1NAMED.CONF(5) BIND9 NAMED.CONF(5)
2
6 named.conf - configuration file for named
7
9 named.conf
10
12 named.conf is the configuration file for named. Statements are enclosed
13 in braces and terminated with a semi-colon. Clauses in the statements
14 are also semi-colon terminated. The usual comment styles are supported:
15 C style: /* */
17 C++ style: // to end of line
19 Unix style: # to end of line
21
23 acl string { address_match_element; ... };
24
26 controls {
27 inet ( ipv4_address | ipv6_address |
28 * ) [ port ( integer | * ) ] allow
29 { address_match_element; ... } [
30 keys { string; ... } ] [ read-only
31 boolean ];
32 unix quoted_string perm integer
33 owner integer group integer [
34 keys { string; ... } ] [ read-only
35 boolean ];
36 };
37
39 dlz string {
40 database string;
41 search boolean;
42 };
43
45 dyndb string quoted_string {
46 unspecified-text };
47
49 key string {
50 algorithm string;
51 secret string;
52 };
53
55 logging {
56 category string { string; ... };
57 channel string {
58 buffered boolean;
59 file quoted_string [ versions ( "unlimited" | integer )
60 ] [ size size ];
61 null;
62 print-category boolean;
63 print-severity boolean;
64 print-time boolean;
65 severity log_severity;
66 stderr;
67 syslog [ syslog_facility ];
68 };
69 };
70
72 lwres {
73 listen-on [ port integer ] [ dscp integer ] { ( ipv4_address
74 | ipv6_address ) [ port integer ] [ dscp integer ]; ... };
75 lwres-clients integer;
76 lwres-tasks integer;
77 ndots integer;
78 search { string; ... };
79 view string [ class ];
80 };
81
83 managed-keys { string string integer
84 integer integer quoted_string; ... };
85
87 masters string [ port integer ] [ dscp
88 integer ] { ( masters | ipv4_address [
89 port integer ] | ipv6_address [ port
90 integer ] ) [ key string ]; ... };
91
93 options {
94 acache-cleaning-interval integer;
95 acache-enable boolean;
96 additional-from-auth boolean;
97 additional-from-cache boolean;
98 allow-new-zones boolean;
99 allow-notify { address_match_element; ... };
100 allow-query { address_match_element; ... };
101 allow-query-cache { address_match_element; ... };
102 allow-query-cache-on { address_match_element; ... };
103 allow-query-on { address_match_element; ... };
104 allow-recursion { address_match_element; ... };
105 allow-recursion-on { address_match_element; ... };
106 allow-transfer { address_match_element; ... };
107 allow-update { address_match_element; ... };
108 allow-update-forwarding { address_match_element; ... };
109 also-notify [ port integer ] [ dscp integer ] { ( masters |
110 ipv4_address [ port integer ] | ipv6_address [ port
111 integer ] ) [ key string ]; ... };
112 alt-transfer-source ( ipv4_address | * ) [ port ( integer | * )
113 ] [ dscp integer ];
114 alt-transfer-source-v6 ( ipv6_address | * ) [ port ( integer |
115 * ) ] [ dscp integer ];
116 answer-cookie boolean;
117 attach-cache string;
118 auth-nxdomain boolean; // default changed
119 auto-dnssec ( allow | maintain | off );
120 automatic-interface-scan boolean;
121 avoid-v4-udp-ports { portrange; ... };
122 avoid-v6-udp-ports { portrange; ... };
123 bindkeys-file quoted_string;
124 blackhole { address_match_element; ... };
125 cache-file quoted_string;
126 catalog-zones { zone quoted_string [ default-masters [ port
127 integer ] [ dscp integer ] { ( masters | ipv4_address [
128 port integer ] | ipv6_address [ port integer ] ) [ key
129 string ]; ... } ] [ zone-directory quoted_string ] [
130 in-memory boolean ] [ min-update-interval integer ]; ... };
131 check-dup-records ( fail | warn | ignore );
132 check-integrity boolean;
133 check-mx ( fail | warn | ignore );
134 check-mx-cname ( fail | warn | ignore );
135 check-names ( master | slave | response
136 ) ( fail | warn | ignore );
137 check-sibling boolean;
138 check-spf ( warn | ignore );
139 check-srv-cname ( fail | warn | ignore );
