Grammar: disable-ds-digests <string> { <string>; ... }; // may occur multiple times
Blocks: options, view
│ │ │ │ -Tags: dnssec, zone
│ │ │ │ +Tags: zone, dnssec
│ │ │ │Disables DS digest types from a specified zone.
│ │ │ │ │ │ │ │This disables the specified DS digest types at and below the specified
│ │ │ │ name. Multiple disable-ds-digests statements are allowed. Only
│ │ │ │ the best-match disable-ds-digests clause is used to
│ │ │ │ determine the digest types.
If all supported digest types are disabled, the zones covered by │ │ │ │ @@ -2708,15 +2708,15 @@ │ │ │ │
Grammar: zone-statistics ( full | terse | none | <boolean> );
Blocks: options, view, zone (mirror, primary, redirect, secondary, static-stub, stub)
│ │ │ │ -Tags: logging, zone
│ │ │ │ +Tags: zone, logging
│ │ │ │Controls the level of statistics gathered for all zones.
│ │ │ │ │ │ │ │If full, the server collects statistical data on all zones,
│ │ │ │ unless specifically turned off on a per-zone basis by specifying
│ │ │ │ zone-statistics terse or zone-statistics none in the zone
│ │ │ │ statement. The statistical data includes, for example, DNSSEC signing
│ │ │ │ operations and the number of authoritative answers per query type. The
│ │ │ │ @@ -3586,15 +3586,15 @@
│ │ │ │
Grammar: check-dup-records ( fail | warn | ignore );
Blocks: options, view, zone (primary)
│ │ │ │ -Tags: dnssec, query
│ │ │ │ +Tags: query, dnssec
│ │ │ │Checks primary zones for records that are treated as different by DNSSEC but are semantically equal in plain DNS.
│ │ │ │ │ │ │ │This checks primary zones for records that are treated as different by
│ │ │ │ DNSSEC but are semantically equal in plain DNS. The default is to
│ │ │ │ warn. Other possible values are fail and ignore.
Grammar: zero-no-soa-ttl <boolean>;
Blocks: options, view, zone (mirror, primary, secondary)
│ │ │ │ -Tags: query, zone, server
│ │ │ │ +Tags: zone, query, server
│ │ │ │Specifies whether to set the time to live (TTL) of the SOA record to zero, when returning authoritative negative responses to SOA queries.
│ │ │ │ │ │ │ │If yes, when returning authoritative negative responses to SOA queries, set
│ │ │ │ the TTL of the SOA record returned in the authority section to zero.
│ │ │ │ The default is yes.
Grammar: zero-no-soa-ttl-cache <boolean>;
Blocks: options, view
│ │ │ │ -Tags: query, zone, server
│ │ │ │ +Tags: zone, query, server
│ │ │ │Sets the time to live (TTL) to zero when caching a negative response to an SOA query.
│ │ │ │ │ │ │ │If yes, when caching a negative response to an SOA query set the TTL to zero.
│ │ │ │ The default is no.
Grammar: max-rsa-exponent-size <integer>;
Blocks: options
│ │ │ │ -Tags: dnssec, query
│ │ │ │ +Tags: query, dnssec
│ │ │ │Sets the maximum RSA exponent size (in bits) when validating.
│ │ │ │ │ │ │ │This sets the maximum RSA exponent size, in bits, that is accepted when │ │ │ │ validating. Valid values are 35 to 4096 bits. The default, zero, is │ │ │ │ also accepted and is equivalent to 4096.
│ │ │ │Grammar: response-policy { zone <string> [ add-soa <boolean> ] [ log <boolean> ] [ max-policy-ttl <duration> ] [ min-update-interval <duration> ] [ policy ( cname | disabled | drop | given | no-op | nodata | nxdomain | passthru | tcp-only <quoted_string> ) ] [ recursive-only <boolean> ] [ nsip-enable <boolean> ] [ nsdname-enable <boolean> ] [ ede <string> ]; ... } [ add-soa <boolean> ] [ break-dnssec <boolean> ] [ max-policy-ttl <duration> ] [ min-update-interval <duration> ] [ min-ns-dots <integer> ] [ nsip-wait-recurse <boolean> ] [ nsdname-wait-recurse <boolean> ] [ qname-wait-recurse <boolean> ] [ recursive-only <boolean> ] [ nsip-enable <boolean> ] [ nsdname-enable <boolean> ] [ dnsrps-enable <boolean> ] [ dnsrps-options { <unspecified-text> } ];
Blocks: options, view
│ │ │ │ -Tags: query, zone, server, security
│ │ │ │ +Tags: security, zone, query, server
│ │ │ │Specifies response policy zones for the view or among global options.
│ │ │ │ │ │ │ │Response policy zones are named in the response-policy option for
│ │ │ │ the view, or among the global options if there is no response-policy
│ │ │ │ option for the view. Response policy zones are ordinary DNS zones
│ │ │ │ containing RRsets that can be queried normally if allowed. It is usually
│ │ │ │ best to restrict those queries with something like
│ │ │ │ @@ -6607,42 +6607,42 @@
│ │ │ │ such as SERVFAIL to appear to be rewritten, since no recursion is being
│ │ │ │ done to discover problems at the authoritative server.
Grammar: dnsrps-enable <boolean>;
Blocks: options, view
│ │ │ │ -Tags: server, security
│ │ │ │ +Tags: security, server
│ │ │ │Turns on the DNS Response Policy Service (DNSRPS) interface.
│ │ │ │ │ │ │ │The dnsrps-enable yes option turns on the DNS Response Policy Service
│ │ │ │ (DNSRPS) interface, if it has been compiled in named using
│ │ │ │ configure --enable-dnsrps.
Grammar: dnsrps-library <quoted_string>;
Blocks: options
│ │ │ │ -Tags: server, security
│ │ │ │ +Tags: security, server
│ │ │ │Turns on the DNS Response Policy Service (DNSRPS) interface.
│ │ │ │ │ │ │ │This option specifies the path to the DNSRPS provider library. Typically
│ │ │ │ this library is detected when building with configure --enable-dnsrps
│ │ │ │ and does not need to be specified in named.conf; the option exists
│ │ │ │ to override the default library for testing purposes.
Grammar: dnsrps-options { <unspecified-text> };
Blocks: options, view
│ │ │ │ -Tags: server, security
│ │ │ │ +Tags: security, server
│ │ │ │Provides additional RPZ configuration settings, which are passed to the DNS Response Policy Service (DNSRPS) provider library.
│ │ │ │ │ │ │ │The block provides additional RPZ configuration
│ │ │ │ settings, which are passed through to the DNSRPS provider library.
│ │ │ │ Multiple DNSRPS settings in an dnsrps-options string should be
│ │ │ │ separated with semi-colons (;). The DNSRPS provider library is passed a
│ │ │ │ configuration string consisting of the dnsrps-options text,
│ │ │ │ @@ -7272,15 +7272,15 @@
│ │ │ │ option.
Blocks: dnssec-policy, server, view.server
│ │ │ │ -Tags: server, security
│ │ │ │ +Tags: security, server
│ │ │ │Specifies one or more server_key s to be used with a remote server.
Warning
│ │ │ │Not to be confused with keys in dnssec-policy specification.
│ │ │ │ Although statements with the same name exist in both contexts, they refer
│ │ │ │ to fundamentally incompatible concepts.
tls can only be set at the top level of named.conf.
The following options can be specified in a tls statement:
Grammar: key-file <quoted_string>;
Blocks: tls
│ │ │ │ -Tags: server, security
│ │ │ │ +Tags: security, server
│ │ │ │Specifies the path to a file containing the private TLS key for a connection.
│ │ │ │ │ │ │ ││ │ │ ││ │ │ │Path to a file containing the private TLS key to be used for │ │ │ │ the connection.
│ │ │ │
Grammar: cert-file <quoted_string>;
Blocks: tls
│ │ │ │ -Tags: server, security
│ │ │ │ +Tags: security, server
│ │ │ │Specifies the path to a file containing the TLS certificate for a connection.
│ │ │ │ │ │ │ ││ │ │ ││ │ │ │Path to a file containing the TLS certificate to be used for │ │ │ │ the connection.
│ │ │ │
Grammar: ca-file <quoted_string>;
Blocks: tls
│ │ │ │ -Tags: server, security
│ │ │ │ +Tags: security, server
│ │ │ │Specifies the path to a file containing TLS certificates for trusted CA authorities, used to verify remote peer certificates.
│ │ │ │ │ │ │ ││ │ │ ││ │ │ │ │ │ │ │Path to a file containing trusted CA authorities’ TLS │ │ │ │ certificates used to verify remote peer certificates. Specifying │ │ │ │ this option enables remote peer certificates’ verification. For │ │ │ │ incoming connections, specifying this option makes BIND require │ │ │ │ @@ -7481,15 +7481,15 @@ │ │ │ │ │ │ │ │ │ │ │ │
│ │ │ │
- │ │ │ │ dhparam-file
│ │ │ │Grammar:
│ │ │ │dhparam-file <quoted_string>;Blocks: tls
│ │ │ │ -Tags: server, security
│ │ │ │ +Tags: security, server
│ │ │ │Specifies the path to a file containing Diffie-Hellman parameters, for enabling cipher suites.
│ │ │ │ │ │ │ ││ │ │ ││ │ │ │Path to a file containing Diffie-Hellman parameters, │ │ │ │ which is needed to enable the cipher suites depending on the │ │ │ │ Diffie-Hellman ephemeral key exchange (DHE). Having these parameters │ │ │ │ specified is essential for enabling perfect forward secrecy capable │ │ │ │ @@ -7550,15 +7550,15 @@ │ │ │ │ │ │ │ │ │ │ │ │
│ │ │ │
│ │ │ │ │ │ │ │ @@ -8247,15 +8247,15 @@ │ │ │ │ │ │ │ │ │ │ │ │- │ │ │ │ prefer-server-ciphers
│ │ │ │Grammar:
│ │ │ │prefer-server-ciphers <boolean>;Blocks: tls
│ │ │ │ -Tags: server, security
│ │ │ │ +Tags: security, server
│ │ │ │Specifies that server ciphers should be preferred over client ones.
│ │ │ │ │ │ │ ││ │ │ ││ │ │ │Specifies that server ciphers should be preferred over client ones.
│ │ │ ││ │ │ │
│ │ │ │ │ │ │ │- │ │ │ │ zone-propagation-delay
│ │ │ │Grammar:
│ │ │ │zone-propagation-delay <duration>;Blocks: dnssec-policy
│ │ │ │ -Tags: dnssec, zone
│ │ │ │ +Tags: zone, dnssec
│ │ │ │Sets the propagation delay from the time a zone is first updated to when the new version of the zone is served by all secondary servers.
│ │ │ │ │ │ │ ││ │ │ ││ │ │ │ @@ -8276,15 +8276,15 @@ │ │ │ │This is the expected propagation delay from the time when a zone is │ │ │ │ first updated to the time when the new version of the zone is served │ │ │ │ by all secondary servers. The default is
│ │ │ │PT5M(5 minutes).│ │ │ │
- │ │ │ │ parent-propagation-delay
│ │ │ │Grammar:
│ │ │ │parent-propagation-delay <duration>;Blocks: dnssec-policy
│ │ │ │ -Tags: dnssec, zone
│ │ │ │ +Tags: zone, dnssec
│ │ │ │Sets the propagation delay from the time the parent zone is updated to when the new version is served by all of the parent zone’s name servers.
│ │ │ │ │ │ │ ││ │ │ ││ │ │ │ @@ -9506,15 +9506,15 @@ │ │ │ │ in-view <string>; │ │ │ │ }; │ │ │ │This is the expected propagation delay from the time when the parent │ │ │ │ zone is updated to the time when the new version is served by all of │ │ │ │ the parent zone’s name servers. The default is
│ │ │ │PT1H(1 hour).Grammar zone (in-view):
│ │ │ │in-view <string>;Blocks: zone, zone (in-view), view.zone
│ │ │ │ -Tags: view, zone
│ │ │ │ +Tags: zone, view
│ │ │ │Specifies the view in which a given zone is defined.
│ │ │ │ │ │ │ │When using multiple views, a
type primaryortype secondaryzone configured │ │ │ │ in one view can be referenced in a subsequent view. This allows both views │ │ │ │ to use the same zone without the overhead of loading it more than once. This │ │ │ │ is configured using azonestatement, with anin-viewoption │ │ │ │ specifying the view in which the zone is defined. Azonestatement │ │ │ │ @@ -9682,15 +9682,15 @@ │ │ │ │
Grammar: server-addresses { ( <ipv4_address> | <ipv6_address> ); ... };
Blocks: zone (static-stub)
│ │ │ │ -Tags: query, zone
│ │ │ │ +Tags: zone, query
│ │ │ │Specifies a list of IP addresses to which queries should be sent in recursive resolution for a static-stub zone.
│ │ │ │ │ │ │ │This option is only meaningful for static-stub zones. This is a list of IP addresses │ │ │ │ to which queries should be sent in recursive resolution for the zone. │ │ │ │ A non-empty list for this option internally configures the apex │ │ │ │ NS RR with associated glue A or AAAA RRs.
│ │ │ │For example, if “example.com” is configured as a static-stub zone │ │ │ │ @@ -9771,15 +9771,15 @@ │ │ │ │
Grammar: inline-signing <boolean>;
Blocks: dnssec-policy, zone (primary, secondary)
│ │ │ │ -Tags: dnssec, zone
│ │ │ │ +Tags: zone, dnssec
│ │ │ │Specifies whether BIND 9 maintains a separate signed version of a zone.
│ │ │ │ │ │ │ │The use of inline signing is determined by the dnssec-policy for
│ │ │ │ the zone. If inline-signing is explicitly set to yes or no
│ │ │ │ in zone, then it overrides any value from dnssec-policy.
Controls flushing of log messages.
│ │ │ │logging
Specifies the path to a file containing TLS certificates for trusted CA authorities, used to verify remote peer certificates.
│ │ │ │server, security
security, server
Configures catalog zones in named.conf.
zone
Specifies the digest types to use for CDS resource records.
│ │ │ │dnssec
Specifies the path to a file containing the TLS certificate for a connection.
│ │ │ │server, security
security, server
Defines a stream of data that can be independently logged.
│ │ │ │logging
Checks primary zones for records that are treated as different by DNSSEC but are semantically equal in plain DNS.
│ │ │ │dnssec, query
query, dnssec
Performs post-load zone integrity checks on primary zones.
│ │ │ │zone
Rejects CNAME or DNAME records if the "alias" name matches a given list of domain_name elements.
query
Specifies the path to a file containing Diffie-Hellman parameters, for enabling cipher suites.
│ │ │ │server, security
security, server
Concentrates zone maintenance so that all transfers take place once every heartbeat-interval, ideally during a single call.
deprecated
Disables DNSSEC algorithms from a specified zone.
│ │ │ │dnssec
Disables DS digest types from a specified zone.
│ │ │ │dnssec, zone
zone, dnssec
Disables individual empty zones.
│ │ │ │zone, server
Specifies the time to live (TTL) for DNSKEY resource records.
│ │ │ │dnssec
Turns on the DNS Response Policy Service (DNSRPS) interface.
│ │ │ │server, security
security, server
Turns on the DNS Response Policy Service (DNSRPS) interface.
│ │ │ │server, security
security, server
Provides additional RPZ configuration settings, which are passed to the DNS Response Policy Service (DNSRPS) provider library.
│ │ │ │server, security
security, server
Instructs BIND 9 to accept expired DNSSEC signatures when validating.
│ │ │ │dnssec
Specifies the TCP port number the server uses to receive and send DNS-over-HTTPS protocol traffic.
│ │ │ │query, server
Specifies the view in which a given zone is defined.
│ │ │ │view, zone
zone, view
Specifies a TCP socket as a control channel.
│ │ │ │server
Specifies whether BIND 9 maintains a separate signed version of a zone.
│ │ │ │dnssec, zone
zone, dnssec
Sets the interval at which the server scans the network interface list.
│ │ │ │server
Indicates the directory where public and private DNSSEC key files are found.
│ │ │ │dnssec
Specifies the path to a file containing the private TLS key for a connection.
│ │ │ │server, security
security, server
Specifies one or more server_key s to be used with a remote server.
server, security
security, server
Sets the resolver's lame cache.
│ │ │ │server
Limits the zone refresh retry interval to no less often than the specified value, in seconds.
│ │ │ │transfer
Sets the maximum RSA exponent size (in bits) when validating.
│ │ │ │dnssec, query
query, dnssec
Specifies the maximum time that the server retains records past their normal expiry, to return them as stale records.
│ │ │ │server
Sets the time to live (TTL) of the DS RRset used by the parent zone.
│ │ │ │dnssec
Sets the propagation delay from the time the parent zone is updated to when the new version is served by all of the parent zone's name servers.
│ │ │ │dnssec, zone
zone, dnssec
Defines a list of delegation agents to be used by primary and secondary zones.
│ │ │ │zone
Specifies the UDP/TCP port number the server uses to receive and send DNS protocol traffic.
│ │ │ │query, server
Specifies that server ciphers should be preferred over client ones.
│ │ │ │server, security
security, server
Controls the order of glue records in an A or AAAA response.
│ │ │ │query
Adds an EDNS Padding option to encrypted messages, to reduce the chance of guessing the contents based on size.
│ │ │ │query
Specifies response policy zones for the view or among global options.
│ │ │ │query, zone, server, security
security, zone, query, server
Limits the number of non-empty responses for a valid domain name and record type.
│ │ │ │query
Defines characteristics to be associated with a remote name server.
│ │ │ │server
Specifies a list of IP addresses to which queries should be sent in recursive resolution for a static-stub zone.
│ │ │ │query, zone
zone, query
Specifies the ID of the server to return in response to a ID.SERVER query.
server
Specifies the length of time during which responses are tracked.
│ │ │ │query
Specifies whether to set the time to live (TTL) of the SOA record to zero, when returning authoritative negative responses to SOA queries.
