mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-08-31 06:25:31 +00:00
e488309da7
Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
15 lines
742 B
Plaintext
15 lines
742 B
Plaintext
zone <string> [ <class> ] {
|
|
type redirect;
|
|
allow-query { <address_match_element>; ... };
|
|
allow-query-on { <address_match_element>; ... };
|
|
dlz <string>;
|
|
file <quoted_string>;
|
|
masterfile-format ( map | raw | text );
|
|
masterfile-style ( full | relative );
|
|
masters [ port <integer> ] [ dscp <integer> ] { ( <primaries> | <ipv4_address> [ port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ] [ tls <string> ]; ... };
|
|
max-records <integer>;
|
|
max-zone-ttl ( unlimited | <duration> );
|
|
primaries [ port <integer> ] [ dscp <integer> ] { ( <primaries> | <ipv4_address> [ port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ] [ tls <string> ]; ... };
|
|
zone-statistics ( full | terse | none | <boolean> );
|
|
};
|