140 check-wildcard boolean;
141 cleaning-interval integer;
142 clients-per-query integer;
143 cookie-algorithm ( aes | sha1 | sha256 );
144 cookie-secret string;
145 coresize ( default | unlimited | sizeval );
146 datasize ( default | unlimited | sizeval );
147 deny-answer-addresses { address_match_element; ... } [
148 except-from { quoted_string; ... } ];
149 deny-answer-aliases { quoted_string; ... } [ except-from {
150 quoted_string; ... } ];
151 dialup ( notify | notify-passive | passive | refresh | boolean );
152 directory quoted_string;
153 disable-algorithms string { string;
154 ... };
155 disable-ds-digests string { string;
156 ... };
157 disable-empty-zone string;
158 dns64 netprefix {
159 break-dnssec boolean;
160 clients { address_match_element; ... };
161 exclude { address_match_element; ... };
162 mapped { address_match_element; ... };
163 recursive-only boolean;
164 suffix ipv6_address;
165 };
166 dns64-contact string;
167 dns64-server string;
168 dnssec-accept-expired boolean;
169 dnssec-dnskey-kskonly boolean;
170 dnssec-enable boolean;
171 dnssec-loadkeys-interval integer;
172 dnssec-lookaside ( string trust-anchor
173 string | auto | no );
174 dnssec-must-be-secure string boolean;
175 dnssec-secure-to-insecure boolean;
176 dnssec-update-mode ( maintain | no-resign );
177 dnssec-validation ( yes | no | auto );
178 dnstap { ( all | auth | client | forwarder |
179 resolver ) [ ( query | response ) ]; ... };
180 dnstap-identity ( quoted_string | none |
181 hostname );
182 dnstap-output ( file | unix ) quoted_string;
183 dnstap-version ( quoted_string | none );
184 dscp integer;
185 dual-stack-servers [ port integer ] { ( quoted_string [ port
186 integer ] [ dscp integer ] | ipv4_address [ port
187 integer ] [ dscp integer ] | ipv6_address [ port
188 integer ] [ dscp integer ] ); ... };
189 dump-file quoted_string;
190 edns-udp-size integer;
191 empty-contact string;
192 empty-server string;
193 empty-zones-enable boolean;
194 fetch-quota-params integer fixedpoint fixedpoint fixedpoint;
195 fetches-per-server integer [ ( drop | fail ) ];
196 fetches-per-zone integer [ ( drop | fail ) ];
197 files ( default | unlimited | sizeval );
198 filter-aaaa { address_match_element; ... };
199 filter-aaaa-on-v4 ( break-dnssec | boolean );
200 filter-aaaa-on-v6 ( break-dnssec | boolean );
201 flush-zones-on-shutdown boolean;
202 forward ( first | only );
203 forwarders [ port integer ] [ dscp integer ] { ( ipv4_address
204 | ipv6_address ) [ port integer ] [ dscp integer ]; ... };
205 fstrm-set-buffer-hint integer;
206 fstrm-set-flush-timeout integer;
207 fstrm-set-input-queue-size integer;
208 fstrm-set-output-notify-threshold integer;
209 fstrm-set-output-queue-model ( mpsc | spsc );
210 fstrm-set-output-queue-size integer;
211 fstrm-set-reopen-interval integer;
212 geoip-directory ( quoted_string | none );
213 geoip-use-ecs boolean;
214 heartbeat-interval integer;
215 hostname ( quoted_string | none );
216 inline-signing boolean;
217 interface-interval integer;
218 ixfr-from-differences ( master | slave | boolean );
219 keep-response-order { address_match_element; ... };
220 key-directory quoted_string;
221 lame-ttl ttlval;
222 listen-on [ port integer ] [ dscp
223 integer ] {
224 address_match_element; ... };
225 listen-on-v6 [ port integer ] [ dscp
226 integer ] {
227 address_match_element; ... };
228 lmdb-mapsize sizeval;
229 lock-file ( quoted_string | none );
230 managed-keys-directory quoted_string;
231 masterfile-format ( map | raw | text );
232 masterfile-style ( full | relative );
233 match-mapped-addresses boolean;
234 max-acache-size ( unlimited | sizeval );
235 max-cache-size ( default | unlimited | sizeval | percentage );
236 max-cache-ttl integer;
237 max-clients-per-query integer;
238 max-journal-size ( unlimited | sizeval );
239 max-ncache-ttl integer;
240 max-records integer;