│ │ │ │query, zone, server
zone, query, server
Sets the time to live (TTL) to zero when caching a negative response to an SOA query.
│ │ │ │query, zone, server
zone, query, server
Specifies the zone in a BIND 9 configuration.
│ │ │ │zone
Sets the propagation delay from the time a zone is first updated to when the new version of the zone is served by all secondary servers.
│ │ │ │dnssec, zone
zone, dnssec
Controls the level of statistics gathered for all zones.
│ │ │ │logging, zone
zone, logging
These tables group the various statements permissible in named.conf by
│ │ │ │ ├── html2text {}
│ │ │ │ │ @@ -2364,1178 +2364,1178 @@
│ │ │ │ │ _Z_o_n_e_ _T_a_g_ _S_t_a_t_e_m_e_n_t_s relate to or control zone behavior, and typically only
│ │ │ │ │ appear in a zone block.
│ │ │ │ │ _D_e_p_r_e_c_a_t_e_d_ _T_a_g_ _S_t_a_t_e_m_e_n_t_s are those that are now deprecated, but are included
│ │ │ │ │ here for historical reference.
│ │ │ │ │ The following table lists all statements permissible in named.conf, with their
│ │ │ │ │ associated tags; the next section groups the statements by tag. Please note
│ │ │ │ │ that these sections are a work in progress.
│ │ │ │ │ -SSttaatteemmeenntt DDeessccrriippttiioonn TTaaggss
│ │ │ │ │ -_a_c_l Assigns a symbolic name to server
│ │ │ │ │ - an address match list.
│ │ │ │ │ -_a_l_g_o_r_i_t_h_m Defines the algorithm to be security
│ │ │ │ │ - used in a key clause.
│ │ │ │ │ -_a_l_l_-_p_e_r_-_s_e_c_o_n_d Limits UDP responses of all query
│ │ │ │ │ - kinds.
│ │ │ │ │ - Controls the ability to add
│ │ │ │ │ -_a_l_l_o_w_-_n_e_w_-_z_o_n_e_s zones at runtime via _r_n_d_c zone, server
│ │ │ │ │ - _a_d_d_z_o_n_e.
│ │ │ │ │ - Defines an
│ │ │ │ │ - _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t that is
│ │ │ │ │ - allowed to send NOTIFY
│ │ │ │ │ -_a_l_l_o_w_-_n_o_t_i_f_y messages for the zone, in transfer
│ │ │ │ │ - addition to addresses
│ │ │ │ │ - defined in the _p_r_i_m_a_r_i_e_s
│ │ │ │ │ - option for the zone.
│ │ │ │ │ - Defines an
│ │ │ │ │ -_a_l_l_o_w_-_p_r_o_x_y _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t for the server
│ │ │ │ │ - client addresses allowed to
│ │ │ │ │ - send PROXYv2 headers.
│ │ │ │ │ - Defines an
│ │ │ │ │ - _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t for the
│ │ │ │ │ - interface addresses allowed
│ │ │ │ │ -_a_l_l_o_w_-_p_r_o_x_y_-_o_n to accept PROXYv2 headers. server
│ │ │ │ │ - The option is mostly
│ │ │ │ │ - intended for multi-homed
│ │ │ │ │ - configurations.
│ │ │ │ │ - Specifies which hosts (an IP
│ │ │ │ │ -_a_l_l_o_w_-_q_u_e_r_y address list) are allowed to query
│ │ │ │ │ - send queries to this
│ │ │ │ │ - resolver.
│ │ │ │ │ - Specifies which hosts (an IP
│ │ │ │ │ - address list) can access
│ │ │ │ │ -_a_l_l_o_w_-_q_u_e_r_y_-_c_a_c_h_e this server's cache and thus query
│ │ │ │ │ - effectively controls
│ │ │ │ │ - recursion.
│ │ │ │ │ - Specifies which hosts (an IP
│ │ │ │ │ - address list) can access
│ │ │ │ │ -_a_l_l_o_w_-_q_u_e_r_y_-_c_a_c_h_e_-_o_n this server's cache. Used on query
│ │ │ │ │ - servers with multiple
│ │ │ │ │ - interfaces.
│ │ │ │ │ - Specifies which local
│ │ │ │ │ - addresses (an IP address
│ │ │ │ │ -_a_l_l_o_w_-_q_u_e_r_y_-_o_n list) are allowed to send query
│ │ │ │ │ - queries to this resolver.
│ │ │ │ │ - Used in multi-homed
│ │ │ │ │ - configurations.
│ │ │ │ │ - Defines an
│ │ │ │ │ -_a_l_l_o_w_-_r_e_c_u_r_s_i_o_n _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t of query
│ │ │ │ │ - clients that are allowed to
│ │ │ │ │ - perform recursive queries.
│ │ │ │ │ - Specifies which local
│ │ │ │ │ -_a_l_l_o_w_-_r_e_c_u_r_s_i_o_n_-_o_n addresses can accept query, server
│ │ │ │ │ - recursive queries.
│ │ │ │ │ - Defines an
│ │ │ │ │ - _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t of hosts
│ │ │ │ │ -_a_l_l_o_w_-_t_r_a_n_s_f_e_r that are allowed to transfer transfer
│ │ │ │ │ - the zone information from
│ │ │ │ │ - this server.
│ │ │ │ │ - Defines an
│ │ │ │ │ - _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t of hosts
│ │ │ │ │ -_a_l_l_o_w_-_u_p_d_a_t_e that are allowed to submit transfer
│ │ │ │ │ - dynamic updates for primary
│ │ │ │ │ - zones.
│ │ │ │ │ - Defines an
│ │ │ │ │ - _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t of hosts
│ │ │ │ │ -_a_l_l_o_w_-_u_p_d_a_t_e_-_f_o_r_w_a_r_d_i_n_g that are allowed to submit transfer
│ │ │ │ │ - dynamic updates to a
│ │ │ │ │ - secondary server for
│ │ │ │ │ - transmission to a primary.
│ │ │ │ │ - Defines one or more hosts
│ │ │ │ │ -_a_l_s_o_-_n_o_t_i_f_y that are sent NOTIFY transfer
│ │ │ │ │ - messages when zone changes
│ │ │ │ │ - occur.
│ │ │ │ │ - Controls whether COOKIE EDNS
│ │ │ │ │ -_a_n_s_w_e_r_-_c_o_o_k_i_e replies are sent in response query
│ │ │ │ │ - to client queries.
│ │ │ │ │ - Allows multiple views to
│ │ │ │ │ -_a_t_t_a_c_h_-_c_a_c_h_e share a single cache view
│ │ │ │ │ - database.
│ │ │ │ │ - Controls whether BIND,
│ │ │ │ │ - acting as a resolver,
│ │ │ │ │ -_a_u_t_h_-_n_x_d_o_m_a_i_n provides authoritative query
│ │ │ │ │ - NXDOMAIN (domain does not
│ │ │ │ │ - exist) answers.
│ │ │ │ │ - Controls the automatic
│ │ │ │ │ -_a_u_t_o_m_a_t_i_c_-_i_n_t_e_r_f_a_c_e_-_s_c_a_n rescanning of network server
│ │ │ │ │ - interfaces when addresses
│ │ │ │ │ - are added or removed.
│ │ │ │ │ - Specifies the range(s) of
│ │ │ │ │ -_a_v_o_i_d_-_v_4_-_u_d_p_-_p_o_r_t_s ports to be excluded from deprecated
│ │ │ │ │ - use as sources for UDP/IPv4
│ │ │ │ │ - messages.
│ │ │ │ │ - Specifies the range(s) of
│ │ │ │ │ -_a_v_o_i_d_-_v_6_-_u_d_p_-_p_o_r_t_s ports to be excluded from deprecated
│ │ │ │ │ - use as sources for UDP/IPv6
│ │ │ │ │ - messages.
│ │ │ │ │ - Specifies the pathname of a
│ │ │ │ │ -_b_i_n_d_k_e_y_s_-_f_i_l_e file to override the built- dnssec
│ │ │ │ │ - in trusted keys provided by
│ │ │ │ │ - _n_a_m_e_d.
│ │ │ │ │ - Defines an
│ │ │ │ │ - _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t of hosts
│ │ │ │ │ -_b_l_a_c_k_h_o_l_e to ignore. The server will query
│ │ │ │ │ - neither respond to queries
│ │ │ │ │ - from nor send queries to
│ │ │ │ │ - these addresses.
│ │ │ │ │ -_b_o_g_u_s Allows a remote server to be server
│ │ │ │ │ - ignored.
│ │ │ │ │ - Enables _d_n_s_6_4 synthesis even
│ │ │ │ │ -_b_r_e_a_k_-_d_n_s_s_e_c if the validated result query
│ │ │ │ │ - would cause a DNSSEC
│ │ │ │ │ - validation failure.
│ │ │ │ │ -_b_u_f_f_e_r_e_d Controls flushing of log logging
│ │ │ │ │ - messages.
│ │ │ │ │ - Specifies the path to a file
│ │ │ │ │ - containing TLS certificates
│ │ │ │ │ -_c_a_-_f_i_l_e for trusted CA authorities, server, security
│ │ │ │ │ - used to verify remote peer
│ │ │ │ │ - certificates.
│ │ │ │ │ -_c_a_t_a_l_o_g_-_z_o_n_e_s Configures catalog zones in zone
│ │ │ │ │ - _n_a_m_e_d_._c_o_n_f.
│ │ │ │ │ - Specifies the type of data
│ │ │ │ │ -_c_a_t_e_g_o_r_y logged to a particular logging
│ │ │ │ │ - channel.
│ │ │ │ │ - Specifies whether a CDNSKEY
│ │ │ │ │ -_c_d_n_s_k_e_y record should be published dnssec
│ │ │ │ │ - during KSK rollover.
│ │ │ │ │ - Specifies the digest types
│ │ │ │ │ -_c_d_s_-_d_i_g_e_s_t_-_t_y_p_e_s to use for CDS resource dnssec
│ │ │ │ │ - records.
│ │ │ │ │ - Specifies the path to a file
│ │ │ │ │ -_c_e_r_t_-_f_i_l_e containing the TLS server, security
│ │ │ │ │ - certificate for a
│ │ │ │ │ - connection.
│ │ │ │ │ - Defines a stream of data
│ │ │ │ │ -_c_h_a_n_n_e_l that can be independently logging
│ │ │ │ │ - logged.
│ │ │ │ │ - Checks primary zones for
│ │ │ │ │ - records that are treated as
│ │ │ │ │ -_c_h_e_c_k_-_d_u_p_-_r_e_c_o_r_d_s different by DNSSEC but are dnssec, query
│ │ │ │ │ - semantically equal in plain
│ │ │ │ │ - DNS.
│ │ │ │ │ - Performs post-load zone
│ │ │ │ │ -_c_h_e_c_k_-_i_n_t_e_g_r_i_t_y integrity checks on primary zone
│ │ │ │ │ - zones.
│ │ │ │ │ - Checks whether an MX record
│ │ │ │ │ -_c_h_e_c_k_-_m_x appears to refer to an IP zone
│ │ │ │ │ - address.
│ │ │ │ │ - Sets the response to MX
│ │ │ │ │ -_c_h_e_c_k_-_m_x_-_c_n_a_m_e records that refer to zone
│ │ │ │ │ - CNAMEs.
│ │ │ │ │ - Restricts the character set
│ │ │ │ │ - and syntax of certain domain
│ │ │ │ │ -_c_h_e_c_k_-_n_a_m_e_s names in primary files and/ query, server
│ │ │ │ │ - or DNS responses received
│ │ │ │ │ - from the network.
│ │ │ │ │ - Specifies whether to check
│ │ │ │ │ -_c_h_e_c_k_-_s_i_b_l_i_n_g for sibling glue when zone
│ │ │ │ │ - performing integrity checks.
│ │ │ │ │ - Specifies whether to check
│ │ │ │ │ -_c_h_e_c_k_-_s_p_f for a TXT Sender Policy zone
│ │ │ │ │ - Framework record, if an SPF
│ │ │ │ │ - record is present.
│ │ │ │ │ - Sets the response to SRV
│ │ │ │ │ -_c_h_e_c_k_-_s_r_v_-_c_n_a_m_e records that refer to zone
│ │ │ │ │ - CNAMEs.
│ │ │ │ │ - Specifies whether to perform
│ │ │ │ │ -_c_h_e_c_k_-_s_v_c_b additional checks on SVCB zone
│ │ │ │ │ - records.
│ │ │ │ │ -_c_h_e_c_k_-_w_i_l_d_c_a_r_d Checks for non-terminal zone
│ │ │ │ │ - wildcards.
│ │ │ │ │ -_c_h_e_c_k_d_s Controls whether DS queries dnssec
│ │ │ │ │ - are sent to parental agents.
│ │ │ │ │ -_c_i_p_h_e_r_s Specifies a list of allowed security
│ │ │ │ │ - ciphers.
│ │ │ │ │ - Specifies an access control
│ │ │ │ │ -_c_l_i_e_n_t_s list (ACL) of clients that query
│ │ │ │ │ - are affected by a given
│ │ │ │ │ - _d_n_s_6_4 directive.
│ │ │ │ │ - Sets the initial minimum
│ │ │ │ │ - number of simultaneous
│ │ │ │ │ -_c_l_i_e_n_t_s_-_p_e_r_-_q_u_e_r_y recursive clients accepted server
│ │ │ │ │ - by the server for any given
│ │ │ │ │ - query before the server
│ │ │ │ │ - drops additional clients.
│ │ │ │ │ - Specifies control channels
│ │ │ │ │ -_c_o_n_t_r_o_l_s to be used to manage the server
│ │ │ │ │ - name server.
│ │ │ │ │ - Sets the algorithm to be
│ │ │ │ │ -_c_o_o_k_i_e_-_a_l_g_o_r_i_t_h_m used when generating a server
│ │ │ │ │ - server cookie.
│ │ │ │ │ - Specifies a shared secret
│ │ │ │ │ - used for generating and
│ │ │ │ │ -_c_o_o_k_i_e_-_s_e_c_r_e_t verifying EDNS COOKIE server
│ │ │ │ │ - options within an anycast
│ │ │ │ │ - cluster.
│ │ │ │ │ - Specifies the type of
│ │ │ │ │ -_d_a_t_a_b_a_s_e database to be used to store zone
│ │ │ │ │ - zone data.
│ │ │ │ │ - Rejects A or AAAA records if
│ │ │ │ │ -_d_e_n_y_-_a_n_s_w_e_r_-_a_d_d_r_e_s_s_e_s the corresponding IPv4 or query
│ │ │ │ │ - IPv6 addresses match a given
│ │ │ │ │ - _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t.
│ │ │ │ │ - Rejects CNAME or DNAME
│ │ │ │ │ -_d_e_n_y_-_a_n_s_w_e_r_-_a_l_i_a_s_e_s records if the "alias" name query
│ │ │ │ │ - matches a given list of
│ │ │ │ │ - _d_o_m_a_i_n___n_a_m_e elements.
│ │ │ │ │ - Specifies the path to a file
│ │ │ │ │ -_d_h_p_a_r_a_m_-_f_i_l_e containing Diffie-Hellman server, security
│ │ │ │ │ - parameters, for enabling
│ │ │ │ │ - cipher suites.
│ │ │ │ │ - Concentrates zone
│ │ │ │ │ - maintenance so that all
│ │ │ │ │ -_d_i_a_l_u_p transfers take place once deprecated
│ │ │ │ │ - every _h_e_a_r_t_b_e_a_t_-_i_n_t_e_r_v_a_l,
│ │ │ │ │ - ideally during a single
│ │ │ │ │ - call.
│ │ │ │ │ -_d_i_r_e_c_t_o_r_y Sets the server's working server
│ │ │ │ │ - directory.
│ │ │ │ │ -_d_i_s_a_b_l_e_-_a_l_g_o_r_i_t_h_m_s Disables DNSSEC algorithms dnssec
│ │ │ │ │ - from a specified zone.
│ │ │ │ │ -_d_i_s_a_b_l_e_-_d_s_-_d_i_g_e_s_t_s Disables DS digest types dnssec, zone
│ │ │ │ │ - from a specified zone.
│ │ │ │ │ -_d_i_s_a_b_l_e_-_e_m_p_t_y_-_z_o_n_e Disables individual empty zone, server
│ │ │ │ │ - zones.
│ │ │ │ │ - Configures a Dynamically
│ │ │ │ │ -_d_l_z Loadable Zone (DLZ) database zone
│ │ │ │ │ - in _n_a_m_e_d_._c_o_n_f.
│ │ │ │ │ - Instructs _n_a_m_e_d to return
│ │ │ │ │ -_d_n_s_6_4 mapped IPv4 addresses to query
│ │ │ │ │ - AAAA queries when there are
│ │ │ │ │ - no AAAA records.
│ │ │ │ │ -_d_n_s_6_4_-_c_o_n_t_a_c_t Specifies the name of the server
│ │ │ │ │ - contact for _d_n_s_6_4 zones.
│ │ │ │ │ -_d_n_s_6_4_-_s_e_r_v_e_r Specifies the name of the server
│ │ │ │ │ - server for _d_n_s_6_4 zones.
│ │ │ │ │ -_d_n_s_k_e_y_-_s_i_g_-_v_a_l_i_d_i_t_y obsolete
│ │ │ │ │ - Specifies the time to live
│ │ │ │ │ -_d_n_s_k_e_y_-_t_t_l (TTL) for DNSKEY resource dnssec
│ │ │ │ │ - records.
│ │ │ │ │ - Turns on the DNS Response
│ │ │ │ │ -_d_n_s_r_p_s_-_e_n_a_b_l_e Policy Service (DNSRPS) server, security
│ │ │ │ │ - interface.
│ │ │ │ │ - Turns on the DNS Response
│ │ │ │ │ -_d_n_s_r_p_s_-_l_i_b_r_a_r_y Policy Service (DNSRPS) server, security
│ │ │ │ │ - interface.
