diff --git a/bin/named/named.conf.docbook b/bin/named/named.conf.docbook index 01dc81be6c..d6aebe76fb 100644 --- a/bin/named/named.conf.docbook +++ b/bin/named/named.conf.docbook @@ -337,6 +337,8 @@ options { memstatistics boolean; memstatistics-file quoted_string; message-compression boolean; + min-cache-ttl ttlval; + min-ncache-ttl ttlval; min-refresh-time integer; min-retry-time integer; minimal-any boolean; diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml index 6d50a37cdb..d03dfa1434 100644 --- a/doc/arm/Bv9ARM-book.xml +++ b/doc/arm/Bv9ARM-book.xml @@ -4311,6 +4311,8 @@ badresp:1,adberr:0,findfail:0,valfail:0] max-ncache-ttl, max-stale-ttl, max-cache-size, and + min-cache-ttl, + min-ncache-ttl, zero-no-soa-ttl. @@ -8995,6 +8997,38 @@ avoid-v6-udp-ports { 40000; range 50000 60000; }; + + min-ncache-ttl + + + To reduce network traffic and increase performance, the server + stores negative answers. min-ncache-ttl is + used to set a minimum retention time for these answers in the + server in seconds. For convenience, TTL-style time unit + suffixes may be used to specify the value. The default + min-ncache-ttl is 0 + seconds. min-ncache-ttl cannot exceed 90 + seconds and will be truncated to 90 seconds if set to a + greater value. + + + + + + min-cache-ttl + + + Sets the minimum time for which the server will cache ordinary + (positive) answers in seconds. For convenience, TTL-style time + unit suffixes may be used to specify the value. The default + min-cache-ttl is 0 + seconds. min-cache-ttl cannot exceed 90 + seconds and will be truncated to 90 seconds if set to a + greater value. + + + + max-ncache-ttl diff --git a/doc/misc/options b/doc/misc/options index 441cda28df..02d05afdb5 100644 --- a/doc/misc/options +++ b/doc/misc/options @@ -89,9 +89,9 @@ options { bindkeys-file ; blackhole { ; ... }; cache-file ; - catalog-zones { zone [ default-masters [ port - ] [ dscp ] { ( | [ - port ] | [ port ] ) [ key + catalog-zones { zone [ default-masters [ port ] + [ dscp ] { ( | [ port + ] | [ port ] ) [ key ]; ... } ] [ zone-directory ] [ in-memory ] [ min-update-interval ]; ... }; check-dup-records ( fail | warn | ignore ); @@ -183,7 +183,7 @@ options { fstrm-set-output-queue-model ( mpsc | spsc ); fstrm-set-output-queue-size ; fstrm-set-reopen-interval ; - geoip-directory ( | none ); + geoip-directory ( | none ); // not configured geoip-use-ecs ; // obsolete glue-cache ; has-old-clients ; // obsolete @@ -234,6 +234,8 @@ options { memstatistics ; memstatistics-file ; message-compression ; + min-cache-ttl ; + min-ncache-ttl ; min-refresh-time ; min-retry-time ; min-roots ; // not implemented @@ -305,18 +307,17 @@ options { resolver-retry-interval ; response-padding { ; ... } block-size ; - response-policy { zone [ log ] [ - max-policy-ttl ] [ min-update-interval ] [ - policy ( cname | disabled | drop | given | no-op | nodata | - nxdomain | passthru | tcp-only ) ] [ - recursive-only ] [ nsip-enable ] [ - nsdname-enable ]; ... } [ break-dnssec ] [ - max-policy-ttl ] [ min-update-interval ] [ - min-ns-dots ] [ nsip-wait-recurse ] [ - qname-wait-recurse ] [ recursive-only ] [ - nsip-enable ] [ nsdname-enable ] [ - dnsrps-enable ] [ dnsrps-options { - } ]; + response-policy { zone [ log ] [ max-policy-ttl + ] [ min-update-interval ] [ policy ( cname | + disabled | drop | given | no-op | nodata | nxdomain | passthru + | tcp-only ) ] [ recursive-only ] [ + nsip-enable ] [ nsdname-enable ]; ... } [ + break-dnssec ] [ max-policy-ttl ] [ + min-update-interval ] [ min-ns-dots ] [ + nsip-wait-recurse ] [ qname-wait-recurse ] + [ recursive-only ] [ nsip-enable ] [ + nsdname-enable ] [ dnsrps-enable ] [ + dnsrps-options { } ]; rfc2308-type1 ; // not yet implemented root-delegation-only [ exclude { ; ... } ]; root-key-sentinel ; @@ -457,9 +458,9 @@ view [ ] { auth-nxdomain ; // default changed auto-dnssec ( allow | maintain | off ); cache-file ; - catalog-zones { zone [ default-masters [ port - ] [ dscp ] { ( | [ - port ] | [ port ] ) [ key + catalog-zones { zone [ default-masters [ port ] + [ dscp ] { ( | [ port + ] | [ port ] ) [ key ]; ... } ] [ zone-directory ] [ in-memory ] [ min-update-interval ]; ... }; check-dup-records ( fail | warn | ignore ); @@ -574,6 +575,8 @@ view [ ] { max-udp-size ; max-zone-ttl ( unlimited | ); message-compression ; + min-cache-ttl ; + min-ncache-ttl ; min-refresh-time ; min-retry-time ; min-roots ; // not implemented @@ -635,18 +638,17 @@ view [ ] { resolver-retry-interval ; response-padding { ; ... } block-size ; - response-policy { zone [ log ] [ - max-policy-ttl ] [ min-update-interval ] [ - policy ( cname | disabled | drop | given | no-op | nodata | - nxdomain | passthru | tcp-only ) ] [ - recursive-only ] [ nsip-enable ] [ - nsdname-enable ]; ... } [ break-dnssec ] [ - max-policy-ttl ] [ min-update-interval ] [ - min-ns-dots ] [ nsip-wait-recurse ] [ - qname-wait-recurse ] [ recursive-only ] [ - nsip-enable ] [ nsdname-enable ] [ - dnsrps-enable ] [ dnsrps-options { - } ]; + response-policy { zone [ log ] [ max-policy-ttl + ] [ min-update-interval ] [ policy ( cname | + disabled | drop | given | no-op | nodata | nxdomain | passthru + | tcp-only ) ] [ recursive-only ] [ + nsip-enable ] [ nsdname-enable ]; ... } [ + break-dnssec ] [ max-policy-ttl ] [ + min-update-interval ] [ min-ns-dots ] [ + nsip-wait-recurse ] [ qname-wait-recurse ] + [ recursive-only ] [ nsip-enable ] [ + nsdname-enable ] [ dnsrps-enable ] [ + dnsrps-options { } ]; rfc2308-type1 ; // not yet implemented root-delegation-only [ exclude { ; ... } ]; root-key-sentinel ;