241 max-recursion-depth integer;
242 max-recursion-queries integer;
243 max-refresh-time integer;
244 max-retry-time integer;
245 max-rsa-exponent-size integer;
246 max-transfer-idle-in integer;
247 max-transfer-idle-out integer;
248 max-transfer-time-in integer;
249 max-transfer-time-out integer;
250 max-udp-size integer;
251 max-zone-ttl ( unlimited | ttlval );
252 memstatistics boolean;
253 memstatistics-file quoted_string;
254 message-compression boolean;
255 min-refresh-time integer;
256 min-retry-time integer;
257 minimal-any boolean;
258 minimal-responses ( no-auth | no-auth-recursive | boolean );
259 multi-master boolean;
260 no-case-compress { address_match_element; ... };
261 nocookie-udp-size integer;
262 notify ( explicit | master-only | boolean );
263 notify-delay integer;
264 notify-rate integer;
265 notify-source ( ipv4_address | * ) [ port ( integer | * ) ] [
266 dscp integer ];
267 notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ]
268 [ dscp integer ];
269 notify-to-soa boolean;
270 nta-lifetime ttlval;
271 nta-recheck ttlval;
272 nxdomain-redirect string;
273 pid-file ( quoted_string | none );
274 port integer;
275 preferred-glue string;
276 prefetch integer [ integer ];
277 provide-ixfr boolean;
278 query-source ( ( [ address ] ( ipv4_address | * ) [ port (
279 integer | * ) ] ) | ( [ [ address ] ( ipv4_address | * ) ]
280 port ( integer | * ) ) ) [ dscp integer ];
281 query-source-v6 ( ( [ address ] ( ipv6_address | * ) [ port (
282 integer | * ) ] ) | ( [ [ address ] ( ipv6_address | * ) ]
283 port ( integer | * ) ) ) [ dscp integer ];
284 querylog boolean;
285 random-device quoted_string;
286 rate-limit {
287 all-per-second integer;
288 errors-per-second integer;
289 exempt-clients { address_match_element; ... };
290 ipv4-prefix-length integer;
291 ipv6-prefix-length integer;
292 log-only boolean;
293 max-table-size integer;
294 min-table-size integer;
295 nodata-per-second integer;
296 nxdomains-per-second integer;
297 qps-scale integer;
298 referrals-per-second integer;
299 responses-per-second integer;
300 slip integer;
301 window integer;
302 };
303 recursing-file quoted_string;
304 recursion boolean;
305 recursive-clients integer;
306 request-expire boolean;
307 request-ixfr boolean;
308 request-nsid boolean;
309 require-server-cookie boolean;
310 reserved-sockets integer;
311 resolver-query-timeout integer;
312 response-policy { zone quoted_string [ log boolean ] [
313 max-policy-ttl integer ] [ policy ( cname | disabled | drop |
314 given | no-op | nodata | nxdomain | passthru | tcp-only
315 quoted_string ) ] [ recursive-only boolean ]; ... } [
316 break-dnssec boolean ] [ max-policy-ttl integer ] [
317 min-ns-dots integer ] [ nsip-wait-recurse boolean ] [
318 qname-wait-recurse boolean ] [ recursive-only boolean ];
319 root-delegation-only [ exclude { quoted_string; ... } ];
320 root-key-sentinel boolean;
321 rrset-order { [ class string ] [ type string ] [ name
322 quoted_string ] string string; ... };
323 secroots-file quoted_string;
324 send-cookie boolean;
325 serial-query-rate integer;
326 serial-update-method ( date | increment | unixtime );
327 server-id ( quoted_string | none | hostname );
328 servfail-ttl ttlval;
329 session-keyalg string;
330 session-keyfile ( quoted_string | none );
331 session-keyname string;
332 sig-signing-nodes integer;
333 sig-signing-signatures integer;
334 sig-signing-type integer;
335 sig-validity-interval integer [ integer ];
336 sortlist { address_match_element; ... };
337 stacksize ( default | unlimited | sizeval );
338 startup-notify-rate integer;
339 statistics-file quoted_string;
340 tcp-clients integer;
341 tcp-listen-queue integer;
342 tkey-dhkey quoted_string integer;
343 tkey-domain quoted_string;
344 tkey-gssapi-credential quoted_string;
345 tkey-gssapi-keytab quoted_string;
346 transfer-format ( many-answers | one-answer );
