mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 06:25:31 +00:00
Code Issues Releases Wiki Activity

regen master

Browse Source
This commit is contained in:
Tinderbox User
2016-11-02 01:07:10 +00:00
parent d68d29f967
commit 05caf20a11
1 changed files with 82 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

139
doc/misc/options
View File

@@ -2,30 +2,35 @@
This is a summary of the named.conf options supported by This is a summary of the named.conf options supported by
this version of BIND 9. this version of BIND 9.
acl <string> { <address_match_element>; ... }; acl <string> { <address_match_element>; ... }; // may occur multiple times
controls { controls {
inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | * inet ( <ipv4_address> | <ipv6_address> |
) ] allow { <address_match_element>; ... } [ keys { <string>; * ) [ port ( <integer> | * ) ] allow
... } ] [ read-only <boolean> ]; { <address_match_element>; ... } [
unix <quoted_string> perm <integer> owner <integer> group <integer> keys { <string>; ... } ] [ read-only
[ keys { <string>; ... } ] [ read-only <boolean> ]; <boolean> ]; // may occur multiple times
}; unix <quoted_string> perm <integer>
owner <integer> group <integer> [
keys { <string>; ... } ] [ read-only
<boolean> ]; // may occur multiple times
}; // may occur multiple times
dlz <string> { dlz <string> {
database <string>; database <string>;
search <boolean>; search <boolean>;
}; }; // may occur multiple times
dyndb <string> <quoted_string> { <unspecified text> }; dyndb <string> <quoted_string> {
<unspecified-text> }; // may occur multiple times
key <string> { key <string> {
algorithm <string>; algorithm <string>;
secret <string>; secret <string>;
}; }; // may occur multiple times
logging { logging {
category <string> { <string>; ... }; category <string> { <string>; ... }; // may occur multiple times
channel <string> { channel <string> {
buffered <boolean>; buffered <boolean>;
file <quoted_string> [ versions ( "unlimited" | <integer> ) file <quoted_string> [ versions ( "unlimited" | <integer> )
@@ -37,7 +42,7 @@ logging {
severity <log_severity>; severity <log_severity>;
stderr; stderr;
syslog [ <syslog_facility> ]; syslog [ <syslog_facility> ];
}; }; // may occur multiple times
}; };
lwres { lwres {
@@ -48,14 +53,15 @@ lwres {
ndots <integer>; ndots <integer>;
search { <string>; ... }; search { <string>; ... };
view <string> [ <class> ]; view <string> [ <class> ];
}; }; // may occur multiple times
managed-keys { <string> <string> <integer> <integer> <integer> managed-keys { <string> <string> <integer>
<quoted_string>; ... }; <integer> <integer> <quoted_string>; ... }; // may occur multiple times
masters <string> [ port <integer> ] [ dscp <integer> ] { ( <masters> | masters <string> [ port <integer> ] [ dscp
<ipv4_address> [ port <integer> ] | <ipv6_address> [ port <integer> ] ) <integer> ] { ( <masters> | <ipv4_address> [
[ key <string> ]; ... }; port <integer> ] | <ipv6_address> [ port
<integer> ] ) [ key <string> ]; ... }; // may occur multiple times
options { options {
acache-cleaning-interval <integer>; acache-cleaning-interval <integer>;
@@ -99,7 +105,8 @@ options {
check-integrity <boolean>; check-integrity <boolean>;
check-mx ( fail | warn | ignore ); check-mx ( fail | warn | ignore );
check-mx-cname ( fail | warn | ignore ); check-mx-cname ( fail | warn | ignore );
check-names ( master | slave | response ) ( fail | warn | ignore ); check-names ( master | slave | response
) ( fail | warn | ignore ); // may occur multiple times
check-sibling <boolean>; check-sibling <boolean>;
check-spf ( warn | ignore ); check-spf ( warn | ignore );
check-srv-cname ( fail | warn | ignore ); check-srv-cname ( fail | warn | ignore );