│ │ │ │ │ - Provides additional RPZ
│ │ │ │ │ - configuration settings,
│ │ │ │ │ -_d_n_s_r_p_s_-_o_p_t_i_o_n_s which are passed to the DNS server, security
│ │ │ │ │ - Response Policy Service
│ │ │ │ │ - (DNSRPS) provider library.
│ │ │ │ │ - Instructs BIND 9 to accept
│ │ │ │ │ -_d_n_s_s_e_c_-_a_c_c_e_p_t_-_e_x_p_i_r_e_d expired DNSSEC signatures dnssec
│ │ │ │ │ - when validating.
│ │ │ │ │ -_d_n_s_s_e_c_-_d_n_s_k_e_y_-_k_s_k_o_n_l_y obsolete
│ │ │ │ │ - Sets the frequency of
│ │ │ │ │ -_d_n_s_s_e_c_-_l_o_a_d_k_e_y_s_-_i_n_t_e_r_v_a_l automatic checks of the dnssec
│ │ │ │ │ - DNSSEC key repository.
│ │ │ │ │ - Defines hierarchies that
│ │ │ │ │ -_d_n_s_s_e_c_-_m_u_s_t_-_b_e_-_s_e_c_u_r_e must or may not be secure deprecated
│ │ │ │ │ - (signed and validated).
│ │ │ │ │ -_d_n_s_s_e_c_-_p_o_l_i_c_y Defines a key and signing dnssec
│ │ │ │ │ - policy (KASP) for zones.
│ │ │ │ │ -_d_n_s_s_e_c_-_s_e_c_u_r_e_-_t_o_-_i_n_s_e_c_u_r_e obsolete
│ │ │ │ │ -_d_n_s_s_e_c_-_u_p_d_a_t_e_-_m_o_d_e obsolete
│ │ │ │ │ -_d_n_s_s_e_c_-_v_a_l_i_d_a_t_i_o_n Enables DNSSEC validation in dnssec
│ │ │ │ │ - _n_a_m_e_d.
│ │ │ │ │ -_d_n_s_t_a_p Enables logging of _d_n_s_t_a_p logging
│ │ │ │ │ - messages.
│ │ │ │ │ -_d_n_s_t_a_p_-_i_d_e_n_t_i_t_y Specifies an identity string logging
│ │ │ │ │ - to send in _d_n_s_t_a_p messages.
│ │ │ │ │ - Configures the path to which
│ │ │ │ │ -_d_n_s_t_a_p_-_o_u_t_p_u_t the _d_n_s_t_a_p frame stream is logging
│ │ │ │ │ - sent.
│ │ │ │ │ -_d_n_s_t_a_p_-_v_e_r_s_i_o_n Specifies a _v_e_r_s_i_o_n string logging
│ │ │ │ │ - to send in _d_n_s_t_a_p messages.
│ │ │ │ │ - Specifies host names or
│ │ │ │ │ -_d_u_a_l_-_s_t_a_c_k_-_s_e_r_v_e_r_s addresses of machines with server
│ │ │ │ │ - access to both IPv4 and IPv6
│ │ │ │ │ - transports.
│ │ │ │ │ - Indicates the pathname of
│ │ │ │ │ -_d_u_m_p_-_f_i_l_e the file where the server logging
│ │ │ │ │ - dumps the database after
│ │ │ │ │ - _r_n_d_c_ _d_u_m_p_d_b.
│ │ │ │ │ -_d_y_n_d_b Configures a DynDB database zone
│ │ │ │ │ - in _n_a_m_e_d_._c_o_n_f.
│ │ │ │ │ -_e_d_n_s Controls the use of the server
│ │ │ │ │ - EDNS0 (_RR_FF_CC_ _22_66_77_11) feature.
│ │ │ │ │ - Sets the maximum advertised
│ │ │ │ │ - EDNS UDP buffer size to
│ │ │ │ │ -_e_d_n_s_-_u_d_p_-_s_i_z_e control the size of packets query
│ │ │ │ │ - received from authoritative
│ │ │ │ │ - servers in response to
│ │ │ │ │ - recursive queries.
│ │ │ │ │ - Sets the maximum EDNS
│ │ │ │ │ -_e_d_n_s_-_v_e_r_s_i_o_n VERSION that is sent to the server
│ │ │ │ │ - server(s) by the resolver.
│ │ │ │ │ - Specifies the contact name
│ │ │ │ │ -_e_m_p_t_y_-_c_o_n_t_a_c_t in the returned SOA record zone, server
│ │ │ │ │ - for empty zones.
│ │ │ │ │ - Specifies the server name in
│ │ │ │ │ -_e_m_p_t_y_-_s_e_r_v_e_r the returned SOA record for zone, server
│ │ │ │ │ - empty zones.
│ │ │ │ │ -_e_m_p_t_y_-_z_o_n_e_s_-_e_n_a_b_l_e Enables or disables all zone, server
│ │ │ │ │ - empty zones.
│ │ │ │ │ - Specifies a list of HTTP
│ │ │ │ │ -_e_n_d_p_o_i_n_t_s query paths on which to query, server
│ │ │ │ │ - listen.
│ │ │ │ │ - Limits the number of errors
│ │ │ │ │ -_e_r_r_o_r_s_-_p_e_r_-_s_e_c_o_n_d for a valid domain name and server
│ │ │ │ │ - record type.
│ │ │ │ │ - Allows a list of IPv6
│ │ │ │ │ - addresses to be ignored if
│ │ │ │ │ -_e_x_c_l_u_d_e they appear in a domain query
│ │ │ │ │ - name's AAAA records in
│ │ │ │ │ - _d_n_s_6_4.
│ │ │ │ │ - Exempts specific clients or
│ │ │ │ │ -_e_x_e_m_p_t_-_c_l_i_e_n_t_s client groups from rate query
│ │ │ │ │ - limiting.
│ │ │ │ │ - Sets the parameters for
│ │ │ │ │ - dynamic resizing of the
│ │ │ │ │ -_f_e_t_c_h_-_q_u_o_t_a_-_p_a_r_a_m_s _f_e_t_c_h_e_s_-_p_e_r_-_s_e_r_v_e_r quota in query, server
│ │ │ │ │ - response to detected
│ │ │ │ │ - congestion.
│ │ │ │ │ - Sets the maximum number of
│ │ │ │ │ - simultaneous iterative
│ │ │ │ │ - queries allowed to be sent
│ │ │ │ │ -_f_e_t_c_h_e_s_-_p_e_r_-_s_e_r_v_e_r by a server to an upstream query, server
│ │ │ │ │ - name server before the
│ │ │ │ │ - server blocks additional
│ │ │ │ │ - queries.
│ │ │ │ │ - Sets the maximum number of
│ │ │ │ │ - simultaneous iterative
│ │ │ │ │ -_f_e_t_c_h_e_s_-_p_e_r_-_z_o_n_e queries allowed to any one query, server
│ │ │ │ │ - domain before the server
│ │ │ │ │ - blocks new queries for data
│ │ │ │ │ - in or beneath that zone.
│ │ │ │ │ -_f_i_l_e Specifies the zone's zone
│ │ │ │ │ - filename.
│ │ │ │ │ - Controls whether pending
│ │ │ │ │ -_f_l_u_s_h_-_z_o_n_e_s_-_o_n_-_s_h_u_t_d_o_w_n zone writes are flushed when zone
│ │ │ │ │ - the name server exits.
│ │ │ │ │ - Allows or disallows fallback
│ │ │ │ │ - to recursion if forwarding
│ │ │ │ │ -_f_o_r_w_a_r_d has failed; it is always query
│ │ │ │ │ - used in conjunction with the
│ │ │ │ │ - _f_o_r_w_a_r_d_e_r_s statement.
│ │ │ │ │ -_f_o_r_w_a_r_d_e_r_s Defines one or more hosts to query
│ │ │ │ │ - which queries are forwarded.
│ │ │ │ │ - Sets the number of
│ │ │ │ │ -_f_s_t_r_m_-_s_e_t_-_b_u_f_f_e_r_-_h_i_n_t accumulated bytes in the logging
│ │ │ │ │ - output buffer before forcing
│ │ │ │ │ - a buffer flush.
│ │ │ │ │ - Sets the number of seconds
│ │ │ │ │ -_f_s_t_r_m_-_s_e_t_-_f_l_u_s_h_-_t_i_m_e_o_u_t that unflushed data remains logging
│ │ │ │ │ - in the output buffer.
│ │ │ │ │ - Sets the number of queue
│ │ │ │ │ -_f_s_t_r_m_-_s_e_t_-_i_n_p_u_t_-_q_u_e_u_e_-_s_i_z_e entries to allocate for each logging
│ │ │ │ │ - input queue.
│ │ │ │ │ - Sets the number of
│ │ │ │ │ -_f_s_t_r_m_-_s_e_t_-_o_u_t_p_u_t_-_n_o_t_i_f_y_- outstanding queue entries
│ │ │ │ │ -_t_h_r_e_s_h_o_l_d allowed on an input queue logging
│ │ │ │ │ - before waking the I/
│ │ │ │ │ - O thread.
│ │ │ │ │ -_f_s_t_r_m_-_s_e_t_-_o_u_t_p_u_t_-_q_u_e_u_e_-_m_o_d_e_l Sets the queuing semantics logging
│ │ │ │ │ - to use for queue objects.
│ │ │ │ │ - Sets the number of queue
│ │ │ │ │ -_f_s_t_r_m_-_s_e_t_-_o_u_t_p_u_t_-_q_u_e_u_e_-_s_i_z_e entries allocated for each logging
│ │ │ │ │ - output queue.
│ │ │ │ │ - Sets the number of seconds
│ │ │ │ │ -_f_s_t_r_m_-_s_e_t_-_r_e_o_p_e_n_-_i_n_t_e_r_v_a_l to wait between attempts to logging
│ │ │ │ │ - reopen a closed output
│ │ │ │ │ - stream.
│ │ │ │ │ - Specifies the directory
│ │ │ │ │ -_g_e_o_i_p_-_d_i_r_e_c_t_o_r_y containing GeoIP database server
│ │ │ │ │ - files.
│ │ │ │ │ - Sets the interval at which
│ │ │ │ │ -_h_e_a_r_t_b_e_a_t_-_i_n_t_e_r_v_a_l the server performs zone deprecated
│ │ │ │ │ - maintenance tasks for all
│ │ │ │ │ - zones marked as _d_i_a_l_u_p.
│ │ │ │ │ - Specifies the hostname of
│ │ │ │ │ -_h_o_s_t_n_a_m_e the server to return in server
│ │ │ │ │ - response to a hostname.bind
│ │ │ │ │ - query.
│ │ │ │ │ - Configures HTTP endpoints on
│ │ │ │ │ -_h_t_t_p which to listen for DNS- query, server
│ │ │ │ │ - over-HTTPS (DoH) queries.
│ │ │ │ │ - Limits the number of active
│ │ │ │ │ -_h_t_t_p_-_l_i_s_t_e_n_e_r_-_c_l_i_e_n_t_s concurrent connections on a server
│ │ │ │ │ - per-listener basis.
│ │ │ │ │ - Specifies the TCP port
│ │ │ │ │ -_h_t_t_p_-_p_o_r_t number the server uses to query, server
│ │ │ │ │ - receive and send unencrypted
│ │ │ │ │ - DNS traffic via HTTP.
│ │ │ │ │ - Limits the number of active
│ │ │ │ │ -_h_t_t_p_-_s_t_r_e_a_m_s_-_p_e_r_-_c_o_n_n_e_c_t_i_o_n concurrent HTTP/2 streams on server
│ │ │ │ │ - a per-connection basis.
│ │ │ │ │ - Specifies the TCP port
│ │ │ │ │ -_h_t_t_p_s_-_p_o_r_t number the server uses to query, server
│ │ │ │ │ - receive and send DNS-over-
│ │ │ │ │ - HTTPS protocol traffic.
│ │ │ │ │ -_i_n_-_v_i_e_w Specifies the view in which view, zone
│ │ │ │ │ - a given zone is defined.
│ │ │ │ │ -_i_n_e_t Specifies a TCP socket as a server
│ │ │ │ │ - control channel.
│ │ │ │ │ - Specifies whether BIND 9
│ │ │ │ │ -_i_n_l_i_n_e_-_s_i_g_n_i_n_g maintains a separate signed dnssec, zone
│ │ │ │ │ - version of a zone.
│ │ │ │ │ - Sets the interval at which
│ │ │ │ │ -_i_n_t_e_r_f_a_c_e_-_i_n_t_e_r_v_a_l the server scans the network server
│ │ │ │ │ - interface list.
│ │ │ │ │ -_i_p_v_4_-_p_r_e_f_i_x_-_l_e_n_g_t_h Specifies the prefix lengths server
│ │ │ │ │ - of IPv4 address blocks.
│ │ │ │ │ - Specifies the contact for
│ │ │ │ │ -_i_p_v_4_o_n_l_y_-_c_o_n_t_a_c_t the IPV4ONLY.ARPA zone server
│ │ │ │ │ - created by _d_n_s_6_4.
│ │ │ │ │ - Enables automatic IPv4 zones
│ │ │ │ │ -_i_p_v_4_o_n_l_y_-_e_n_a_b_l_e if a _d_n_s_6_4 block is query
│ │ │ │ │ - configured.
│ │ │ │ │ - Specifies the name of the
│ │ │ │ │ -_i_p_v_4_o_n_l_y_-_s_e_r_v_e_r server for the IPV4ONLY.ARPA query, server
│ │ │ │ │ - zone created by _d_n_s_6_4.
│ │ │ │ │ -_i_p_v_6_-_p_r_e_f_i_x_-_l_e_n_g_t_h Specifies the prefix lengths server
│ │ │ │ │ - of IPv6 address blocks.
│ │ │ │ │ -_i_x_f_r_-_f_r_o_m_-_d_i_f_f_e_r_e_n_c_e_s Controls how IXFR transfers transfer
│ │ │ │ │ - are calculated.
│ │ │ │ │ -_j_o_u_r_n_a_l Allows the default journal's zone
│ │ │ │ │ - filename to be overridden.
│ │ │ │ │ - Defines a shared secret key
│ │ │ │ │ -_k_e_y for use with _T_S_I_G or the security
│ │ │ │ │ - command channel.
│ │ │ │ │ - Indicates the directory
│ │ │ │ │ -_k_e_y_-_d_i_r_e_c_t_o_r_y where public and private dnssec
│ │ │ │ │ - DNSSEC key files are found.
│ │ │ │ │ - Specifies the path to a file
│ │ │ │ │ -_k_e_y_-_f_i_l_e containing the private TLS server, security
│ │ │ │ │ - key for a connection.
│ │ │ │ │ - Specifies one or more
│ │ │ │ │ -_k_e_y_s _s_e_r_v_e_r___k_e_y s to be used with server, security
│ │ │ │ │ - a remote server.
│ │ │ │ │ -_l_a_m_e_-_t_t_l Sets the resolver's lame server
│ │ │ │ │ - cache.
│ │ │ │ │ - Specifies the IPv4 addresses
│ │ │ │ │ -_l_i_s_t_e_n_-_o_n on which a server listens server
│ │ │ │ │ - for DNS queries.
│ │ │ │ │ - Specifies the IPv6 addresses
│ │ │ │ │ -_l_i_s_t_e_n_-_o_n_-_v_6 on which a server listens server
│ │ │ │ │ - for DNS queries.
│ │ │ │ │ - Specifies a per-listener
│ │ │ │ │ -_l_i_s_t_e_n_e_r_-_c_l_i_e_n_t_s quota for active query, server
│ │ │ │ │ - connections.
│ │ │ │ │ - Sets a maximum size for the
│ │ │ │ │ -_l_m_d_b_-_m_a_p_s_i_z_e memory map of the new-zone server
│ │ │ │ │ - database in LMDB database
│ │ │ │ │ - format.
│ │ │ │ │ - Tests rate-limiting
│ │ │ │ │ -_l_o_g_-_o_n_l_y parameters without actually logging, query
│ │ │ │ │ - dropping any requests.
│ │ │ │ │ -_l_o_g_g_i_n_g Configures logging options logging
│ │ │ │ │ - for the name server.
│ │ │ │ │ -_m_a_n_a_g_e_d_-_k_e_y_s deprecated
│ │ │ │ │ - Specifies the directory in
│ │ │ │ │ -_m_a_n_a_g_e_d_-_k_e_y_s_-_d_i_r_e_c_t_o_r_y which to store the files dnssec
│ │ │ │ │ - that track managed DNSSEC
│ │ │ │ │ - keys.
│ │ │ │ │ - Specifies an access control
│ │ │ │ │ - list (ACL) of IPv4 addresses
│ │ │ │ │ -_m_a_p_p_e_d that are to be mapped to the query
│ │ │ │ │ - corresponding A RRset in
│ │ │ │ │ - _d_n_s_6_4.
│ │ │ │ │ -_m_a_s_t_e_r_f_i_l_e_-_f_o_r_m_a_t Specifies the file format of zone, server
│ │ │ │ │ - zone files.
│ │ │ │ │ - Specifies the format of zone
│ │ │ │ │ -_m_a_s_t_e_r_f_i_l_e_-_s_t_y_l_e files during a dump, when server
│ │ │ │ │ - the _m_a_s_t_e_r_f_i_l_e_-_f_o_r_m_a_t is
│ │ │ │ │ - text.
│ │ │ │ │ - Specifies a view of DNS
│ │ │ │ │ -_m_a_t_c_h_-_c_l_i_e_n_t_s namespace for a given subset view
│ │ │ │ │ - of client IP addresses.
│ │ │ │ │ - Specifies a view of DNS
│ │ │ │ │ -_m_a_t_c_h_-_d_e_s_t_i_n_a_t_i_o_n_s namespace for a given subset view
│ │ │ │ │ - of destination IP addresses.