347 transfer-message-size integer;
348 transfer-source ( ipv4_address | * ) [ port ( integer | * ) ] [
349 dscp integer ];
350 transfer-source-v6 ( ipv6_address | * ) [ port ( integer | * )
351 ] [ dscp integer ];
352 transfers-in integer;
353 transfers-out integer;
354 transfers-per-ns integer;
355 trust-anchor-telemetry boolean; // experimental
356 try-tcp-refresh boolean;
357 update-check-ksk boolean;
358 use-alt-transfer-source boolean;
359 use-v4-udp-ports { portrange; ... };
360 use-v6-udp-ports { portrange; ... };
361 v6-bias integer;
362 version ( quoted_string | none );
363 zero-no-soa-ttl boolean;
364 zero-no-soa-ttl-cache boolean;
365 zone-statistics ( full | terse | none | boolean );
366 };
367
369 server netprefix {
370 bogus boolean;
371 edns boolean;
372 edns-udp-size integer;
373 edns-version integer;
374 keys server_key;
375 max-udp-size integer;
376 notify-source ( ipv4_address | * ) [ port ( integer | * ) ] [
377 dscp integer ];
378 notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ]
379 [ dscp integer ];
380 provide-ixfr boolean;
381 query-source ( ( [ address ] ( ipv4_address | * ) [ port (
382 integer | * ) ] ) | ( [ [ address ] ( ipv4_address | * ) ]
383 port ( integer | * ) ) ) [ dscp integer ];
384 query-source-v6 ( ( [ address ] ( ipv6_address | * ) [ port (
385 integer | * ) ] ) | ( [ [ address ] ( ipv6_address | * ) ]
386 port ( integer | * ) ) ) [ dscp integer ];
387 request-expire boolean;
388 request-ixfr boolean;
389 request-nsid boolean;
390 send-cookie boolean;
391 tcp-only boolean;
392 transfer-format ( many-answers | one-answer );
393 transfer-source ( ipv4_address | * ) [ port ( integer | * ) ] [
394 dscp integer ];
395 transfer-source-v6 ( ipv6_address | * ) [ port ( integer | * )
396 ] [ dscp integer ];
397 transfers integer;
398 };
399
401 statistics-channels {
402 inet ( ipv4_address | ipv6_address |
403 * ) [ port ( integer | * ) ] [
404 allow { address_match_element; ...
405 } ];
406 };
407
409 trusted-keys { string integer integer
410 integer quoted_string; ... };
411
413 view string [ class ] {
414 acache-cleaning-interval integer;
415 acache-enable boolean;
416 additional-from-auth boolean;
417 additional-from-cache boolean;
418 allow-new-zones boolean;
419 allow-notify { address_match_element; ... };
420 allow-query { address_match_element; ... };
421 allow-query-cache { address_match_element; ... };
422 allow-query-cache-on { address_match_element; ... };
423 allow-query-on { address_match_element; ... };
424 allow-recursion { address_match_element; ... };
425 allow-recursion-on { address_match_element; ... };
426 allow-transfer { address_match_element; ... };
427 allow-update { address_match_element; ... };
428 allow-update-forwarding { address_match_element; ... };
429 also-notify [ port integer ] [ dscp integer ] { ( masters |
430 ipv4_address [ port integer ] | ipv6_address [ port
431 integer ] ) [ key string ]; ... };
432 alt-transfer-source ( ipv4_address | * ) [ port ( integer | * )
433 ] [ dscp integer ];
434 alt-transfer-source-v6 ( ipv6_address | * ) [ port ( integer |
435 * ) ] [ dscp integer ];
436 attach-cache string;
437 auth-nxdomain boolean; // default changed
438 auto-dnssec ( allow | maintain | off );
439 cache-file quoted_string;
440 catalog-zones { zone quoted_string [ default-masters [ port
441 integer ] [ dscp integer ] { ( masters | ipv4_address [
442 port integer ] | ipv6_address [ port integer ] ) [ key
443 string ]; ... } ] [ zone-directory quoted_string ] [
444 in-memory boolean ] [ min-update-interval integer ]; ... };
445 check-dup-records ( fail | warn | ignore );
446 check-integrity boolean;
447 check-mx ( fail | warn | ignore );
448 check-mx-cname ( fail | warn | ignore );
449 check-names ( master | slave | response
450 ) ( fail | warn | ignore );
451 check-sibling boolean;
452 check-spf ( warn | ignore );