@@ -117,9 +124,11 @@ options {
<quoted_string>; ... } ]; <quoted_string>; ... } ];
dialup ( notify | notify-passive | refresh | passive | <boolean> ); dialup ( notify | notify-passive | refresh | passive | <boolean> );
directory <quoted_string>; directory <quoted_string>;
disable-algorithms <string> { <string>; ... }; disable-algorithms <string> { <string>;
disable-ds-digests <string> { <string>; ... }; ... }; // may occur multiple times
disable-empty-zone <string>; disable-ds-digests <string> { <string>;
... }; // may occur multiple times
disable-empty-zone <string>; // may occur multiple times
dns64 <netprefix> { dns64 <netprefix> {
break-dnssec <boolean>; break-dnssec <boolean>;
clients { <address_match_element>; ... }; clients { <address_match_element>; ... };
@@ -127,15 +136,16 @@ options {
mapped { <address_match_element>; ... }; mapped { <address_match_element>; ... };
recursive-only <boolean>; recursive-only <boolean>;
suffix <ipv6_address>; suffix <ipv6_address>;
}; }; // may occur multiple times
dns64-contact <string>; dns64-contact <string>;
dns64-server <string>; dns64-server <string>;
dnssec-accept-expired <boolean>; dnssec-accept-expired <boolean>;
dnssec-dnskey-kskonly <boolean>; dnssec-dnskey-kskonly <boolean>;
dnssec-enable <boolean>; dnssec-enable <boolean>;
dnssec-loadkeys-interval <integer>; dnssec-loadkeys-interval <integer>;
dnssec-lookaside ( <string> trust-anchor <string> | auto | no ); dnssec-lookaside ( <string> trust-anchor
dnssec-must-be-secure <string> <boolean>; <string> | auto | no ); // may occur multiple times
dnssec-must-be-secure <string> <boolean>; // may occur multiple times
dnssec-secure-to-insecure <boolean>; dnssec-secure-to-insecure <boolean>;
dnssec-update-mode ( maintain | no-resign ); dnssec-update-mode ( maintain | no-resign );
dnssec-validation ( yes | no | auto ); dnssec-validation ( yes | no | auto );
@@ -188,10 +198,12 @@ options {
keep-response-order { <address_match_element>; ... }; keep-response-order { <address_match_element>; ... };
key-directory <quoted_string>; key-directory <quoted_string>;
lame-ttl <ttlval>; lame-ttl <ttlval>;
listen-on [ port <integer> ] [ dscp <integer> ] { listen-on [ port <integer> ] [ dscp
<address_match_element>; ... }; <integer> ] {
listen-on-v6 [ port <integer> ] [ dscp <integer> ] { <address_match_element>; ... }; // may occur multiple times
<address_match_element>; ... }; listen-on-v6 [ port <integer> ] [ dscp
<integer> ] {
<address_match_element>; ... }; // may occur multiple times
lock-file ( <quoted_string> | none ); lock-file ( <quoted_string> | none );
maintain-ixfr-base <boolean>; // obsolete maintain-ixfr-base <boolean>; // obsolete
managed-keys-directory <quoted_string>; managed-keys-directory <quoted_string>;
@@ -329,7 +341,7 @@ options {
transfers-out <integer>; transfers-out <integer>;
transfers-per-ns <integer>; transfers-per-ns <integer>;
treat-cr-as-space <boolean>; // obsolete treat-cr-as-space <boolean>; // obsolete
trust-anchor-telemetry <boolean>; trust-anchor-telemetry <boolean>; // experimental
try-tcp-refresh <boolean>; try-tcp-refresh <boolean>;
update-check-ksk <boolean>; update-check-ksk <boolean>;
use-alt-transfer-source <boolean>; use-alt-transfer-source <boolean>;
@@ -372,14 +384,17 @@ server <netprefix> {
transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )
] [ dscp <integer> ]; ] [ dscp <integer> ];
transfers <integer>; transfers <integer>;
}; }; // may occur multiple times
statistics-channels { statistics-channels {
inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | * inet ( <ipv4_address> | <ipv6_address> |
) ] [ allow { <address_match_element>; ... } ]; * ) [ port ( <integer> | * ) ] [
}; allow { <address_match_element>; ...