│ │ │ │ │ - Allows IPv4-mapped IPv6
│ │ │ │ │ - addresses to match address-
│ │ │ │ │ -_m_a_t_c_h_-_m_a_p_p_e_d_-_a_d_d_r_e_s_s_e_s match list entries for server
│ │ │ │ │ - corresponding IPv4
│ │ │ │ │ - addresses.
│ │ │ │ │ - Specifies that only
│ │ │ │ │ -_m_a_t_c_h_-_r_e_c_u_r_s_i_v_e_-_o_n_l_y recursive requests can match view
│ │ │ │ │ - this view of the DNS
│ │ │ │ │ - namespace.
│ │ │ │ │ - Sets the maximum amount of
│ │ │ │ │ -_m_a_x_-_c_a_c_h_e_-_s_i_z_e memory to use for an server
│ │ │ │ │ - individual cache database
│ │ │ │ │ - and its associated metadata.
│ │ │ │ │ - Specifies the maximum time
│ │ │ │ │ -_m_a_x_-_c_a_c_h_e_-_t_t_l (in seconds) that the server server
│ │ │ │ │ - caches ordinary (positive)
│ │ │ │ │ - answers.
│ │ │ │ │ - Sets the maximum number of
│ │ │ │ │ - simultaneous recursive
│ │ │ │ │ -_m_a_x_-_c_l_i_e_n_t_s_-_p_e_r_-_q_u_e_r_y clients accepted by the server
│ │ │ │ │ - server for any given query
│ │ │ │ │ - before the server drops
│ │ │ │ │ - additional clients.
│ │ │ │ │ - Sets the maximum size for
│ │ │ │ │ -_m_a_x_-_i_x_f_r_-_r_a_t_i_o IXFR responses to zone transfer
│ │ │ │ │ - transfer requests.
│ │ │ │ │ -_m_a_x_-_j_o_u_r_n_a_l_-_s_i_z_e Controls the size of journal transfer
│ │ │ │ │ - files.
│ │ │ │ │ - Specifies the maximum
│ │ │ │ │ - retention time (in seconds)
│ │ │ │ │ -_m_a_x_-_n_c_a_c_h_e_-_t_t_l for storage of negative server
│ │ │ │ │ - answers in the server's
│ │ │ │ │ - cache.
│ │ │ │ │ -_m_a_x_-_r_e_c_o_r_d_s Sets the maximum number of zone, server
│ │ │ │ │ - records permitted in a zone.
│ │ │ │ │ - Sets the maximum number of
│ │ │ │ │ - levels of recursion
│ │ │ │ │ -_m_a_x_-_r_e_c_u_r_s_i_o_n_-_d_e_p_t_h permitted at any one time server
│ │ │ │ │ - while servicing a recursive
│ │ │ │ │ - query.
│ │ │ │ │ - Sets the maximum number of
│ │ │ │ │ -_m_a_x_-_r_e_c_u_r_s_i_o_n_-_q_u_e_r_i_e_s iterative queries while query, server
│ │ │ │ │ - servicing a recursive query.
│ │ │ │ │ - Limits the zone refresh
│ │ │ │ │ -_m_a_x_-_r_e_f_r_e_s_h_-_t_i_m_e interval to no less often transfer
│ │ │ │ │ - than the specified value, in
│ │ │ │ │ - seconds.
│ │ │ │ │ - Limits the zone refresh
│ │ │ │ │ -_m_a_x_-_r_e_t_r_y_-_t_i_m_e retry interval to no less transfer
│ │ │ │ │ - often than the specified
│ │ │ │ │ - value, in seconds.
│ │ │ │ │ - Sets the maximum RSA
│ │ │ │ │ -_m_a_x_-_r_s_a_-_e_x_p_o_n_e_n_t_-_s_i_z_e exponent size (in bits) when dnssec, query
│ │ │ │ │ - validating.
│ │ │ │ │ - Specifies the maximum time
│ │ │ │ │ - that the server retains
│ │ │ │ │ -_m_a_x_-_s_t_a_l_e_-_t_t_l records past their normal server
│ │ │ │ │ - expiry, to return them as
│ │ │ │ │ - stale records.
│ │ │ │ │ - Sets the maximum size of the
│ │ │ │ │ -_m_a_x_-_t_a_b_l_e_-_s_i_z_e table used to track requests server
│ │ │ │ │ - and rate-limit responses.
│ │ │ │ │ - Specifies the number of
│ │ │ │ │ -_m_a_x_-_t_r_a_n_s_f_e_r_-_i_d_l_e_-_i_n minutes after which inbound transfer
│ │ │ │ │ - zone transfers making no
│ │ │ │ │ - progress are terminated.
│ │ │ │ │ - Specifies the number of
│ │ │ │ │ -_m_a_x_-_t_r_a_n_s_f_e_r_-_i_d_l_e_-_o_u_t minutes after which outbound transfer
│ │ │ │ │ - zone transfers making no
│ │ │ │ │ - progress are terminated.
│ │ │ │ │ - Specifies the number of
│ │ │ │ │ -_m_a_x_-_t_r_a_n_s_f_e_r_-_t_i_m_e_-_i_n minutes after which inbound transfer
│ │ │ │ │ - zone transfers are
│ │ │ │ │ - terminated.
│ │ │ │ │ - Specifies the number of
│ │ │ │ │ -_m_a_x_-_t_r_a_n_s_f_e_r_-_t_i_m_e_-_o_u_t minutes after which outbound transfer
│ │ │ │ │ - zone transfers are
│ │ │ │ │ - terminated.
│ │ │ │ │ -_m_a_x_-_u_d_p_-_s_i_z_e Sets the maximum EDNS UDP query
│ │ │ │ │ - message size sent by _n_a_m_e_d.
│ │ │ │ │ - Set the maximum number of
│ │ │ │ │ -_m_a_x_-_v_a_l_i_d_a_t_i_o_n_-_f_a_i_l_u_r_e_s_-_p_e_r_- DNSSEC validation failures server
│ │ │ │ │ -_f_e_t_c_h that can happen in single
│ │ │ │ │ - fetch
│ │ │ │ │ - Set the maximum number of
│ │ │ │ │ -_m_a_x_-_v_a_l_i_d_a_t_i_o_n_s_-_p_e_r_-_f_e_t_c_h DNSSEC validations that can server
│ │ │ │ │ - happen in single fetch
│ │ │ │ │ - Specifies a maximum
│ │ │ │ │ -_m_a_x_-_z_o_n_e_-_t_t_l permissible time-to-live deprecated
│ │ │ │ │ - (TTL) value, in seconds.
│ │ │ │ │ - Controls whether memory
│ │ │ │ │ -_m_e_m_s_t_a_t_i_s_t_i_c_s statistics are written to logging, server
│ │ │ │ │ - the file specified by
│ │ │ │ │ - _m_e_m_s_t_a_t_i_s_t_i_c_s_-_f_i_l_e at exit.
│ │ │ │ │ - Sets the pathname of the
│ │ │ │ │ -_m_e_m_s_t_a_t_i_s_t_i_c_s_-_f_i_l_e file where the server writes logging
│ │ │ │ │ - memory usage statistics on
│ │ │ │ │ - exit.
│ │ │ │ │ - Controls whether DNS name
│ │ │ │ │ -_m_e_s_s_a_g_e_-_c_o_m_p_r_e_s_s_i_o_n compression is used in query
│ │ │ │ │ - responses to regular
│ │ │ │ │ - queries.
│ │ │ │ │ - Specifies the minimum time
│ │ │ │ │ -_m_i_n_-_c_a_c_h_e_-_t_t_l (in seconds) that the server server
│ │ │ │ │ - caches ordinary (positive)
│ │ │ │ │ - answers.
│ │ │ │ │ - Specifies the minimum
│ │ │ │ │ - retention time (in seconds)
│ │ │ │ │ -_m_i_n_-_n_c_a_c_h_e_-_t_t_l for storage of negative server
│ │ │ │ │ - answers in the server's
│ │ │ │ │ - cache.
│ │ │ │ │ - Limits the zone refresh
│ │ │ │ │ -_m_i_n_-_r_e_f_r_e_s_h_-_t_i_m_e interval to no more often transfer
│ │ │ │ │ - than the specified value, in
│ │ │ │ │ - seconds.
│ │ │ │ │ - Limits the zone refresh
│ │ │ │ │ -_m_i_n_-_r_e_t_r_y_-_t_i_m_e retry interval to no more transfer
│ │ │ │ │ - often than the specified
│ │ │ │ │ - value, in seconds.
│ │ │ │ │ - Sets the minimum size of the
│ │ │ │ │ -_m_i_n_-_t_a_b_l_e_-_s_i_z_e table used to track requests query
│ │ │ │ │ - and rate-limit responses.
│ │ │ │ │ - Controls whether the server
│ │ │ │ │ - replies with only one of the
│ │ │ │ │ -_m_i_n_i_m_a_l_-_a_n_y RRsets for a query name, query
│ │ │ │ │ - when generating a positive
│ │ │ │ │ - response to a query of type
│ │ │ │ │ - ANY over UDP.
│ │ │ │ │ - Controls whether the server
│ │ │ │ │ - only adds records to the
│ │ │ │ │ - authority and additional
│ │ │ │ │ -_m_i_n_i_m_a_l_-_r_e_s_p_o_n_s_e_s data sections when they are query
│ │ │ │ │ - required (e.g. delegations,
│ │ │ │ │ - negative responses). This
│ │ │ │ │ - improves server performance.
│ │ │ │ │ - Controls whether serial
│ │ │ │ │ -_m_u_l_t_i_-_m_a_s_t_e_r number mismatch errors are transfer
│ │ │ │ │ - logged.
│ │ │ │ │ - Specifies the directory
│ │ │ │ │ -_n_e_w_-_z_o_n_e_s_-_d_i_r_e_c_t_o_r_y where configuration zone
│ │ │ │ │ - parameters are stored for
│ │ │ │ │ - zones added by _r_n_d_c_ _a_d_d_z_o_n_e.
│ │ │ │ │ - Specifies a list of
│ │ │ │ │ -_n_o_-_c_a_s_e_-_c_o_m_p_r_e_s_s addresses that require case- server
│ │ │ │ │ - insensitive compression in
│ │ │ │ │ - responses.
│ │ │ │ │ - Sets the maximum size of UDP
│ │ │ │ │ -_n_o_c_o_o_k_i_e_-_u_d_p_-_s_i_z_e responses that are sent to query
│ │ │ │ │ - queries without a valid
│ │ │ │ │ - server COOKIE.
│ │ │ │ │ - Limits the number of empty
│ │ │ │ │ -_n_o_d_a_t_a_-_p_e_r_-_s_e_c_o_n_d (NODATA) responses for a query
│ │ │ │ │ - valid domain name.
│ │ │ │ │ - Controls whether NOTIFY
│ │ │ │ │ -_n_o_t_i_f_y messages are sent on zone transfer
│ │ │ │ │ - changes.
│ │ │ │ │ - Sets the delay (in seconds)
│ │ │ │ │ -_n_o_t_i_f_y_-_d_e_l_a_y between sending sets of transfer, zone
│ │ │ │ │ - NOTIFY messages for a zone.
│ │ │ │ │ - Specifies the rate at which
│ │ │ │ │ -_n_o_t_i_f_y_-_r_a_t_e NOTIFY requests are sent transfer, zone
│ │ │ │ │ - during normal zone
│ │ │ │ │ - maintenance operations.
│ │ │ │ │ - Defines the IPv4 address
│ │ │ │ │ -_n_o_t_i_f_y_-_s_o_u_r_c_e (and optional port) to be transfer
│ │ │ │ │ - used for outgoing NOTIFY
│ │ │ │ │ - messages.
│ │ │ │ │ - Defines the IPv6 address
│ │ │ │ │ -_n_o_t_i_f_y_-_s_o_u_r_c_e_-_v_6 (and optional port) to be transfer
│ │ │ │ │ - used for outgoing NOTIFY
│ │ │ │ │ - messages.
│ │ │ │ │ - Controls whether the name
│ │ │ │ │ -_n_o_t_i_f_y_-_t_o_-_s_o_a servers in the NS RRset are transfer
│ │ │ │ │ - checked against the SOA
│ │ │ │ │ - MNAME.
│ │ │ │ │ - Specifies the use of NSEC3
│ │ │ │ │ -_n_s_e_c_3_p_a_r_a_m instead of NSEC, and sets dnssec
│ │ │ │ │ - NSEC3 parameters.
│ │ │ │ │ - Specifies the lifetime, in
│ │ │ │ │ -_n_t_a_-_l_i_f_e_t_i_m_e seconds, for negative trust dnssec
│ │ │ │ │ - anchors added via _r_n_d_c_ _n_t_a.
│ │ │ │ │ - Specifies the time interval
│ │ │ │ │ - for checking whether
│ │ │ │ │ -_n_t_a_-_r_e_c_h_e_c_k negative trust anchors added dnssec
│ │ │ │ │ - via _r_n_d_c_ _n_t_a are still
│ │ │ │ │ - necessary.
│ │ │ │ │ - Causes all messages sent to
│ │ │ │ │ -_n_u_l_l the logging channel to be logging
│ │ │ │ │ - discarded.
│ │ │ │ │ - Appends the specified suffix
│ │ │ │ │ -_n_x_d_o_m_a_i_n_-_r_e_d_i_r_e_c_t to the original query name, query
│ │ │ │ │ - when replacing an NXDOMAIN
│ │ │ │ │ - with a redirect namespace.
│ │ │ │ │ - Limits the number of
│ │ │ │ │ -_n_x_d_o_m_a_i_n_s_-_p_e_r_-_s_e_c_o_n_d undefined subdomains for a query
│ │ │ │ │ - valid domain name.
│ │ │ │ │ -_o_p_t_i_o_n_s Defines global options to be server
│ │ │ │ │ - used by BIND 9.
│ │ │ │ │ - Adds EDNS Padding options to
│ │ │ │ │ -_p_a_d_d_i_n_g outgoing messages to server
│ │ │ │ │ - increase the packet size.
│ │ │ │ │ - Sets the time to live (TTL)
│ │ │ │ │ -_p_a_r_e_n_t_-_d_s_-_t_t_l of the DS RRset used by the dnssec
│ │ │ │ │ - parent zone.
│ │ │ │ │ - Sets the propagation delay
│ │ │ │ │ - from the time the parent
│ │ │ │ │ -_p_a_r_e_n_t_-_p_r_o_p_a_g_a_t_i_o_n_-_d_e_l_a_y zone is updated to when the dnssec, zone
│ │ │ │ │ - new version is served by all
│ │ │ │ │ - of the parent zone's name
│ │ │ │ │ - servers.
│ │ │ │ │ - Defines a list of delegation
│ │ │ │ │ -_p_a_r_e_n_t_a_l_-_a_g_e_n_t_s agents to be used by primary zone
│ │ │ │ │ - and secondary zones.
│ │ │ │ │ - Specifies which local IPv4
│ │ │ │ │ -_p_a_r_e_n_t_a_l_-_s_o_u_r_c_e source address is used to dnssec
│ │ │ │ │ - send parental DS queries.
│ │ │ │ │ - Specifies which local IPv6
│ │ │ │ │ -_p_a_r_e_n_t_a_l_-_s_o_u_r_c_e_-_v_6 source address is used to dnssec
│ │ │ │ │ - send parental DS queries.
│ │ │ │ │ - Specifies the pathname of
│ │ │ │ │ -_p_i_d_-_f_i_l_e the file where the server server
│ │ │ │ │ - writes its process ID.
│ │ │ │ │ -_p_l_u_g_i_n Configures plugins in server
│ │ │ │ │ - _n_a_m_e_d_._c_o_n_f.
│ │ │ │ │ - Specifies the UDP/TCP port
│ │ │ │ │ -_p_o_r_t number the server uses to query, server
│ │ │ │ │ - receive and send DNS
│ │ │ │ │ - protocol traffic.
│ │ │ │ │ - Specifies that server
│ │ │ │ │ -_p_r_e_f_e_r_-_s_e_r_v_e_r_-_c_i_p_h_e_r_s ciphers should be preferred server, security
│ │ │ │ │ - over client ones.
│ │ │ │ │ - Controls the order of glue
│ │ │ │ │ -_p_r_e_f_e_r_r_e_d_-_g_l_u_e records in an A or AAAA query
│ │ │ │ │ - response.
│ │ │ │ │ - Specifies the "trigger"
│ │ │ │ │ -_p_r_e_f_e_t_c_h time-to-live (TTL) value at query
│ │ │ │ │ - which prefetch of the
│ │ │ │ │ - current query takes place.
│ │ │ │ │ -_p_r_i_m_a_r_i_e_s Defines one or more primary zone
│ │ │ │ │ - servers for a zone.
│ │ │ │ │ -_p_r_i_n_t_-_c_a_t_e_g_o_r_y Includes the category in log logging
│ │ │ │ │ - messages.
│ │ │ │ │ -_p_r_i_n_t_-_s_e_v_e_r_i_t_y Includes the severity in log logging
│ │ │ │ │ - messages.
│ │ │ │ │ -_p_r_i_n_t_-_t_i_m_e Specifies the time format logging
│ │ │ │ │ - for log messages.
│ │ │ │ │ - Specifies the allowed
│ │ │ │ │ -_p_r_o_t_o_c_o_l_s versions of the TLS security
│ │ │ │ │ - protocol.
│ │ │ │ │ - Controls whether a primary
│ │ │ │ │ - responds to an incremental
│ │ │ │ │ -_p_r_o_v_i_d_e_-_i_x_f_r zone request (IXFR) or only transfer
│ │ │ │ │ - responds with a full zone
│ │ │ │ │ - transfer (AXFR).
│ │ │ │ │ - Increases the amount of time
│ │ │ │ │ - between when keys are
│ │ │ │ │ -_p_u_b_l_i_s_h_-_s_a_f_e_t_y published and when they dnssec
│ │ │ │ │ - become active, to allow for
│ │ │ │ │ - unforeseen events.