453 check-srv-cname ( fail | warn | ignore );
454 check-wildcard boolean;
455 cleaning-interval integer;
456 clients-per-query integer;
457 deny-answer-addresses { address_match_element; ... } [
458 except-from { quoted_string; ... } ];
459 deny-answer-aliases { quoted_string; ... } [ except-from {
460 quoted_string; ... } ];
461 dialup ( notify | notify-passive | passive | refresh | boolean );
462 disable-algorithms string { string;
463 ... };
464 disable-ds-digests string { string;
465 ... };
466 disable-empty-zone string;
467 dlz string {
468 database string;
469 search boolean;
470 };
471 dns64 netprefix {
472 break-dnssec boolean;
473 clients { address_match_element; ... };
474 exclude { address_match_element; ... };
475 mapped { address_match_element; ... };
476 recursive-only boolean;
477 suffix ipv6_address;
478 };
479 dns64-contact string;
480 dns64-server string;
481 dnssec-accept-expired boolean;
482 dnssec-dnskey-kskonly boolean;
483 dnssec-enable boolean;
484 dnssec-loadkeys-interval integer;
485 dnssec-lookaside ( string trust-anchor
486 string | auto | no );
487 dnssec-must-be-secure string boolean;
488 dnssec-secure-to-insecure boolean;
489 dnssec-update-mode ( maintain | no-resign );
490 dnssec-validation ( yes | no | auto );
491 dnstap { ( all | auth | client | forwarder |
492 resolver ) [ ( query | response ) ]; ... };
493 dual-stack-servers [ port integer ] { ( quoted_string [ port
494 integer ] [ dscp integer ] | ipv4_address [ port
495 integer ] [ dscp integer ] | ipv6_address [ port
496 integer ] [ dscp integer ] ); ... };
497 dyndb string quoted_string {
498 unspecified-text };
499 edns-udp-size integer;
500 empty-contact string;
501 empty-server string;
502 empty-zones-enable boolean;
503 fetch-quota-params integer fixedpoint fixedpoint fixedpoint;
504 fetches-per-server integer [ ( drop | fail ) ];
505 fetches-per-zone integer [ ( drop | fail ) ];
506 filter-aaaa { address_match_element; ... };
507 filter-aaaa-on-v4 ( break-dnssec | boolean );
508 filter-aaaa-on-v6 ( break-dnssec | boolean );
509 forward ( first | only );
510 forwarders [ port integer ] [ dscp integer ] { ( ipv4_address
511 | ipv6_address ) [ port integer ] [ dscp integer ]; ... };
512 inline-signing boolean;
513 ixfr-from-differences ( master | slave | boolean );
514 key string {
515 algorithm string;
516 secret string;
517 };
518 key-directory quoted_string;
519 lame-ttl ttlval;
520 lmdb-mapsize sizeval;
521 managed-keys { string string
522 integer integer integer
523 quoted_string; ... };
524 masterfile-format ( map | raw | text );
525 masterfile-style ( full | relative );
526 match-clients { address_match_element; ... };
527 match-destinations { address_match_element; ... };
528 match-recursive-only boolean;
529 max-acache-size ( unlimited | sizeval );
530 max-cache-size ( default | unlimited | sizeval | percentage );
531 max-cache-ttl integer;
532 max-clients-per-query integer;
533 max-journal-size ( unlimited | sizeval );
534 max-ncache-ttl integer;
535 max-records integer;
536 max-recursion-depth integer;
537 max-recursion-queries integer;
538 max-refresh-time integer;
539 max-retry-time integer;
540 max-transfer-idle-in integer;
541 max-transfer-idle-out integer;
542 max-transfer-time-in integer;
543 max-transfer-time-out integer;
544 max-udp-size integer;
545 max-zone-ttl ( unlimited | ttlval );
546 message-compression boolean;
547 min-refresh-time integer;
548 min-retry-time integer;
549 minimal-any boolean;
550 minimal-responses ( no-auth | no-auth-recursive | boolean );
551 multi-master boolean;
552 no-case-compress { address_match_element; ... };
553 nocookie-udp-size integer;
554 notify ( explicit | master-only | boolean );
555 notify-delay integer;
556 notify-source ( ipv4_address | * ) [ port ( integer | * ) ] [
557 dscp integer ];
558 notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ]
559 [ dscp integer ];
