab2b4f1dfa63a0a26e0dd1c2f17Stéphane Graber check-srv-cname ( fail | warn | ignore );
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen check-wildcard <boolean>;
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen cleaning-interval <integer>;
0ad19a3fc3de5592e2453070a818a5a41687900edlezcano clients-per-query <integer>;
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn cookie-algorithm ( aes | sha1 | sha256 );
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn cookie-secret <string>;
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn coresize ( unlimited | default | <sizeval> );
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn datasize ( unlimited | default | <sizeval> );
e827ff7e2f3c1c18e5823312482f0f45e03cb6a8Stéphane Graber deallocate-on-exit <boolean>; // obsolete
e827ff7e2f3c1c18e5823312482f0f45e03cb6a8Stéphane Graber deny-answer-addresses { <address_match_element>; ... } [
4ba0d9af63fbf7e9acfa068a1fe36b3d287b9c6bStéphane Graber except-from { <quoted_string>; ... } ];
edaf8b1bf1ca57202af0ffb53dcd665b01695888Stéphane Graber deny-answer-aliases { <quoted_string>; ... } [ except-from {
edaf8b1bf1ca57202af0ffb53dcd665b01695888Stéphane Graber <quoted_string>; ... } ];
e827ff7e2f3c1c18e5823312482f0f45e03cb6a8Stéphane Graber dialup ( notify | notify-passive | refresh | passive | <boolean> );
e827ff7e2f3c1c18e5823312482f0f45e03cb6a8Stéphane Graber directory <quoted_string>;
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber disable-algorithms <string> { <string>; ... };
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber disable-ds-digests <string> { <string>; ... };
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber disable-empty-zone <string>;
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber dns64 <netprefix> {
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber break-dnssec <boolean>;
1ba0013f21e1953ae4a59cdf61562fbe843077e9Stéphane Graber clients { <address_match_element>; ... };
9c7c90377cdc655b7d853a43dd93de439a4c1677Daniel Lezcano exclude { <address_match_element>; ... };
1c41ddcb4af633ac906f1d7c9ef1dc7d121d7850Greg Kurz mapped { <address_match_element>; ... };
1c41ddcb4af633ac906f1d7c9ef1dc7d121d7850Greg Kurz recursive-only <boolean>;
2a59a68183e55e38beedb6442938e31eb7d4749cSerge Hallyn suffix <ipv6_address>;
45e854dc86514a472ff1496d01321c77c12c0aa4Stéphane Graber dns64-contact <string>;
5e1e7aaf1e244405b813c0f9e20db2fc9e7f4d10Serge Hallyn dns64-server <string>;
0a18b5458b6d0fcad9a82b96f99035254af50c7aSerge Hallyn dnssec-accept-expired <boolean>;
070a4b8e68a6bf9a96c24ded47974388c83f1d57Serge Hallyn dnssec-dnskey-kskonly <boolean>;
070a4b8e68a6bf9a96c24ded47974388c83f1d57Serge Hallyn dnssec-enable <boolean>;
6e16552de7cef98827c7a699464008e2cd9e2c32Christian Seiler dnssec-loadkeys-interval <integer>;
061ba5d071e4c2b4bfe76c84875bc29cc5334c27Stéphane Graber dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
718e4f484272f73ae25e988fe361afd5a91d1ca5Serge Hallyn dnssec-must-be-secure <string> <boolean>;
718e4f484272f73ae25e988fe361afd5a91d1ca5Serge Hallyn dnssec-secure-to-insecure <boolean>;
b9f94fc1e8afdf814ee72cb01a5d298dfa4a7d75Daniel Lezcano dnssec-update-mode ( maintain | no-resign );
e075f5d9b64175dad6e591e3f1d05a8434c4699fSerge Hallyn dnssec-validation ( yes | no | auto );
e075f5d9b64175dad6e591e3f1d05a8434c4699fSerge Hallyn dnstap { ( client | resolver | auth | forwarder |
e075f5d9b64175dad6e591e3f1d05a8434c4699fSerge Hallyn all ) [ ( query | response ) ]; ... }; // not configured
e075f5d9b64175dad6e591e3f1d05a8434c4699fSerge Hallyn dnstap-identity ( <quoted_string> | none |
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn hostname ); // not configured
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn dnstap-output ( file | unix ) <quoted_string>; // not configured
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn dnstap-version ( <quoted_string> | none ); // not configured
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn dscp <integer>;
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen <integer> ] [ dscp <integer> ] | <ipv4_address> [ port
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen <integer> ] [ dscp <integer> ] | <ipv6_address> [ port
fe4de9a66d112cb9ddd5977dcce075323f29a39aDwight Engen <integer> ] [ dscp <integer> ] ); ... };
5e1e7aaf1e244405b813c0f9e20db2fc9e7f4d10Serge Hallyn dump-file <quoted_string>;
5e1e7aaf1e244405b813c0f9e20db2fc9e7f4d10Serge Hallyn edns-udp-size <integer>;
5e1e7aaf1e244405b813c0f9e20db2fc9e7f4d10Serge Hallyn empty-contact <string>;
5e1e7aaf1e244405b813c0f9e20db2fc9e7f4d10Serge Hallyn empty-server <string>;
8f2c3a702aae3545b631a2b4c6db99f87528553aSerge Hallyn empty-zones-enable <boolean>;
12dcc8928f33fa0d45357d30bca532f9a35327a5Jiri Slaby fake-iquery <boolean>; // obsolete
c8dee0f165d19271bb0a83069dcbb65fbc02e73fSerge Hallyn fetch-glue <boolean>; // obsolete
8f2c3a702aae3545b631a2b4c6db99f87528553aSerge Hallyn fetch-quota-params <integer> <fixedpoint> <fixedpoint> <fixedpoint>;
8f2c3a702aae3545b631a2b4c6db99f87528553aSerge Hallyn fetches-per-server <integer> [ ( drop | fail ) ];
67c4fe9b2dc41b843dbac1b3b38ea96e4d2b6a07Stéphane Graber fetches-per-zone <integer> [ ( drop | fail ) ];
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater files ( unlimited | default | <sizeval> );
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater filter-aaaa { <address_match_element>; ... }; // not configured
67c4fe9b2dc41b843dbac1b3b38ea96e4d2b6a07Stéphane Graber filter-aaaa-on-v4 ( break-dnssec | <boolean> ); // not configured
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater filter-aaaa-on-v6 ( break-dnssec | <boolean> ); // not configured
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater flush-zones-on-shutdown <boolean>;
5b46e19c3f0c3f89e8d853d0239b5ab3a2e049a2Cedric Le Goater forward ( first | only );
e9aeeadec1f4413bfcd9ca98a570b53e4c4c9361Dwight Engen forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>
20d2e91bd3495f4368396cd13a0507d716703286Stéphane Graber | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };
76613030602012cf7393cea1cbfec5f56bb9f5f5Dwight Engen geoip-directory ( <quoted_string> | none ); // not configured
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn geoip-use-ecs ( <quoted_string> | none ); // not configured
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn has-old-clients <boolean>; // obsolete
76613030602012cf7393cea1cbfec5f56bb9f5f5Dwight Engen heartbeat-interval <integer>;
d4ef7c50ae980d13f6e7a44c595228a8cba9d8f2Serge Hallyn host-statistics <boolean>; // not implemented