│ │ │ │ │ - Specifies the amount of time
│ │ │ │ │ - after which DNSSEC keys that
│ │ │ │ │ -_p_u_r_g_e_-_k_e_y_s have been deleted from the dnssec
│ │ │ │ │ - zone can be removed from
│ │ │ │ │ - disk.
│ │ │ │ │ - Controls QNAME minimization
│ │ │ │ │ -_q_n_a_m_e_-_m_i_n_i_m_i_z_a_t_i_o_n behavior in the BIND 9 query
│ │ │ │ │ - resolver.
│ │ │ │ │ - Tightens defenses during DNS
│ │ │ │ │ -_q_p_s_-_s_c_a_l_e attacks by scaling back the query
│ │ │ │ │ - ratio of the current query-
│ │ │ │ │ - per-second rate.
│ │ │ │ │ - Controls the IPv4 address
│ │ │ │ │ -_q_u_e_r_y_-_s_o_u_r_c_e from which queries are query
│ │ │ │ │ - issued.
│ │ │ │ │ - Controls the IPv6 address
│ │ │ │ │ -_q_u_e_r_y_-_s_o_u_r_c_e_-_v_6 from which queries are query
│ │ │ │ │ - issued.
│ │ │ │ │ - Specifies whether query
│ │ │ │ │ -_q_u_e_r_y_l_o_g logging should be active logging, server
│ │ │ │ │ - when _n_a_m_e_d first starts.
│ │ │ │ │ - Controls excessive UDP
│ │ │ │ │ - responses, to prevent BIND 9
│ │ │ │ │ -_r_a_t_e_-_l_i_m_i_t from being used to amplify query
│ │ │ │ │ - reflection denial-of-service
│ │ │ │ │ - (DoS) attacks.
│ │ │ │ │ - Specifies the pathname of
│ │ │ │ │ - the file where the server
│ │ │ │ │ -_r_e_c_u_r_s_i_n_g_-_f_i_l_e dumps queries that are server
│ │ │ │ │ - currently recursing via _r_n_d_c
│ │ │ │ │ - _r_e_c_u_r_s_i_n_g.
│ │ │ │ │ -_r_e_c_u_r_s_i_o_n Defines whether recursion query
│ │ │ │ │ - and caching are allowed.
│ │ │ │ │ - Specifies the maximum number
│ │ │ │ │ -_r_e_c_u_r_s_i_v_e_-_c_l_i_e_n_t_s of concurrent recursive query
│ │ │ │ │ - queries the server can
│ │ │ │ │ - perform.
│ │ │ │ │ - Toggles whether _d_n_s_6_4
│ │ │ │ │ -_r_e_c_u_r_s_i_v_e_-_o_n_l_y synthesis occurs only for query
│ │ │ │ │ - recursive queries.
│ │ │ │ │ - Limits the number of
│ │ │ │ │ -_r_e_f_e_r_r_a_l_s_-_p_e_r_-_s_e_c_o_n_d referrals or delegations to query
│ │ │ │ │ - a server for a given domain.
│ │ │ │ │ - Specifies the expected
│ │ │ │ │ -_r_e_m_o_t_e_-_h_o_s_t_n_a_m_e hostname in the TLS security
│ │ │ │ │ - certificate of the remote
│ │ │ │ │ - server.
│ │ │ │ │ - Specifies whether the local
│ │ │ │ │ -_r_e_q_u_e_s_t_-_e_x_p_i_r_e server requests the EDNS transfer, query
│ │ │ │ │ - EXPIRE value, when acting as
│ │ │ │ │ - a secondary.
│ │ │ │ │ - Controls whether a secondary
│ │ │ │ │ -_r_e_q_u_e_s_t_-_i_x_f_r requests an incremental zone transfer
│ │ │ │ │ - transfer (IXFR) or a full
│ │ │ │ │ - zone transfer (AXFR).
│ │ │ │ │ - Controls whether an empty
│ │ │ │ │ - EDNS(0) NSID (Name Server
│ │ │ │ │ -_r_e_q_u_e_s_t_-_n_s_i_d Identifier) option is sent query
│ │ │ │ │ - with all queries to
│ │ │ │ │ - authoritative name servers
│ │ │ │ │ - during iterative resolution.
│ │ │ │ │ - Controls whether responses
│ │ │ │ │ -_r_e_q_u_i_r_e_-_c_o_o_k_i_e without a server cookie are query
│ │ │ │ │ - accepted
│ │ │ │ │ - Controls whether a valid
│ │ │ │ │ -_r_e_q_u_i_r_e_-_s_e_r_v_e_r_-_c_o_o_k_i_e server cookie is required query
│ │ │ │ │ - before sending a full
│ │ │ │ │ - response to a UDP request.
│ │ │ │ │ - Specifies the length of
│ │ │ │ │ - time, in milliseconds, that
│ │ │ │ │ -_r_e_s_o_l_v_e_r_-_q_u_e_r_y_-_t_i_m_e_o_u_t a resolver attempts to query
│ │ │ │ │ - resolve a recursive query
│ │ │ │ │ - before failing.
│ │ │ │ │ - Specifies whether to apply
│ │ │ │ │ -_r_e_s_o_l_v_e_r_-_u_s_e_-_d_n_s_6_4 DNS64 mappings when sending server
│ │ │ │ │ - queries.
│ │ │ │ │ - Adds an EDNS Padding option
│ │ │ │ │ - to encrypted messages, to
│ │ │ │ │ -_r_e_s_p_o_n_s_e_-_p_a_d_d_i_n_g reduce the chance of query
│ │ │ │ │ - guessing the contents based
│ │ │ │ │ - on size.
│ │ │ │ │ - Specifies response policy query, zone, server,
│ │ │ │ │ -_r_e_s_p_o_n_s_e_-_p_o_l_i_c_y zones for the view or among security
│ │ │ │ │ - global options.
│ │ │ │ │ - Limits the number of non-
│ │ │ │ │ -_r_e_s_p_o_n_s_e_s_-_p_e_r_-_s_e_c_o_n_d empty responses for a valid query
│ │ │ │ │ - domain name and record type.
│ │ │ │ │ - Increases the amount of time
│ │ │ │ │ - a key remains published
│ │ │ │ │ -_r_e_t_i_r_e_-_s_a_f_e_t_y after it is no longer dnssec
│ │ │ │ │ - active, to allow for
│ │ │ │ │ - unforeseen events.
│ │ │ │ │ -_r_e_u_s_e_p_o_r_t Enables kernel load- server
│ │ │ │ │ - balancing of sockets.
│ │ │ │ │ - Controls whether BIND 9
│ │ │ │ │ -_r_o_o_t_-_k_e_y_-_s_e_n_t_i_n_e_l responds to root key server
│ │ │ │ │ - sentinel probes.
│ │ │ │ │ - Defines the order in which
│ │ │ │ │ -_r_r_s_e_t_-_o_r_d_e_r equal RRs (RRsets) are query
│ │ │ │ │ - returned.
│ │ │ │ │ - Specifies whether a
│ │ │ │ │ -_s_e_a_r_c_h Dynamically Loadable Zone query
│ │ │ │ │ - (DLZ) module is queried for
│ │ │ │ │ - an answer to a query name.
│ │ │ │ │ - Defines a Base64-encoded
│ │ │ │ │ -_s_e_c_r_e_t string to be used as the security
│ │ │ │ │ - secret by the algorithm.
│ │ │ │ │ - Specifies the pathname of
│ │ │ │ │ -_s_e_c_r_o_o_t_s_-_f_i_l_e the file where the server dnssec
│ │ │ │ │ - dumps security roots, when
│ │ │ │ │ - using _r_n_d_c_ _s_e_c_r_o_o_t_s.
│ │ │ │ │ - Controls whether a COOKIE
│ │ │ │ │ -_s_e_n_d_-_c_o_o_k_i_e EDNS option is sent along query
│ │ │ │ │ - with a query.
│ │ │ │ │ - Defines an upper limit on
│ │ │ │ │ - the number of queries per
│ │ │ │ │ -_s_e_r_i_a_l_-_q_u_e_r_y_-_r_a_t_e second issued by the server, transfer
│ │ │ │ │ - when querying the SOA RRs
│ │ │ │ │ - used for zone transfers.
│ │ │ │ │ - Specifies the update method
│ │ │ │ │ -_s_e_r_i_a_l_-_u_p_d_a_t_e_-_m_e_t_h_o_d to be used for the zone zone
│ │ │ │ │ - serial number in the SOA
│ │ │ │ │ - record.
│ │ │ │ │ - Defines characteristics to
│ │ │ │ │ -_s_e_r_v_e_r be associated with a remote server
│ │ │ │ │ - name server.
│ │ │ │ │ - Specifies a list of IP
│ │ │ │ │ - addresses to which queries
│ │ │ │ │ -_s_e_r_v_e_r_-_a_d_d_r_e_s_s_e_s should be sent in recursive query, zone
│ │ │ │ │ - resolution for a static-stub
│ │ │ │ │ - zone.
│ │ │ │ │ - Specifies the ID of the
│ │ │ │ │ -_s_e_r_v_e_r_-_i_d server to return in response server
│ │ │ │ │ - to a ID.SERVER query.
│ │ │ │ │ - Specifies a list of domain
│ │ │ │ │ -_s_e_r_v_e_r_-_n_a_m_e_s names of name servers that zone
│ │ │ │ │ - act as authoritative servers
│ │ │ │ │ - of a static-stub zone.
│ │ │ │ │ - Sets the length of time (in
│ │ │ │ │ -_s_e_r_v_f_a_i_l_-_t_t_l seconds) that a SERVFAIL server
│ │ │ │ │ - response is cached.
│ │ │ │ │ - Specifies the algorithm to
│ │ │ │ │ -_s_e_s_s_i_o_n_-_k_e_y_a_l_g use for the TSIG session security
│ │ │ │ │ - key.
│ │ │ │ │ - Specifies the pathname of
│ │ │ │ │ - the file where a TSIG
│ │ │ │ │ -_s_e_s_s_i_o_n_-_k_e_y_f_i_l_e session key is written, when security
│ │ │ │ │ - generated by _n_a_m_e_d for use
│ │ │ │ │ - by nsupdate -l.
│ │ │ │ │ -_s_e_s_s_i_o_n_-_k_e_y_n_a_m_e Specifies the key name for security
│ │ │ │ │ - the TSIG session key.
│ │ │ │ │ - Enables or disables session
│ │ │ │ │ -_s_e_s_s_i_o_n_-_t_i_c_k_e_t_s resumption through TLS security
│ │ │ │ │ - session tickets.
│ │ │ │ │ -_s_e_v_e_r_i_t_y Defines the priority level logging
│ │ │ │ │ - of log messages.
│ │ │ │ │ - Specifies the maximum number
│ │ │ │ │ -_s_i_g_-_s_i_g_n_i_n_g_-_n_o_d_e_s of nodes to be examined in dnssec
│ │ │ │ │ - each quantum, when signing a
│ │ │ │ │ - zone with a new DNSKEY.
│ │ │ │ │ - Specifies the threshold for
│ │ │ │ │ - the number of signatures
│ │ │ │ │ -_s_i_g_-_s_i_g_n_i_n_g_-_s_i_g_n_a_t_u_r_e_s that terminates processing a dnssec
│ │ │ │ │ - quantum, when signing a zone
│ │ │ │ │ - with a new DNSKEY.
│ │ │ │ │ - Specifies a private RDATA
│ │ │ │ │ -_s_i_g_-_s_i_g_n_i_n_g_-_t_y_p_e type to use when generating dnssec
│ │ │ │ │ - signing-state records.
│ │ │ │ │ -_s_i_g_-_v_a_l_i_d_i_t_y_-_i_n_t_e_r_v_a_l obsolete
│ │ │ │ │ -_s_i_g_n_a_t_u_r_e_s_-_r_e_f_r_e_s_h Specifies how frequently an dnssec
│ │ │ │ │ - RRSIG record is refreshed.
│ │ │ │ │ -_s_i_g_n_a_t_u_r_e_s_-_v_a_l_i_d_i_t_y Indicates the validity dnssec
│ │ │ │ │ - period of an RRSIG record.
│ │ │ │ │ -_s_i_g_n_a_t_u_r_e_s_-_v_a_l_i_d_i_t_y_-_d_n_s_k_e_y Indicates the validity dnssec
│ │ │ │ │ - period of DNSKEY records.
│ │ │ │ │ - Sets the number of "slipped"
│ │ │ │ │ -_s_l_i_p responses to minimize the query
│ │ │ │ │ - use of forged source
│ │ │ │ │ - addresses for an attack.
│ │ │ │ │ - Controls the ordering of RRs
│ │ │ │ │ -_s_o_r_t_l_i_s_t returned to the client, query
│ │ │ │ │ - based on the client's IP
│ │ │ │ │ - address.
│ │ │ │ │ - Defines the amount of time
│ │ │ │ │ - (in milliseconds) that _n_a_m_e_d
│ │ │ │ │ -_s_t_a_l_e_-_a_n_s_w_e_r_-_c_l_i_e_n_t_-_t_i_m_e_o_u_t waits before attempting to query, server
│ │ │ │ │ - answer a query with a stale
│ │ │ │ │ - RRset from cache.
│ │ │ │ │ - Enables the returning of
│ │ │ │ │ -_s_t_a_l_e_-_a_n_s_w_e_r_-_e_n_a_b_l_e "stale" cached answers when query, server
│ │ │ │ │ - the name servers for a zone
│ │ │ │ │ - are not answering.
│ │ │ │ │ - Specifies the time to live
│ │ │ │ │ -_s_t_a_l_e_-_a_n_s_w_e_r_-_t_t_l (TTL) to be returned on query
│ │ │ │ │ - stale answers, in seconds.
│ │ │ │ │ -_s_t_a_l_e_-_c_a_c_h_e_-_e_n_a_b_l_e Enables the retention of query, server
│ │ │ │ │ - "stale" cached answers.
│ │ │ │ │ - Sets the time window for the
│ │ │ │ │ - return of "stale" cached
│ │ │ │ │ -_s_t_a_l_e_-_r_e_f_r_e_s_h_-_t_i_m_e answers before the next query, server
│ │ │ │ │ - attempt to contact, if the
│ │ │ │ │ - name servers for a given
│ │ │ │ │ - zone are not responding.
│ │ │ │ │ - Specifies the rate at which
│ │ │ │ │ - NOTIFY requests are sent
│ │ │ │ │ -_s_t_a_r_t_u_p_-_n_o_t_i_f_y_-_r_a_t_e when the name server is transfer, zone
│ │ │ │ │ - first starting, or when new
│ │ │ │ │ - zones have been added.
│ │ │ │ │ - Specifies the communication
│ │ │ │ │ - channels to be used by
│ │ │ │ │ -_s_t_a_t_i_s_t_i_c_s_-_c_h_a_n_n_e_l_s system administrators to logging
│ │ │ │ │ - access statistics
│ │ │ │ │ - information on the name
│ │ │ │ │ - server.
│ │ │ │ │ - Specifies the pathname of
│ │ │ │ │ -_s_t_a_t_i_s_t_i_c_s_-_f_i_l_e the file where the server logging, server
│ │ │ │ │ - appends statistics, when
│ │ │ │ │ - using _r_n_d_c_ _s_t_a_t_s.
│ │ │ │ │ - Directs the logging channel
│ │ │ │ │ -_s_t_d_e_r_r output to the server's logging
│ │ │ │ │ - standard error stream.
│ │ │ │ │ - Specifies the maximum number
│ │ │ │ │ -_s_t_r_e_a_m_s_-_p_e_r_-_c_o_n_n_e_c_t_i_o_n of concurrent HTTP/2 streams query, server
│ │ │ │ │ - over an HTTP/2 connection.
│ │ │ │ │ - Defines trailing bits for
│ │ │ │ │ -_s_u_f_f_i_x mapped IPv4 address bits in query
│ │ │ │ │ - _d_n_s_6_4.
│ │ │ │ │ - Enables support for _RR_FF_CC
│ │ │ │ │ -_s_y_n_t_h_-_f_r_o_m_-_d_n_s_s_e_c _88_11_99_88, Aggressive Use of dnssec
│ │ │ │ │ - DNSSEC-Validated Cache.
│ │ │ │ │ -_s_y_s_l_o_g Directs the logging channel logging
│ │ │ │ │ - to the system log.
│ │ │ │ │ - Sets the timeout value (in
│ │ │ │ │ - milliseconds) that the
│ │ │ │ │ -_t_c_p_-_a_d_v_e_r_t_i_s_e_d_-_t_i_m_e_o_u_t server sends in responses query
│ │ │ │ │ - containing the EDNS TCP
│ │ │ │ │ - keepalive option.
│ │ │ │ │ - Specifies the maximum number
│ │ │ │ │ -_t_c_p_-_c_l_i_e_n_t_s of simultaneous client TCP server
│ │ │ │ │ - connections accepted by the
│ │ │ │ │ - server.
│ │ │ │ │ - Sets the amount of time (in
│ │ │ │ │ - milliseconds) that the
│ │ │ │ │ - server waits on an idle TCP
│ │ │ │ │ -_t_c_p_-_i_d_l_e_-_t_i_m_e_o_u_t connection before closing query
│ │ │ │ │ - it, if the EDNS TCP
│ │ │ │ │ - keepalive option is not in
│ │ │ │ │ - use.
│ │ │ │ │ - Sets the amount of time (in
│ │ │ │ │ - milliseconds) that the
│ │ │ │ │ -_t_c_p_-_i_n_i_t_i_a_l_-_t_i_m_e_o_u_t server waits on a new TCP query, server
│ │ │ │ │ - connection for the first
│ │ │ │ │ - message from the client.
│ │ │ │ │ -_t_c_p_-_k_e_e_p_a_l_i_v_e Adds EDNS TCP keepalive to server
│ │ │ │ │ - messages sent over TCP.