560 notify-to-soa boolean;
561 nta-lifetime ttlval;
562 nta-recheck ttlval;
563 nxdomain-redirect string;
564 preferred-glue string;
565 prefetch integer [ integer ];
566 provide-ixfr boolean;
567 query-source ( ( [ address ] ( ipv4_address | * ) [ port (
568 integer | * ) ] ) | ( [ [ address ] ( ipv4_address | * ) ]
569 port ( integer | * ) ) ) [ dscp integer ];
570 query-source-v6 ( ( [ address ] ( ipv6_address | * ) [ port (
571 integer | * ) ] ) | ( [ [ address ] ( ipv6_address | * ) ]
572 port ( integer | * ) ) ) [ dscp integer ];
573 rate-limit {
574 all-per-second integer;
575 errors-per-second integer;
576 exempt-clients { address_match_element; ... };
577 ipv4-prefix-length integer;
578 ipv6-prefix-length integer;
579 log-only boolean;
580 max-table-size integer;
581 min-table-size integer;
582 nodata-per-second integer;
583 nxdomains-per-second integer;
584 qps-scale integer;
585 referrals-per-second integer;
586 responses-per-second integer;
587 slip integer;
588 window integer;
589 };
590 recursion boolean;
591 request-expire boolean;
592 request-ixfr boolean;
593 request-nsid boolean;
594 require-server-cookie boolean;
595 resolver-query-timeout integer;
596 response-policy { zone quoted_string [ log boolean ] [
597 max-policy-ttl integer ] [ policy ( cname | disabled | drop |
598 given | no-op | nodata | nxdomain | passthru | tcp-only
599 quoted_string ) ] [ recursive-only boolean ]; ... } [
600 break-dnssec boolean ] [ max-policy-ttl integer ] [
601 min-ns-dots integer ] [ nsip-wait-recurse boolean ] [
602 qname-wait-recurse boolean ] [ recursive-only boolean ];
603 root-delegation-only [ exclude { quoted_string; ... } ];
604 root-key-sentinel boolean;
605 rrset-order { [ class string ] [ type string ] [ name
606 quoted_string ] string string; ... };
607 send-cookie boolean;
608 serial-update-method ( date | increment | unixtime );
609 server netprefix {
610 bogus boolean;
611 edns boolean;
612 edns-udp-size integer;
613 edns-version integer;
614 keys server_key;
615 max-udp-size integer;
616 notify-source ( ipv4_address | * ) [ port ( integer | *
617 ) ] [ dscp integer ];
618 notify-source-v6 ( ipv6_address | * ) [ port ( integer
619 | * ) ] [ dscp integer ];
620 provide-ixfr boolean;
621 query-source ( ( [ address ] ( ipv4_address | * ) [ port
622 ( integer | * ) ] ) | ( [ [ address ] (
623 ipv4_address | * ) ] port ( integer | * ) ) ) [
624 dscp integer ];
625 query-source-v6 ( ( [ address ] ( ipv6_address | * ) [
626 port ( integer | * ) ] ) | ( [ [ address ] (
627 ipv6_address | * ) ] port ( integer | * ) ) ) [
628 dscp integer ];
629 request-expire boolean;
630 request-ixfr boolean;
631 request-nsid boolean;
632 send-cookie boolean;
633 tcp-only boolean;
634 transfer-format ( many-answers | one-answer );
635 transfer-source ( ipv4_address | * ) [ port ( integer |
636 * ) ] [ dscp integer ];
637 transfer-source-v6 ( ipv6_address | * ) [ port (
638 integer | * ) ] [ dscp integer ];
639 transfers integer;
640 };
641 servfail-ttl ttlval;
642 sig-signing-nodes integer;
643 sig-signing-signatures integer;
644 sig-signing-type integer;
645 sig-validity-interval integer [ integer ];
646 sortlist { address_match_element; ... };
647 transfer-format ( many-answers | one-answer );
648 transfer-source ( ipv4_address | * ) [ port ( integer | * ) ] [
649 dscp integer ];
650 transfer-source-v6 ( ipv6_address | * ) [ port ( integer | * )
651 ] [ dscp integer ];
652 trust-anchor-telemetry boolean; // experimental
653 trusted-keys { string integer
654 integer integer quoted_string;
655 ... };
656 try-tcp-refresh boolean;
657 update-check-ksk boolean;
658 use-alt-transfer-source boolean;
659 v6-bias integer;
660 zero-no-soa-ttl boolean;
661 zero-no-soa-ttl-cache boolean;
662 zone string [ class ] {
663 allow-notify { address_match_element; ... };
664 allow-query { address_match_element; ... };