} ]; // may occur multiple times
}; // may occur multiple times
trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... }; trusted-keys { <string> <integer> <integer>
<integer> <quoted_string>; ... }; // may occur multiple times
view <string> [ <class> ] { view <string> [ <class> ] {
acache-cleaning-interval <integer>; acache-cleaning-interval <integer>;
@@ -418,7 +433,8 @@ view <string> [ <class> ] {
check-integrity <boolean>; check-integrity <boolean>;
check-mx ( fail | warn | ignore ); check-mx ( fail | warn | ignore );
check-mx-cname ( fail | warn | ignore ); check-mx-cname ( fail | warn | ignore );
check-names ( master | slave | response ) ( fail | warn | ignore ); check-names ( master | slave | response
) ( fail | warn | ignore ); // may occur multiple times
check-sibling <boolean>; check-sibling <boolean>;
check-spf ( warn | ignore ); check-spf ( warn | ignore );
check-srv-cname ( fail | warn | ignore ); check-srv-cname ( fail | warn | ignore );
@@ -430,13 +446,15 @@ view <string> [ <class> ] {
deny-answer-aliases { <quoted_string>; ... } [ except-from { deny-answer-aliases { <quoted_string>; ... } [ except-from {
<quoted_string>; ... } ]; <quoted_string>; ... } ];
dialup ( notify | notify-passive | refresh | passive | <boolean> ); dialup ( notify | notify-passive | refresh | passive | <boolean> );
disable-algorithms <string> { <string>; ... }; disable-algorithms <string> { <string>;
disable-ds-digests <string> { <string>; ... }; ... }; // may occur multiple times
disable-empty-zone <string>; disable-ds-digests <string> { <string>;
... }; // may occur multiple times
disable-empty-zone <string>; // may occur multiple times
dlz <string> { dlz <string> {
database <string>; database <string>;
search <boolean>; search <boolean>;
}; }; // may occur multiple times
dns64 <netprefix> { dns64 <netprefix> {
break-dnssec <boolean>; break-dnssec <boolean>;
clients { <address_match_element>; ... }; clients { <address_match_element>; ... };
@@ -444,15 +462,16 @@ view <string> [ <class> ] {
mapped { <address_match_element>; ... }; mapped { <address_match_element>; ... };
recursive-only <boolean>; recursive-only <boolean>;
suffix <ipv6_address>; suffix <ipv6_address>;
}; }; // may occur multiple times
dns64-contact <string>; dns64-contact <string>;
dns64-server <string>; dns64-server <string>;
dnssec-accept-expired <boolean>; dnssec-accept-expired <boolean>;
dnssec-dnskey-kskonly <boolean>; dnssec-dnskey-kskonly <boolean>;
dnssec-enable <boolean>; dnssec-enable <boolean>;
dnssec-loadkeys-interval <integer>; dnssec-loadkeys-interval <integer>;
dnssec-lookaside ( <string> trust-anchor <string> | auto | no ); dnssec-lookaside ( <string> trust-anchor
dnssec-must-be-secure <string> <boolean>; <string> | auto | no ); // may occur multiple times
dnssec-must-be-secure <string> <boolean>; // may occur multiple times
dnssec-secure-to-insecure <boolean>; dnssec-secure-to-insecure <boolean>;
dnssec-update-mode ( maintain | no-resign ); dnssec-update-mode ( maintain | no-resign );
dnssec-validation ( yes | no | auto ); dnssec-validation ( yes | no | auto );
@@ -462,7 +481,8 @@ view <string> [ <class> ] {
<integer> ] [ dscp <integer> ] | <ipv4_address> [ port <integer> ] [ dscp <integer> ] | <ipv4_address> [ port
<integer> ] [ dscp <integer> ] | <ipv6_address> [ port <integer> ] [ dscp <integer> ] | <ipv6_address> [ port
<integer> ] [ dscp <integer> ] ); ... }; <integer> ] [ dscp <integer> ] ); ... };
dyndb <string> <quoted_string> { <unspecified text> }; dyndb <string> <quoted_string> {
<unspecified-text> }; // may occur multiple times
edns-udp-size <integer>; edns-udp-size <integer>;
empty-contact <string>; empty-contact <string>;
empty-server <string>; empty-server <string>;
@@ -482,12 +502,13 @@ view <string> [ <class> ] {
key <string> { key <string> {
algorithm <string>; algorithm <string>;
secret <string>; secret <string>;