│ │ │ │ │ - Sets the amount of time (in
│ │ │ │ │ - milliseconds) that the
│ │ │ │ │ -_t_c_p_-_k_e_e_p_a_l_i_v_e_-_t_i_m_e_o_u_t server waits on an idle TCP query
│ │ │ │ │ - connection before closing
│ │ │ │ │ - it, if the EDNS TCP
│ │ │ │ │ - keepalive option is in use.
│ │ │ │ │ -_t_c_p_-_l_i_s_t_e_n_-_q_u_e_u_e Sets the listen-queue depth. server
│ │ │ │ │ -_t_c_p_-_o_n_l_y Sets the transport protocol server
│ │ │ │ │ - to TCP.
│ │ │ │ │ - Sets the operating system's
│ │ │ │ │ -_t_c_p_-_r_e_c_e_i_v_e_-_b_u_f_f_e_r receive buffer size for TCP server
│ │ │ │ │ - sockets.
│ │ │ │ │ - Sets the operating system's
│ │ │ │ │ -_t_c_p_-_s_e_n_d_-_b_u_f_f_e_r send buffer size for TCP server
│ │ │ │ │ - sockets.
│ │ │ │ │ - Sets the domain appended to
│ │ │ │ │ -_t_k_e_y_-_d_o_m_a_i_n the names of all shared keys security
│ │ │ │ │ - generated with TKEY.
│ │ │ │ │ - Sets the security credential
│ │ │ │ │ -_t_k_e_y_-_g_s_s_a_p_i_-_c_r_e_d_e_n_t_i_a_l for authentication keys security
│ │ │ │ │ - requested by the GSS-TSIG
│ │ │ │ │ - protocol.
│ │ │ │ │ -_t_k_e_y_-_g_s_s_a_p_i_-_k_e_y_t_a_b Sets the KRB5 keytab file to security
│ │ │ │ │ - use for GSS-TSIG updates.
│ │ │ │ │ -_t_l_s Configures a TLS connection. security
│ │ │ │ │ - Specifies the TCP port
│ │ │ │ │ -_t_l_s_-_p_o_r_t number the server uses to query, server
│ │ │ │ │ - receive and send DNS-over-
│ │ │ │ │ - TLS protocol traffic.
│ │ │ │ │ - Controls whether multiple
│ │ │ │ │ -_t_r_a_n_s_f_e_r_-_f_o_r_m_a_t records can be packed into a transfer
│ │ │ │ │ - message during zone
│ │ │ │ │ - transfers.
│ │ │ │ │ - Limits the uncompressed size
│ │ │ │ │ -_t_r_a_n_s_f_e_r_-_m_e_s_s_a_g_e_-_s_i_z_e of DNS messages used in zone transfer
│ │ │ │ │ - transfers over TCP.
│ │ │ │ │ - Defines which local IPv4
│ │ │ │ │ - address(es) are bound to TCP
│ │ │ │ │ -_t_r_a_n_s_f_e_r_-_s_o_u_r_c_e connections used to fetch transfer
│ │ │ │ │ - zones transferred inbound by
│ │ │ │ │ - the server.
│ │ │ │ │ - Defines which local IPv6
│ │ │ │ │ - address(es) are bound to TCP
│ │ │ │ │ -_t_r_a_n_s_f_e_r_-_s_o_u_r_c_e_-_v_6 connections used to fetch transfer
│ │ │ │ │ - zones transferred inbound by
│ │ │ │ │ - the server.
│ │ │ │ │ - Limits the number of
│ │ │ │ │ -_t_r_a_n_s_f_e_r_s concurrent inbound zone server
│ │ │ │ │ - transfers from a server.
│ │ │ │ │ - Limits the number of
│ │ │ │ │ -_t_r_a_n_s_f_e_r_s_-_i_n concurrent inbound zone transfer
│ │ │ │ │ - transfers.
│ │ │ │ │ - Limits the number of
│ │ │ │ │ -_t_r_a_n_s_f_e_r_s_-_o_u_t concurrent outbound zone transfer
│ │ │ │ │ - transfers.
│ │ │ │ │ - Limits the number of
│ │ │ │ │ -_t_r_a_n_s_f_e_r_s_-_p_e_r_-_n_s concurrent inbound zone transfer
│ │ │ │ │ - transfers from a remote
│ │ │ │ │ - server.
│ │ │ │ │ - Instructs _n_a_m_e_d to send
│ │ │ │ │ - specially formed queries
│ │ │ │ │ -_t_r_u_s_t_-_a_n_c_h_o_r_-_t_e_l_e_m_e_t_r_y once per day to domains for dnssec
│ │ │ │ │ - which trust anchors have
│ │ │ │ │ - been configured.
│ │ │ │ │ -_t_r_u_s_t_-_a_n_c_h_o_r_s Defines _D_N_S_S_E_C trust dnssec
│ │ │ │ │ - anchors.
│ │ │ │ │ -_t_r_u_s_t_e_d_-_k_e_y_s deprecated
│ │ │ │ │ - Specifies that BIND 9 should
│ │ │ │ │ -_t_r_y_-_t_c_p_-_r_e_f_r_e_s_h attempt to refresh a zone transfer
│ │ │ │ │ - using TCP if UDP queries
│ │ │ │ │ - fail.
│ │ │ │ │ -_t_y_p_e Specifies the kind of zone zone
│ │ │ │ │ - in a given configuration.
│ │ │ │ │ - Contains forwarding
│ │ │ │ │ -_t_y_p_e_ _f_o_r_w_a_r_d statements that apply to zone
│ │ │ │ │ - queries within a given
│ │ │ │ │ - domain.
│ │ │ │ │ - Contains the initial set of
│ │ │ │ │ -_t_y_p_e_ _h_i_n_t root name servers to be used zone
│ │ │ │ │ - at BIND 9 startup.
│ │ │ │ │ - Contains a DNSSEC-validated
│ │ │ │ │ -_t_y_p_e_ _m_i_r_r_o_r duplicate of the main data zone
│ │ │ │ │ - for a zone.
│ │ │ │ │ -_t_y_p_e_ _p_r_i_m_a_r_y Contains the main copy of zone
│ │ │ │ │ - the data for a zone.
│ │ │ │ │ - Contains information to
│ │ │ │ │ -_t_y_p_e_ _r_e_d_i_r_e_c_t answer queries when normal zone
│ │ │ │ │ - resolution would return
│ │ │ │ │ - NXDOMAIN.
│ │ │ │ │ - Contains a duplicate of the
│ │ │ │ │ -_t_y_p_e_ _s_e_c_o_n_d_a_r_y data for a zone that has zone
│ │ │ │ │ - been transferred from a
│ │ │ │ │ - primary server.
│ │ │ │ │ - Contains a duplicate of the
│ │ │ │ │ - NS records of a primary
│ │ │ │ │ -_t_y_p_e_ _s_t_a_t_i_c_-_s_t_u_b zone, but statically zone
│ │ │ │ │ - configured rather than
│ │ │ │ │ - transferred from a primary
│ │ │ │ │ - server.
│ │ │ │ │ - Contains a duplicate of the
│ │ │ │ │ -_t_y_p_e_ _s_t_u_b NS records of a primary zone
│ │ │ │ │ - zone.
│ │ │ │ │ - Sets the operating system's
│ │ │ │ │ -_u_d_p_-_r_e_c_e_i_v_e_-_b_u_f_f_e_r receive buffer size for UDP server
│ │ │ │ │ - sockets.
│ │ │ │ │ - Sets the operating system's
│ │ │ │ │ -_u_d_p_-_s_e_n_d_-_b_u_f_f_e_r send buffer size for UDP server
│ │ │ │ │ - sockets.
│ │ │ │ │ -_u_n_i_x Specifies a Unix domain obsolete
│ │ │ │ │ - socket as a control channel.
│ │ │ │ │ -_u_p_d_a_t_e_-_c_h_e_c_k_-_k_s_k obsolete
│ │ │ │ │ - Sets fine-grained rules to
│ │ │ │ │ - allow or deny dynamic
│ │ │ │ │ -_u_p_d_a_t_e_-_p_o_l_i_c_y updates (DDNS), based on transfer
│ │ │ │ │ - requester identity, updated
│ │ │ │ │ - content, etc.
│ │ │ │ │ - Specifies the maximum number
│ │ │ │ │ -_u_p_d_a_t_e_-_q_u_o_t_a of concurrent DNS UPDATE server
│ │ │ │ │ - messages that can be
│ │ │ │ │ - processed by the server.
│ │ │ │ │ - Specifies a list of ports
│ │ │ │ │ -_u_s_e_-_v_4_-_u_d_p_-_p_o_r_t_s that are valid sources for deprecated
│ │ │ │ │ - UDP/IPv4 messages.
│ │ │ │ │ - Specifies a list of ports
│ │ │ │ │ -_u_s_e_-_v_6_-_u_d_p_-_p_o_r_t_s that are valid sources for deprecated
│ │ │ │ │ - UDP/IPv6 messages.
│ │ │ │ │ - Indicates the number of
│ │ │ │ │ -_v_6_-_b_i_a_s milliseconds of preference query, server
│ │ │ │ │ - to give to IPv6 name
│ │ │ │ │ - servers.
│ │ │ │ │ - Specifies a list of domain
│ │ │ │ │ -_v_a_l_i_d_a_t_e_-_e_x_c_e_p_t names at and beneath which dnssec
│ │ │ │ │ - DNSSEC validation should not
│ │ │ │ │ - be performed.
│ │ │ │ │ - Specifies the version number
│ │ │ │ │ -_v_e_r_s_i_o_n of the server to return in server
│ │ │ │ │ - response to a version.bind
│ │ │ │ │ - query.
│ │ │ │ │ - Allows a name server to
│ │ │ │ │ -_v_i_e_w answer a DNS query view
│ │ │ │ │ - differently depending on who
│ │ │ │ │ - is asking.
│ │ │ │ │ - Specifies the length of time
│ │ │ │ │ -_w_i_n_d_o_w during which responses are query
│ │ │ │ │ - tracked.
│ │ │ │ │ - Specifies whether to set the
│ │ │ │ │ - time to live (TTL) of the
│ │ │ │ │ -_z_e_r_o_-_n_o_-_s_o_a_-_t_t_l SOA record to zero, when query, zone, server
│ │ │ │ │ - returning authoritative
│ │ │ │ │ - negative responses to SOA
│ │ │ │ │ - queries.
│ │ │ │ │ - Sets the time to live (TTL)
│ │ │ │ │ -_z_e_r_o_-_n_o_-_s_o_a_-_t_t_l_-_c_a_c_h_e to zero when caching a query, zone, server
│ │ │ │ │ - negative response to an SOA
│ │ │ │ │ - query.
│ │ │ │ │ -_z_o_n_e Specifies the zone in a BIND zone
│ │ │ │ │ - 9 configuration.
│ │ │ │ │ - Sets the propagation delay
│ │ │ │ │ - from the time a zone is
│ │ │ │ │ -_z_o_n_e_-_p_r_o_p_a_g_a_t_i_o_n_-_d_e_l_a_y first updated to when the dnssec, zone
│ │ │ │ │ - new version of the zone is
│ │ │ │ │ - served by all secondary
│ │ │ │ │ - servers.
│ │ │ │ │ - Controls the level of
│ │ │ │ │ -_z_o_n_e_-_s_t_a_t_i_s_t_i_c_s statistics gathered for all logging, zone
│ │ │ │ │ - zones.
│ │ │ │ │ +SSttaatteemmeenntt DDeessccrriippttiioonn TTaaggss
│ │ │ │ │ +_a_c_l Assigns a symbolic name to server
│ │ │ │ │ + an address match list.
│ │ │ │ │ +_a_l_g_o_r_i_t_h_m Defines the algorithm to be security
│ │ │ │ │ + used in a key clause.
│ │ │ │ │ +_a_l_l_-_p_e_r_-_s_e_c_o_n_d Limits UDP responses of all query
│ │ │ │ │ + kinds.
│ │ │ │ │ + Controls the ability to add
│ │ │ │ │ +_a_l_l_o_w_-_n_e_w_-_z_o_n_e_s zones at runtime via _r_n_d_c zone, server
│ │ │ │ │ + _a_d_d_z_o_n_e.
│ │ │ │ │ + Defines an
│ │ │ │ │ + _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t that is
│ │ │ │ │ + allowed to send NOTIFY
│ │ │ │ │ +_a_l_l_o_w_-_n_o_t_i_f_y messages for the zone, in transfer
│ │ │ │ │ + addition to addresses
│ │ │ │ │ + defined in the _p_r_i_m_a_r_i_e_s
│ │ │ │ │ + option for the zone.
│ │ │ │ │ + Defines an
│ │ │ │ │ +_a_l_l_o_w_-_p_r_o_x_y _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t for the server
│ │ │ │ │ + client addresses allowed to
│ │ │ │ │ + send PROXYv2 headers.
│ │ │ │ │ + Defines an
│ │ │ │ │ + _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t for the
│ │ │ │ │ + interface addresses allowed
│ │ │ │ │ +_a_l_l_o_w_-_p_r_o_x_y_-_o_n to accept PROXYv2 headers. server
│ │ │ │ │ + The option is mostly
│ │ │ │ │ + intended for multi-homed
│ │ │ │ │ + configurations.
│ │ │ │ │ + Specifies which hosts (an IP
│ │ │ │ │ +_a_l_l_o_w_-_q_u_e_r_y address list) are allowed to query
│ │ │ │ │ + send queries to this
│ │ │ │ │ + resolver.
│ │ │ │ │ + Specifies which hosts (an IP
│ │ │ │ │ + address list) can access
│ │ │ │ │ +_a_l_l_o_w_-_q_u_e_r_y_-_c_a_c_h_e this server's cache and thus query
│ │ │ │ │ + effectively controls
│ │ │ │ │ + recursion.
│ │ │ │ │ + Specifies which hosts (an IP
│ │ │ │ │ + address list) can access
│ │ │ │ │ +_a_l_l_o_w_-_q_u_e_r_y_-_c_a_c_h_e_-_o_n this server's cache. Used on query
│ │ │ │ │ + servers with multiple
│ │ │ │ │ + interfaces.
│ │ │ │ │ + Specifies which local
│ │ │ │ │ + addresses (an IP address
│ │ │ │ │ +_a_l_l_o_w_-_q_u_e_r_y_-_o_n list) are allowed to send query
│ │ │ │ │ + queries to this resolver.
│ │ │ │ │ + Used in multi-homed
│ │ │ │ │ + configurations.
│ │ │ │ │ + Defines an
│ │ │ │ │ +_a_l_l_o_w_-_r_e_c_u_r_s_i_o_n _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t of query
│ │ │ │ │ + clients that are allowed to
│ │ │ │ │ + perform recursive queries.
│ │ │ │ │ + Specifies which local
│ │ │ │ │ +_a_l_l_o_w_-_r_e_c_u_r_s_i_o_n_-_o_n addresses can accept query, server
│ │ │ │ │ + recursive queries.
│ │ │ │ │ + Defines an
│ │ │ │ │ + _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t of hosts
│ │ │ │ │ +_a_l_l_o_w_-_t_r_a_n_s_f_e_r that are allowed to transfer transfer
│ │ │ │ │ + the zone information from
│ │ │ │ │ + this server.
│ │ │ │ │ + Defines an
│ │ │ │ │ + _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t of hosts
│ │ │ │ │ +_a_l_l_o_w_-_u_p_d_a_t_e that are allowed to submit transfer
│ │ │ │ │ + dynamic updates for primary
│ │ │ │ │ + zones.
│ │ │ │ │ + Defines an
│ │ │ │ │ + _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t of hosts
│ │ │ │ │ +_a_l_l_o_w_-_u_p_d_a_t_e_-_f_o_r_w_a_r_d_i_n_g that are allowed to submit transfer
│ │ │ │ │ + dynamic updates to a
│ │ │ │ │ + secondary server for
│ │ │ │ │ + transmission to a primary.
│ │ │ │ │ + Defines one or more hosts
│ │ │ │ │ +_a_l_s_o_-_n_o_t_i_f_y that are sent NOTIFY transfer
│ │ │ │ │ + messages when zone changes
│ │ │ │ │ + occur.
│ │ │ │ │ + Controls whether COOKIE EDNS
│ │ │ │ │ +_a_n_s_w_e_r_-_c_o_o_k_i_e replies are sent in response query
│ │ │ │ │ + to client queries.
│ │ │ │ │ + Allows multiple views to
│ │ │ │ │ +_a_t_t_a_c_h_-_c_a_c_h_e share a single cache view
│ │ │ │ │ + database.
│ │ │ │ │ + Controls whether BIND,
│ │ │ │ │ + acting as a resolver,
│ │ │ │ │ +_a_u_t_h_-_n_x_d_o_m_a_i_n provides authoritative query
│ │ │ │ │ + NXDOMAIN (domain does not
│ │ │ │ │ + exist) answers.
│ │ │ │ │ + Controls the automatic
│ │ │ │ │ +_a_u_t_o_m_a_t_i_c_-_i_n_t_e_r_f_a_c_e_-_s_c_a_n rescanning of network server
│ │ │ │ │ + interfaces when addresses
│ │ │ │ │ + are added or removed.
│ │ │ │ │ + Specifies the range(s) of
│ │ │ │ │ +_a_v_o_i_d_-_v_4_-_u_d_p_-_p_o_r_t_s ports to be excluded from deprecated
│ │ │ │ │ + use as sources for UDP/IPv4
│ │ │ │ │ + messages.
│ │ │ │ │ + Specifies the range(s) of
│ │ │ │ │ +_a_v_o_i_d_-_v_6_-_u_d_p_-_p_o_r_t_s ports to be excluded from deprecated
│ │ │ │ │ + use as sources for UDP/IPv6
│ │ │ │ │ + messages.
│ │ │ │ │ + Specifies the pathname of a
│ │ │ │ │ +_b_i_n_d_k_e_y_s_-_f_i_l_e file to override the built- dnssec
│ │ │ │ │ + in trusted keys provided by
│ │ │ │ │ + _n_a_m_e_d.