665 allow-query-on { address_match_element; ... };
666 allow-transfer { address_match_element; ... };
667 allow-update { address_match_element; ... };
668 allow-update-forwarding { address_match_element; ... };
669 also-notify [ port integer ] [ dscp integer ] { (
670 masters | ipv4_address [ port integer ] |
671 ipv6_address [ port integer ] ) [ key string ];
672 ... };
673 alt-transfer-source ( ipv4_address | * ) [ port (
674 integer | * ) ] [ dscp integer ];
675 alt-transfer-source-v6 ( ipv6_address | * ) [ port (
676 integer | * ) ] [ dscp integer ];
677 auto-dnssec ( allow | maintain | off );
678 check-dup-records ( fail | warn | ignore );
679 check-integrity boolean;
680 check-mx ( fail | warn | ignore );
681 check-mx-cname ( fail | warn | ignore );
682 check-names ( fail | warn | ignore );
683 check-sibling boolean;
684 check-spf ( warn | ignore );
685 check-srv-cname ( fail | warn | ignore );
686 check-wildcard boolean;
687 database string;
688 delegation-only boolean;
689 dialup ( notify | notify-passive | passive | refresh |
690 boolean );
691 dlz string;
692 dnssec-dnskey-kskonly boolean;
693 dnssec-loadkeys-interval integer;
694 dnssec-secure-to-insecure boolean;
695 dnssec-update-mode ( maintain | no-resign );
696 file quoted_string;
697 forward ( first | only );
698 forwarders [ port integer ] [ dscp integer ] { (
699 ipv4_address | ipv6_address ) [ port integer ] [
700 dscp integer ]; ... };
701 in-view string;
702 inline-signing boolean;
703 ixfr-from-differences boolean;
704 journal quoted_string;
705 key-directory quoted_string;
706 masterfile-format ( map | raw | text );
707 masterfile-style ( full | relative );
708 masters [ port integer ] [ dscp integer ] { ( masters
709 | ipv4_address [ port integer ] | ipv6_address [
710 port integer ] ) [ key string ]; ... };
711 max-ixfr-log-size ( default | unlimited |
712 max-journal-size ( unlimited | sizeval );
713 max-records integer;
714 max-refresh-time integer;
715 max-retry-time integer;
716 max-transfer-idle-in integer;
717 max-transfer-idle-out integer;
718 max-transfer-time-in integer;
719 max-transfer-time-out integer;
720 max-zone-ttl ( unlimited | ttlval );
721 min-refresh-time integer;
722 min-retry-time integer;
723 multi-master boolean;
724 notify ( explicit | master-only | boolean );
725 notify-delay integer;
726 notify-source ( ipv4_address | * ) [ port ( integer | *
727 ) ] [ dscp integer ];
728 notify-source-v6 ( ipv6_address | * ) [ port ( integer
729 | * ) ] [ dscp integer ];
730 notify-to-soa boolean;
731 pubkey integer
732 integer
733 integer
734 request-expire boolean;
735 request-ixfr boolean;
736 serial-update-method ( date | increment | unixtime );
737 server-addresses { ( ipv4_address | ipv6_address ) [
738 port integer ]; ... };
739 server-names { quoted_string; ... };
740 sig-signing-nodes integer;
741 sig-signing-signatures integer;
742 sig-signing-type integer;
743 sig-validity-interval integer [ integer ];
744 transfer-source ( ipv4_address | * ) [ port ( integer |
745 * ) ] [ dscp integer ];
746 transfer-source-v6 ( ipv6_address | * ) [ port (
747 integer | * ) ] [ dscp integer ];
748 try-tcp-refresh boolean;
749 type ( delegation-only | forward | hint | master | redirect
750 | slave | static-stub | stub );
751 update-check-ksk boolean;
752 update-policy ( local | { ( deny | grant ) string (
753 6to4-self | external | krb5-self | krb5-subdomain |
754 ms-self | ms-subdomain | name | self | selfsub |
755 selfwild | subdomain | tcp-self | wildcard | zonesub )
756 [ string ] rrtypelist; ... };
757 use-alt-transfer-source boolean;
758 zero-no-soa-ttl boolean;
759 zone-statistics ( full | terse | none | boolean );
760 };
761 zone-statistics ( full | terse | none | boolean );
762 };
763
765 zone string [ class ] {
766 allow-notify { address_match_element; ... };
767 allow-query { address_match_element; ... };