}; }; // may occur multiple times
key-directory <quoted_string>; key-directory <quoted_string>;
lame-ttl <ttlval>; lame-ttl <ttlval>;
maintain-ixfr-base <boolean>; // obsolete maintain-ixfr-base <boolean>; // obsolete
managed-keys { <string> <string> <integer> <integer> <integer> managed-keys { <string> <string>
<quoted_string>; ... }; <integer> <integer> <integer>
<quoted_string>; ... }; // may occur multiple times
masterfile-format ( text | raw | map ); masterfile-format ( text | raw | map );
masterfile-style ( full | relative ); masterfile-style ( full | relative );
match-clients { <address_match_element>; ... }; match-clients { <address_match_element>; ... };
@@ -602,7 +623,7 @@ view <string> [ <class> ] {
transfer-source-v6 ( <ipv6_address> | * ) [ port ( transfer-source-v6 ( <ipv6_address> | * ) [ port (
<integer> | * ) ] [ dscp <integer> ]; <integer> | * ) ] [ dscp <integer> ];
transfers <integer>; transfers <integer>;
}; }; // may occur multiple times
servfail-ttl <ttlval>; servfail-ttl <ttlval>;
sig-signing-nodes <integer>; sig-signing-nodes <integer>;
sig-signing-signatures <integer>; sig-signing-signatures <integer>;
@@ -616,9 +637,10 @@ view <string> [ <class> ] {
dscp <integer> ]; dscp <integer> ];
transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )
] [ dscp <integer> ]; ] [ dscp <integer> ];
trust-anchor-telemetry <boolean>; trust-anchor-telemetry <boolean>; // experimental
trusted-keys { <string> <integer> <integer> <integer> trusted-keys { <string> <integer>
<quoted_string>; ... }; <integer> <integer> <quoted_string>;
... }; // may occur multiple times
try-tcp-refresh <boolean>; try-tcp-refresh <boolean>;
update-check-ksk <boolean>; update-check-ksk <boolean>;
use-alt-transfer-source <boolean>; use-alt-transfer-source <boolean>;
@@ -699,8 +721,10 @@ view <string> [ <class> ] {
| * ) ] [ dscp <integer> ]; | * ) ] [ dscp <integer> ];
notify-to-soa <boolean>; notify-to-soa <boolean>;
nsec3-test-zone <boolean>; // test only nsec3-test-zone <boolean>; // test only
pubkey <integer> <integer> <integer> pubkey <integer>
<quoted_string>; // obsolete <integer>
<integer>
<quoted_string>; // obsolete, may occur multiple times
request-expire <boolean>; request-expire <boolean>;
request-ixfr <boolean>; request-ixfr <boolean>;
serial-update-method ( increment | unixtime | date ); serial-update-method ( increment | unixtime | date );
@@ -727,9 +751,9 @@ view <string> [ <class> ] {
use-alt-transfer-source <boolean>; use-alt-transfer-source <boolean>;
zero-no-soa-ttl <boolean>; zero-no-soa-ttl <boolean>;
zone-statistics ( full | terse | none | <boolean> ); zone-statistics ( full | terse | none | <boolean> );
}; }; // may occur multiple times
zone-statistics ( full | terse | none | <boolean> ); zone-statistics ( full | terse | none | <boolean> );
}; }; // may occur multiple times
zone <string> [ <class> ] { zone <string> [ <class> ] {
allow-notify { <address_match_element>; ... }; allow-notify { <address_match_element>; ... };
@@ -800,7 +824,8 @@ zone <string> [ <class> ] {
[ dscp <integer> ]; [ dscp <integer> ];
notify-to-soa <boolean>; notify-to-soa <boolean>;
nsec3-test-zone <boolean>; // test only nsec3-test-zone <boolean>; // test only
pubkey <integer> <integer> <integer> <quoted_string>; // obsolete pubkey <integer> <integer>
<integer> <quoted_string>; // obsolete, may occur multiple times
request-expire <boolean>; request-expire <boolean>;
request-ixfr <boolean>; request-ixfr <boolean>;
serial-update-method ( increment | unixtime | date ); serial-update-method ( increment | unixtime | date );
@@ -826,5 +851,5 @@ zone <string> [ <class> ] {
use-alt-transfer-source <boolean>; use-alt-transfer-source <boolean>;
zero-no-soa-ttl <boolean>; zero-no-soa-ttl <boolean>;
zone-statistics ( full | terse | none | <boolean> ); zone-statistics ( full | terse | none | <boolean> );
}; }; // may occur multiple times