│ │ │ │ │ + Defines an
│ │ │ │ │ + _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t of hosts
│ │ │ │ │ +_b_l_a_c_k_h_o_l_e to ignore. The server will query
│ │ │ │ │ + neither respond to queries
│ │ │ │ │ + from nor send queries to
│ │ │ │ │ + these addresses.
│ │ │ │ │ +_b_o_g_u_s Allows a remote server to be server
│ │ │ │ │ + ignored.
│ │ │ │ │ + Enables _d_n_s_6_4 synthesis even
│ │ │ │ │ +_b_r_e_a_k_-_d_n_s_s_e_c if the validated result query
│ │ │ │ │ + would cause a DNSSEC
│ │ │ │ │ + validation failure.
│ │ │ │ │ +_b_u_f_f_e_r_e_d Controls flushing of log logging
│ │ │ │ │ + messages.
│ │ │ │ │ + Specifies the path to a file
│ │ │ │ │ + containing TLS certificates
│ │ │ │ │ +_c_a_-_f_i_l_e for trusted CA authorities, security, server
│ │ │ │ │ + used to verify remote peer
│ │ │ │ │ + certificates.
│ │ │ │ │ +_c_a_t_a_l_o_g_-_z_o_n_e_s Configures catalog zones in zone
│ │ │ │ │ + _n_a_m_e_d_._c_o_n_f.
│ │ │ │ │ + Specifies the type of data
│ │ │ │ │ +_c_a_t_e_g_o_r_y logged to a particular logging
│ │ │ │ │ + channel.
│ │ │ │ │ + Specifies whether a CDNSKEY
│ │ │ │ │ +_c_d_n_s_k_e_y record should be published dnssec
│ │ │ │ │ + during KSK rollover.
│ │ │ │ │ + Specifies the digest types
│ │ │ │ │ +_c_d_s_-_d_i_g_e_s_t_-_t_y_p_e_s to use for CDS resource dnssec
│ │ │ │ │ + records.
│ │ │ │ │ + Specifies the path to a file
│ │ │ │ │ +_c_e_r_t_-_f_i_l_e containing the TLS security, server
│ │ │ │ │ + certificate for a
│ │ │ │ │ + connection.
│ │ │ │ │ + Defines a stream of data
│ │ │ │ │ +_c_h_a_n_n_e_l that can be independently logging
│ │ │ │ │ + logged.
│ │ │ │ │ + Checks primary zones for
│ │ │ │ │ + records that are treated as
│ │ │ │ │ +_c_h_e_c_k_-_d_u_p_-_r_e_c_o_r_d_s different by DNSSEC but are query, dnssec
│ │ │ │ │ + semantically equal in plain
│ │ │ │ │ + DNS.
│ │ │ │ │ + Performs post-load zone
│ │ │ │ │ +_c_h_e_c_k_-_i_n_t_e_g_r_i_t_y integrity checks on primary zone
│ │ │ │ │ + zones.
│ │ │ │ │ + Checks whether an MX record
│ │ │ │ │ +_c_h_e_c_k_-_m_x appears to refer to an IP zone
│ │ │ │ │ + address.
│ │ │ │ │ + Sets the response to MX
│ │ │ │ │ +_c_h_e_c_k_-_m_x_-_c_n_a_m_e records that refer to zone
│ │ │ │ │ + CNAMEs.
│ │ │ │ │ + Restricts the character set
│ │ │ │ │ + and syntax of certain domain
│ │ │ │ │ +_c_h_e_c_k_-_n_a_m_e_s names in primary files and/ query, server
│ │ │ │ │ + or DNS responses received
│ │ │ │ │ + from the network.
│ │ │ │ │ + Specifies whether to check
│ │ │ │ │ +_c_h_e_c_k_-_s_i_b_l_i_n_g for sibling glue when zone
│ │ │ │ │ + performing integrity checks.
│ │ │ │ │ + Specifies whether to check
│ │ │ │ │ +_c_h_e_c_k_-_s_p_f for a TXT Sender Policy zone
│ │ │ │ │ + Framework record, if an SPF
│ │ │ │ │ + record is present.
│ │ │ │ │ + Sets the response to SRV
│ │ │ │ │ +_c_h_e_c_k_-_s_r_v_-_c_n_a_m_e records that refer to zone
│ │ │ │ │ + CNAMEs.
│ │ │ │ │ + Specifies whether to perform
│ │ │ │ │ +_c_h_e_c_k_-_s_v_c_b additional checks on SVCB zone
│ │ │ │ │ + records.
│ │ │ │ │ +_c_h_e_c_k_-_w_i_l_d_c_a_r_d Checks for non-terminal zone
│ │ │ │ │ + wildcards.
│ │ │ │ │ +_c_h_e_c_k_d_s Controls whether DS queries dnssec
│ │ │ │ │ + are sent to parental agents.
│ │ │ │ │ +_c_i_p_h_e_r_s Specifies a list of allowed security
│ │ │ │ │ + ciphers.
│ │ │ │ │ + Specifies an access control
│ │ │ │ │ +_c_l_i_e_n_t_s list (ACL) of clients that query
│ │ │ │ │ + are affected by a given
│ │ │ │ │ + _d_n_s_6_4 directive.
│ │ │ │ │ + Sets the initial minimum
│ │ │ │ │ + number of simultaneous
│ │ │ │ │ +_c_l_i_e_n_t_s_-_p_e_r_-_q_u_e_r_y recursive clients accepted server
│ │ │ │ │ + by the server for any given
│ │ │ │ │ + query before the server
│ │ │ │ │ + drops additional clients.
│ │ │ │ │ + Specifies control channels
│ │ │ │ │ +_c_o_n_t_r_o_l_s to be used to manage the server
│ │ │ │ │ + name server.
│ │ │ │ │ + Sets the algorithm to be
│ │ │ │ │ +_c_o_o_k_i_e_-_a_l_g_o_r_i_t_h_m used when generating a server
│ │ │ │ │ + server cookie.
│ │ │ │ │ + Specifies a shared secret
│ │ │ │ │ + used for generating and
│ │ │ │ │ +_c_o_o_k_i_e_-_s_e_c_r_e_t verifying EDNS COOKIE server
│ │ │ │ │ + options within an anycast
│ │ │ │ │ + cluster.
│ │ │ │ │ + Specifies the type of
│ │ │ │ │ +_d_a_t_a_b_a_s_e database to be used to store zone
│ │ │ │ │ + zone data.
│ │ │ │ │ + Rejects A or AAAA records if
│ │ │ │ │ +_d_e_n_y_-_a_n_s_w_e_r_-_a_d_d_r_e_s_s_e_s the corresponding IPv4 or query
│ │ │ │ │ + IPv6 addresses match a given
│ │ │ │ │ + _a_d_d_r_e_s_s___m_a_t_c_h___l_i_s_t.
│ │ │ │ │ + Rejects CNAME or DNAME
│ │ │ │ │ +_d_e_n_y_-_a_n_s_w_e_r_-_a_l_i_a_s_e_s records if the "alias" name query
│ │ │ │ │ + matches a given list of
│ │ │ │ │ + _d_o_m_a_i_n___n_a_m_e elements.
│ │ │ │ │ + Specifies the path to a file
│ │ │ │ │ +_d_h_p_a_r_a_m_-_f_i_l_e containing Diffie-Hellman security, server
│ │ │ │ │ + parameters, for enabling
│ │ │ │ │ + cipher suites.
│ │ │ │ │ + Concentrates zone
│ │ │ │ │ + maintenance so that all
│ │ │ │ │ +_d_i_a_l_u_p transfers take place once deprecated
│ │ │ │ │ + every _h_e_a_r_t_b_e_a_t_-_i_n_t_e_r_v_a_l,
│ │ │ │ │ + ideally during a single
│ │ │ │ │ + call.
│ │ │ │ │ +_d_i_r_e_c_t_o_r_y Sets the server's working server
│ │ │ │ │ + directory.
│ │ │ │ │ +_d_i_s_a_b_l_e_-_a_l_g_o_r_i_t_h_m_s Disables DNSSEC algorithms dnssec
│ │ │ │ │ + from a specified zone.
│ │ │ │ │ +_d_i_s_a_b_l_e_-_d_s_-_d_i_g_e_s_t_s Disables DS digest types zone, dnssec
│ │ │ │ │ + from a specified zone.
│ │ │ │ │ +_d_i_s_a_b_l_e_-_e_m_p_t_y_-_z_o_n_e Disables individual empty zone, server
│ │ │ │ │ + zones.
│ │ │ │ │ + Configures a Dynamically
│ │ │ │ │ +_d_l_z Loadable Zone (DLZ) database zone
│ │ │ │ │ + in _n_a_m_e_d_._c_o_n_f.
│ │ │ │ │ + Instructs _n_a_m_e_d to return
│ │ │ │ │ +_d_n_s_6_4 mapped IPv4 addresses to query
│ │ │ │ │ + AAAA queries when there are
│ │ │ │ │ + no AAAA records.
│ │ │ │ │ +_d_n_s_6_4_-_c_o_n_t_a_c_t Specifies the name of the server
│ │ │ │ │ + contact for _d_n_s_6_4 zones.
│ │ │ │ │ +_d_n_s_6_4_-_s_e_r_v_e_r Specifies the name of the server
│ │ │ │ │ + server for _d_n_s_6_4 zones.
│ │ │ │ │ +_d_n_s_k_e_y_-_s_i_g_-_v_a_l_i_d_i_t_y obsolete
│ │ │ │ │ + Specifies the time to live
│ │ │ │ │ +_d_n_s_k_e_y_-_t_t_l (TTL) for DNSKEY resource dnssec
│ │ │ │ │ + records.
│ │ │ │ │ + Turns on the DNS Response
│ │ │ │ │ +_d_n_s_r_p_s_-_e_n_a_b_l_e Policy Service (DNSRPS) security, server
│ │ │ │ │ + interface.
│ │ │ │ │ + Turns on the DNS Response
│ │ │ │ │ +_d_n_s_r_p_s_-_l_i_b_r_a_r_y Policy Service (DNSRPS) security, server
│ │ │ │ │ + interface.
│ │ │ │ │ + Provides additional RPZ
│ │ │ │ │ + configuration settings,
│ │ │ │ │ +_d_n_s_r_p_s_-_o_p_t_i_o_n_s which are passed to the DNS security, server
│ │ │ │ │ + Response Policy Service
│ │ │ │ │ + (DNSRPS) provider library.
│ │ │ │ │ + Instructs BIND 9 to accept
│ │ │ │ │ +_d_n_s_s_e_c_-_a_c_c_e_p_t_-_e_x_p_i_r_e_d expired DNSSEC signatures dnssec
│ │ │ │ │ + when validating.
│ │ │ │ │ +_d_n_s_s_e_c_-_d_n_s_k_e_y_-_k_s_k_o_n_l_y obsolete
│ │ │ │ │ + Sets the frequency of
│ │ │ │ │ +_d_n_s_s_e_c_-_l_o_a_d_k_e_y_s_-_i_n_t_e_r_v_a_l automatic checks of the dnssec
│ │ │ │ │ + DNSSEC key repository.
│ │ │ │ │ + Defines hierarchies that
│ │ │ │ │ +_d_n_s_s_e_c_-_m_u_s_t_-_b_e_-_s_e_c_u_r_e must or may not be secure deprecated
│ │ │ │ │ + (signed and validated).
│ │ │ │ │ +_d_n_s_s_e_c_-_p_o_l_i_c_y Defines a key and signing dnssec
│ │ │ │ │ + policy (KASP) for zones.
│ │ │ │ │ +_d_n_s_s_e_c_-_s_e_c_u_r_e_-_t_o_-_i_n_s_e_c_u_r_e obsolete
│ │ │ │ │ +_d_n_s_s_e_c_-_u_p_d_a_t_e_-_m_o_d_e obsolete
│ │ │ │ │ +_d_n_s_s_e_c_-_v_a_l_i_d_a_t_i_o_n Enables DNSSEC validation in dnssec
│ │ │ │ │ + _n_a_m_e_d.
│ │ │ │ │ +_d_n_s_t_a_p Enables logging of _d_n_s_t_a_p logging
│ │ │ │ │ + messages.
│ │ │ │ │ +_d_n_s_t_a_p_-_i_d_e_n_t_i_t_y Specifies an identity string logging
│ │ │ │ │ + to send in _d_n_s_t_a_p messages.
│ │ │ │ │ + Configures the path to which
│ │ │ │ │ +_d_n_s_t_a_p_-_o_u_t_p_u_t the _d_n_s_t_a_p frame stream is logging
│ │ │ │ │ + sent.
│ │ │ │ │ +_d_n_s_t_a_p_-_v_e_r_s_i_o_n Specifies a _v_e_r_s_i_o_n string logging
│ │ │ │ │ + to send in _d_n_s_t_a_p messages.
│ │ │ │ │ + Specifies host names or
│ │ │ │ │ +_d_u_a_l_-_s_t_a_c_k_-_s_e_r_v_e_r_s addresses of machines with server
│ │ │ │ │ + access to both IPv4 and IPv6
│ │ │ │ │ + transports.
│ │ │ │ │ + Indicates the pathname of
│ │ │ │ │ +_d_u_m_p_-_f_i_l_e the file where the server logging
│ │ │ │ │ + dumps the database after
│ │ │ │ │ + _r_n_d_c_ _d_u_m_p_d_b.
│ │ │ │ │ +_d_y_n_d_b Configures a DynDB database zone
│ │ │ │ │ + in _n_a_m_e_d_._c_o_n_f.
│ │ │ │ │ +_e_d_n_s Controls the use of the server
│ │ │ │ │ + EDNS0 (_RR_FF_CC_ _22_66_77_11) feature.
│ │ │ │ │ + Sets the maximum advertised
│ │ │ │ │ + EDNS UDP buffer size to
│ │ │ │ │ +_e_d_n_s_-_u_d_p_-_s_i_z_e control the size of packets query
│ │ │ │ │ + received from authoritative
│ │ │ │ │ + servers in response to
│ │ │ │ │ + recursive queries.
│ │ │ │ │ + Sets the maximum EDNS
│ │ │ │ │ +_e_d_n_s_-_v_e_r_s_i_o_n VERSION that is sent to the server
│ │ │ │ │ + server(s) by the resolver.
│ │ │ │ │ + Specifies the contact name
│ │ │ │ │ +_e_m_p_t_y_-_c_o_n_t_a_c_t in the returned SOA record zone, server
│ │ │ │ │ + for empty zones.
│ │ │ │ │ + Specifies the server name in
│ │ │ │ │ +_e_m_p_t_y_-_s_e_r_v_e_r the returned SOA record for zone, server
│ │ │ │ │ + empty zones.
│ │ │ │ │ +_e_m_p_t_y_-_z_o_n_e_s_-_e_n_a_b_l_e Enables or disables all zone, server
│ │ │ │ │ + empty zones.
│ │ │ │ │ + Specifies a list of HTTP
│ │ │ │ │ +_e_n_d_p_o_i_n_t_s query paths on which to query, server
│ │ │ │ │ + listen.
│ │ │ │ │ + Limits the number of errors
│ │ │ │ │ +_e_r_r_o_r_s_-_p_e_r_-_s_e_c_o_n_d for a valid domain name and server
│ │ │ │ │ + record type.
│ │ │ │ │ + Allows a list of IPv6
│ │ │ │ │ + addresses to be ignored if
│ │ │ │ │ +_e_x_c_l_u_d_e they appear in a domain query
│ │ │ │ │ + name's AAAA records in
│ │ │ │ │ + _d_n_s_6_4.
│ │ │ │ │ + Exempts specific clients or
│ │ │ │ │ +_e_x_e_m_p_t_-_c_l_i_e_n_t_s client groups from rate query
│ │ │ │ │ + limiting.
│ │ │ │ │ + Sets the parameters for
│ │ │ │ │ + dynamic resizing of the
│ │ │ │ │ +_f_e_t_c_h_-_q_u_o_t_a_-_p_a_r_a_m_s _f_e_t_c_h_e_s_-_p_e_r_-_s_e_r_v_e_r quota in query, server
│ │ │ │ │ + response to detected
│ │ │ │ │ + congestion.
│ │ │ │ │ + Sets the maximum number of
│ │ │ │ │ + simultaneous iterative
│ │ │ │ │ + queries allowed to be sent
│ │ │ │ │ +_f_e_t_c_h_e_s_-_p_e_r_-_s_e_r_v_e_r by a server to an upstream query, server
│ │ │ │ │ + name server before the
│ │ │ │ │ + server blocks additional
│ │ │ │ │ + queries.
│ │ │ │ │ + Sets the maximum number of
│ │ │ │ │ + simultaneous iterative
│ │ │ │ │ +_f_e_t_c_h_e_s_-_p_e_r_-_z_o_n_e queries allowed to any one query, server
│ │ │ │ │ + domain before the server
│ │ │ │ │ + blocks new queries for data
│ │ │ │ │ + in or beneath that zone.
│ │ │ │ │ +_f_i_l_e Specifies the zone's zone
│ │ │ │ │ + filename.
│ │ │ │ │ + Controls whether pending
│ │ │ │ │ +_f_l_u_s_h_-_z_o_n_e_s_-_o_n_-_s_h_u_t_d_o_w_n zone writes are flushed when zone
│ │ │ │ │ + the name server exits.
│ │ │ │ │ + Allows or disallows fallback
│ │ │ │ │ + to recursion if forwarding
│ │ │ │ │ +_f_o_r_w_a_r_d has failed; it is always query
│ │ │ │ │ + used in conjunction with the
│ │ │ │ │ + _f_o_r_w_a_r_d_e_r_s statement.
│ │ │ │ │ +_f_o_r_w_a_r_d_e_r_s Defines one or more hosts to query
│ │ │ │ │ + which queries are forwarded.