768 allow-query-on { address_match_element; ... };
769 allow-transfer { address_match_element; ... };
770 allow-update { address_match_element; ... };
771 allow-update-forwarding { address_match_element; ... };
772 also-notify [ port integer ] [ dscp integer ] { ( masters |
773 ipv4_address [ port integer ] | ipv6_address [ port
774 integer ] ) [ key string ]; ... };
775 alt-transfer-source ( ipv4_address | * ) [ port ( integer | * )
776 ] [ dscp integer ];
777 alt-transfer-source-v6 ( ipv6_address | * ) [ port ( integer |
778 * ) ] [ dscp integer ];
779 auto-dnssec ( allow | maintain | off );
780 check-dup-records ( fail | warn | ignore );
781 check-integrity boolean;
782 check-mx ( fail | warn | ignore );
783 check-mx-cname ( fail | warn | ignore );
784 check-names ( fail | warn | ignore );
785 check-sibling boolean;
786 check-spf ( warn | ignore );
787 check-srv-cname ( fail | warn | ignore );
788 check-wildcard boolean;
789 database string;
790 delegation-only boolean;
791 dialup ( notify | notify-passive | passive | refresh | boolean );
792 dlz string;
793 dnssec-dnskey-kskonly boolean;
794 dnssec-loadkeys-interval integer;
795 dnssec-secure-to-insecure boolean;
796 dnssec-update-mode ( maintain | no-resign );
797 file quoted_string;
798 forward ( first | only );
799 forwarders [ port integer ] [ dscp integer ] { ( ipv4_address
800 | ipv6_address ) [ port integer ] [ dscp integer ]; ... };
801 in-view string;
802 inline-signing boolean;
803 ixfr-from-differences boolean;
804 journal quoted_string;
805 key-directory quoted_string;
806 masterfile-format ( map | raw | text );
807 masterfile-style ( full | relative );
808 masters [ port integer ] [ dscp integer ] { ( masters |
809 ipv4_address [ port integer ] | ipv6_address [ port
810 integer ] ) [ key string ]; ... };
811 max-journal-size ( unlimited | sizeval );
812 max-records integer;
813 max-refresh-time integer;
814 max-retry-time integer;
815 max-transfer-idle-in integer;
816 max-transfer-idle-out integer;
817 max-transfer-time-in integer;
818 max-transfer-time-out integer;
819 max-zone-ttl ( unlimited | ttlval );
820 min-refresh-time integer;
821 min-retry-time integer;
822 multi-master boolean;
823 notify ( explicit | master-only | boolean );
824 notify-delay integer;
825 notify-source ( ipv4_address | * ) [ port ( integer | * ) ] [
826 dscp integer ];
827 notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ]
828 [ dscp integer ];
829 notify-to-soa boolean;
830 pubkey integer integer
831 request-expire boolean;
832 request-ixfr boolean;
833 serial-update-method ( date | increment | unixtime );
834 server-addresses { ( ipv4_address | ipv6_address ) [ port
835 integer ]; ... };
836 server-names { quoted_string; ... };
837 sig-signing-nodes integer;
838 sig-signing-signatures integer;
839 sig-signing-type integer;
840 sig-validity-interval integer [ integer ];
841 transfer-source ( ipv4_address | * ) [ port ( integer | * ) ] [
842 dscp integer ];
843 transfer-source-v6 ( ipv6_address | * ) [ port ( integer | * )
844 ] [ dscp integer ];
845 try-tcp-refresh boolean;
846 type ( delegation-only | forward | hint | master | redirect | slave
847 | static-stub | stub );
848 update-check-ksk boolean;
849 update-policy ( local | { ( deny | grant ) string ( 6to4-self |
850 external | krb5-self | krb5-subdomain | ms-self | ms-subdomain
851 | name | self | selfsub | selfwild | subdomain | tcp-self |
852 wildcard | zonesub ) [ string ] rrtypelist; ... };
853 use-alt-transfer-source boolean;
854 zero-no-soa-ttl boolean;
855 zone-statistics ( full | terse | none | boolean );
856 };
857
859 /etc/named.conf
860
862 ddns-confgen(8), named(8), named-checkconf(8), rndc(8), rndc-
863 confgen(8), BIND 9 Administrator Reference Manual.
864
866 Internet Systems Consortium, Inc.
867
869 Copyright © 2004-2018 Internet Systems Consortium, Inc. ("ISC")
870ISC 2018-06-21 NAMED.CONF(5)