│ │ │ │ │ + Sets the number of
│ │ │ │ │ +_f_s_t_r_m_-_s_e_t_-_b_u_f_f_e_r_-_h_i_n_t accumulated bytes in the logging
│ │ │ │ │ + output buffer before forcing
│ │ │ │ │ + a buffer flush.
│ │ │ │ │ + Sets the number of seconds
│ │ │ │ │ +_f_s_t_r_m_-_s_e_t_-_f_l_u_s_h_-_t_i_m_e_o_u_t that unflushed data remains logging
│ │ │ │ │ + in the output buffer.
│ │ │ │ │ + Sets the number of queue
│ │ │ │ │ +_f_s_t_r_m_-_s_e_t_-_i_n_p_u_t_-_q_u_e_u_e_-_s_i_z_e entries to allocate for each logging
│ │ │ │ │ + input queue.
│ │ │ │ │ + Sets the number of
│ │ │ │ │ +_f_s_t_r_m_-_s_e_t_-_o_u_t_p_u_t_-_n_o_t_i_f_y_- outstanding queue entries
│ │ │ │ │ +_t_h_r_e_s_h_o_l_d allowed on an input queue logging
│ │ │ │ │ + before waking the I/
│ │ │ │ │ + O thread.
│ │ │ │ │ +_f_s_t_r_m_-_s_e_t_-_o_u_t_p_u_t_-_q_u_e_u_e_- Sets the queuing semantics logging
│ │ │ │ │ +_m_o_d_e_l to use for queue objects.
│ │ │ │ │ + Sets the number of queue
│ │ │ │ │ +_f_s_t_r_m_-_s_e_t_-_o_u_t_p_u_t_-_q_u_e_u_e_-_s_i_z_e entries allocated for each logging
│ │ │ │ │ + output queue.
│ │ │ │ │ + Sets the number of seconds
│ │ │ │ │ +_f_s_t_r_m_-_s_e_t_-_r_e_o_p_e_n_-_i_n_t_e_r_v_a_l to wait between attempts to logging
│ │ │ │ │ + reopen a closed output
│ │ │ │ │ + stream.
│ │ │ │ │ + Specifies the directory
│ │ │ │ │ +_g_e_o_i_p_-_d_i_r_e_c_t_o_r_y containing GeoIP database server
│ │ │ │ │ + files.
│ │ │ │ │ + Sets the interval at which
│ │ │ │ │ +_h_e_a_r_t_b_e_a_t_-_i_n_t_e_r_v_a_l the server performs zone deprecated
│ │ │ │ │ + maintenance tasks for all
│ │ │ │ │ + zones marked as _d_i_a_l_u_p.
│ │ │ │ │ + Specifies the hostname of
│ │ │ │ │ +_h_o_s_t_n_a_m_e the server to return in server
│ │ │ │ │ + response to a hostname.bind
│ │ │ │ │ + query.
│ │ │ │ │ + Configures HTTP endpoints on
│ │ │ │ │ +_h_t_t_p which to listen for DNS- query, server
│ │ │ │ │ + over-HTTPS (DoH) queries.
│ │ │ │ │ + Limits the number of active
│ │ │ │ │ +_h_t_t_p_-_l_i_s_t_e_n_e_r_-_c_l_i_e_n_t_s concurrent connections on a server
│ │ │ │ │ + per-listener basis.
│ │ │ │ │ + Specifies the TCP port
│ │ │ │ │ +_h_t_t_p_-_p_o_r_t number the server uses to query, server
│ │ │ │ │ + receive and send unencrypted
│ │ │ │ │ + DNS traffic via HTTP.
│ │ │ │ │ + Limits the number of active
│ │ │ │ │ +_h_t_t_p_-_s_t_r_e_a_m_s_-_p_e_r_-_c_o_n_n_e_c_t_i_o_n concurrent HTTP/2 streams on server
│ │ │ │ │ + a per-connection basis.
│ │ │ │ │ + Specifies the TCP port
│ │ │ │ │ +_h_t_t_p_s_-_p_o_r_t number the server uses to query, server
│ │ │ │ │ + receive and send DNS-over-
│ │ │ │ │ + HTTPS protocol traffic.
│ │ │ │ │ +_i_n_-_v_i_e_w Specifies the view in which zone, view
│ │ │ │ │ + a given zone is defined.
│ │ │ │ │ +_i_n_e_t Specifies a TCP socket as a server
│ │ │ │ │ + control channel.
│ │ │ │ │ + Specifies whether BIND 9
│ │ │ │ │ +_i_n_l_i_n_e_-_s_i_g_n_i_n_g maintains a separate signed zone, dnssec
│ │ │ │ │ + version of a zone.
│ │ │ │ │ + Sets the interval at which
│ │ │ │ │ +_i_n_t_e_r_f_a_c_e_-_i_n_t_e_r_v_a_l the server scans the network server
│ │ │ │ │ + interface list.
│ │ │ │ │ +_i_p_v_4_-_p_r_e_f_i_x_-_l_e_n_g_t_h Specifies the prefix lengths server
│ │ │ │ │ + of IPv4 address blocks.
│ │ │ │ │ + Specifies the contact for
│ │ │ │ │ +_i_p_v_4_o_n_l_y_-_c_o_n_t_a_c_t the IPV4ONLY.ARPA zone server
│ │ │ │ │ + created by _d_n_s_6_4.
│ │ │ │ │ + Enables automatic IPv4 zones
│ │ │ │ │ +_i_p_v_4_o_n_l_y_-_e_n_a_b_l_e if a _d_n_s_6_4 block is query
│ │ │ │ │ + configured.
│ │ │ │ │ + Specifies the name of the
│ │ │ │ │ +_i_p_v_4_o_n_l_y_-_s_e_r_v_e_r server for the IPV4ONLY.ARPA query, server
│ │ │ │ │ + zone created by _d_n_s_6_4.
│ │ │ │ │ +_i_p_v_6_-_p_r_e_f_i_x_-_l_e_n_g_t_h Specifies the prefix lengths server
│ │ │ │ │ + of IPv6 address blocks.
│ │ │ │ │ +_i_x_f_r_-_f_r_o_m_-_d_i_f_f_e_r_e_n_c_e_s Controls how IXFR transfers transfer
│ │ │ │ │ + are calculated.
│ │ │ │ │ +_j_o_u_r_n_a_l Allows the default journal's zone
│ │ │ │ │ + filename to be overridden.
│ │ │ │ │ + Defines a shared secret key
│ │ │ │ │ +_k_e_y for use with _T_S_I_G or the security
│ │ │ │ │ + command channel.
│ │ │ │ │ + Indicates the directory
│ │ │ │ │ +_k_e_y_-_d_i_r_e_c_t_o_r_y where public and private dnssec
│ │ │ │ │ + DNSSEC key files are found.
│ │ │ │ │ + Specifies the path to a file
│ │ │ │ │ +_k_e_y_-_f_i_l_e containing the private TLS security, server
│ │ │ │ │ + key for a connection.
│ │ │ │ │ + Specifies one or more
│ │ │ │ │ +_k_e_y_s _s_e_r_v_e_r___k_e_y s to be used with security, server
│ │ │ │ │ + a remote server.
│ │ │ │ │ +_l_a_m_e_-_t_t_l Sets the resolver's lame server
│ │ │ │ │ + cache.
│ │ │ │ │ + Specifies the IPv4 addresses
│ │ │ │ │ +_l_i_s_t_e_n_-_o_n on which a server listens server
│ │ │ │ │ + for DNS queries.
│ │ │ │ │ + Specifies the IPv6 addresses
│ │ │ │ │ +_l_i_s_t_e_n_-_o_n_-_v_6 on which a server listens server
│ │ │ │ │ + for DNS queries.
│ │ │ │ │ + Specifies a per-listener
│ │ │ │ │ +_l_i_s_t_e_n_e_r_-_c_l_i_e_n_t_s quota for active query, server
│ │ │ │ │ + connections.
│ │ │ │ │ + Sets a maximum size for the
│ │ │ │ │ +_l_m_d_b_-_m_a_p_s_i_z_e memory map of the new-zone server
│ │ │ │ │ + database in LMDB database
│ │ │ │ │ + format.
│ │ │ │ │ + Tests rate-limiting
│ │ │ │ │ +_l_o_g_-_o_n_l_y parameters without actually logging, query
│ │ │ │ │ + dropping any requests.
│ │ │ │ │ +_l_o_g_g_i_n_g Configures logging options logging
│ │ │ │ │ + for the name server.
│ │ │ │ │ +_m_a_n_a_g_e_d_-_k_e_y_s deprecated
│ │ │ │ │ + Specifies the directory in
│ │ │ │ │ +_m_a_n_a_g_e_d_-_k_e_y_s_-_d_i_r_e_c_t_o_r_y which to store the files dnssec
│ │ │ │ │ + that track managed DNSSEC
│ │ │ │ │ + keys.
│ │ │ │ │ + Specifies an access control
│ │ │ │ │ + list (ACL) of IPv4 addresses
│ │ │ │ │ +_m_a_p_p_e_d that are to be mapped to the query
│ │ │ │ │ + corresponding A RRset in
│ │ │ │ │ + _d_n_s_6_4.
│ │ │ │ │ +_m_a_s_t_e_r_f_i_l_e_-_f_o_r_m_a_t Specifies the file format of zone, server
│ │ │ │ │ + zone files.
│ │ │ │ │ + Specifies the format of zone
│ │ │ │ │ +_m_a_s_t_e_r_f_i_l_e_-_s_t_y_l_e files during a dump, when server
│ │ │ │ │ + the _m_a_s_t_e_r_f_i_l_e_-_f_o_r_m_a_t is
│ │ │ │ │ + text.
│ │ │ │ │ + Specifies a view of DNS
│ │ │ │ │ +_m_a_t_c_h_-_c_l_i_e_n_t_s namespace for a given subset view
│ │ │ │ │ + of client IP addresses.
│ │ │ │ │ + Specifies a view of DNS
│ │ │ │ │ +_m_a_t_c_h_-_d_e_s_t_i_n_a_t_i_o_n_s namespace for a given subset view
│ │ │ │ │ + of destination IP addresses.
│ │ │ │ │ + Allows IPv4-mapped IPv6
│ │ │ │ │ + addresses to match address-
│ │ │ │ │ +_m_a_t_c_h_-_m_a_p_p_e_d_-_a_d_d_r_e_s_s_e_s match list entries for server
│ │ │ │ │ + corresponding IPv4
│ │ │ │ │ + addresses.
│ │ │ │ │ + Specifies that only
│ │ │ │ │ +_m_a_t_c_h_-_r_e_c_u_r_s_i_v_e_-_o_n_l_y recursive requests can match view
│ │ │ │ │ + this view of the DNS
│ │ │ │ │ + namespace.
│ │ │ │ │ + Sets the maximum amount of
│ │ │ │ │ +_m_a_x_-_c_a_c_h_e_-_s_i_z_e memory to use for an server
│ │ │ │ │ + individual cache database
│ │ │ │ │ + and its associated metadata.
│ │ │ │ │ + Specifies the maximum time
│ │ │ │ │ +_m_a_x_-_c_a_c_h_e_-_t_t_l (in seconds) that the server server
│ │ │ │ │ + caches ordinary (positive)
│ │ │ │ │ + answers.
│ │ │ │ │ + Sets the maximum number of
│ │ │ │ │ + simultaneous recursive
│ │ │ │ │ +_m_a_x_-_c_l_i_e_n_t_s_-_p_e_r_-_q_u_e_r_y clients accepted by the server
│ │ │ │ │ + server for any given query
│ │ │ │ │ + before the server drops
│ │ │ │ │ + additional clients.
│ │ │ │ │ + Sets the maximum size for
│ │ │ │ │ +_m_a_x_-_i_x_f_r_-_r_a_t_i_o IXFR responses to zone transfer
│ │ │ │ │ + transfer requests.
│ │ │ │ │ +_m_a_x_-_j_o_u_r_n_a_l_-_s_i_z_e Controls the size of journal transfer
│ │ │ │ │ + files.
│ │ │ │ │ + Specifies the maximum
│ │ │ │ │ + retention time (in seconds)
│ │ │ │ │ +_m_a_x_-_n_c_a_c_h_e_-_t_t_l for storage of negative server
│ │ │ │ │ + answers in the server's
│ │ │ │ │ + cache.
│ │ │ │ │ +_m_a_x_-_r_e_c_o_r_d_s Sets the maximum number of zone, server
│ │ │ │ │ + records permitted in a zone.
│ │ │ │ │ + Sets the maximum number of
│ │ │ │ │ + levels of recursion
│ │ │ │ │ +_m_a_x_-_r_e_c_u_r_s_i_o_n_-_d_e_p_t_h permitted at any one time server
│ │ │ │ │ + while servicing a recursive
│ │ │ │ │ + query.
│ │ │ │ │ + Sets the maximum number of
│ │ │ │ │ +_m_a_x_-_r_e_c_u_r_s_i_o_n_-_q_u_e_r_i_e_s iterative queries while query, server
│ │ │ │ │ + servicing a recursive query.
│ │ │ │ │ + Limits the zone refresh
│ │ │ │ │ +_m_a_x_-_r_e_f_r_e_s_h_-_t_i_m_e interval to no less often transfer
│ │ │ │ │ + than the specified value, in
│ │ │ │ │ + seconds.
│ │ │ │ │ + Limits the zone refresh
│ │ │ │ │ +_m_a_x_-_r_e_t_r_y_-_t_i_m_e retry interval to no less transfer
│ │ │ │ │ + often than the specified
│ │ │ │ │ + value, in seconds.
│ │ │ │ │ + Sets the maximum RSA
│ │ │ │ │ +_m_a_x_-_r_s_a_-_e_x_p_o_n_e_n_t_-_s_i_z_e exponent size (in bits) when query, dnssec
│ │ │ │ │ + validating.
│ │ │ │ │ + Specifies the maximum time
│ │ │ │ │ + that the server retains
│ │ │ │ │ +_m_a_x_-_s_t_a_l_e_-_t_t_l records past their normal server
│ │ │ │ │ + expiry, to return them as
│ │ │ │ │ + stale records.
│ │ │ │ │ + Sets the maximum size of the
│ │ │ │ │ +_m_a_x_-_t_a_b_l_e_-_s_i_z_e table used to track requests server
│ │ │ │ │ + and rate-limit responses.
│ │ │ │ │ + Specifies the number of
│ │ │ │ │ +_m_a_x_-_t_r_a_n_s_f_e_r_-_i_d_l_e_-_i_n minutes after which inbound transfer
│ │ │ │ │ + zone transfers making no
│ │ │ │ │ + progress are terminated.
│ │ │ │ │ + Specifies the number of
│ │ │ │ │ +_m_a_x_-_t_r_a_n_s_f_e_r_-_i_d_l_e_-_o_u_t minutes after which outbound transfer
│ │ │ │ │ + zone transfers making no
│ │ │ │ │ + progress are terminated.
│ │ │ │ │ + Specifies the number of
│ │ │ │ │ +_m_a_x_-_t_r_a_n_s_f_e_r_-_t_i_m_e_-_i_n minutes after which inbound transfer
│ │ │ │ │ + zone transfers are
│ │ │ │ │ + terminated.
│ │ │ │ │ + Specifies the number of
│ │ │ │ │ +_m_a_x_-_t_r_a_n_s_f_e_r_-_t_i_m_e_-_o_u_t minutes after which outbound transfer
│ │ │ │ │ + zone transfers are
│ │ │ │ │ + terminated.
│ │ │ │ │ +_m_a_x_-_u_d_p_-_s_i_z_e Sets the maximum EDNS UDP query
│ │ │ │ │ + message size sent by _n_a_m_e_d.
│ │ │ │ │ + Set the maximum number of
│ │ │ │ │ +_m_a_x_-_v_a_l_i_d_a_t_i_o_n_-_f_a_i_l_u_r_e_s_- DNSSEC validation failures server
│ │ │ │ │ +_p_e_r_-_f_e_t_c_h that can happen in single
│ │ │ │ │ + fetch
│ │ │ │ │ + Set the maximum number of
│ │ │ │ │ +_m_a_x_-_v_a_l_i_d_a_t_i_o_n_s_-_p_e_r_-_f_e_t_c_h DNSSEC validations that can server
│ │ │ │ │ + happen in single fetch
│ │ │ │ │ + Specifies a maximum
│ │ │ │ │ +_m_a_x_-_z_o_n_e_-_t_t_l permissible time-to-live deprecated
│ │ │ │ │ + (TTL) value, in seconds.
│ │ │ │ │ + Controls whether memory
│ │ │ │ │ +_m_e_m_s_t_a_t_i_s_t_i_c_s statistics are written to logging, server
│ │ │ │ │ + the file specified by
│ │ │ │ │ + _m_e_m_s_t_a_t_i_s_t_i_c_s_-_f_i_l_e at exit.
│ │ │ │ │ + Sets the pathname of the
│ │ │ │ │ +_m_e_m_s_t_a_t_i_s_t_i_c_s_-_f_i_l_e file where the server writes logging
│ │ │ │ │ + memory usage statistics on
│ │ │ │ │ + exit.
│ │ │ │ │ + Controls whether DNS name
│ │ │ │ │ +_m_e_s_s_a_g_e_-_c_o_m_p_r_e_s_s_i_o_n compression is used in query
│ │ │ │ │ + responses to regular
│ │ │ │ │ + queries.
│ │ │ │ │ + Specifies the minimum time
│ │ │ │ │ +_m_i_n_-_c_a_c_h_e_-_t_t_l (in seconds) that the server server
│ │ │ │ │ + caches ordinary (positive)
│ │ │ │ │ + answers.
│ │ │ │ │ + Specifies the minimum
│ │ │ │ │ + retention time (in seconds)
│ │ │ │ │ +_m_i_n_-_n_c_a_c_h_e_-_t_t_l for storage of negative server
│ │ │ │ │ + answers in the server's
│ │ │ │ │ + cache.
│ │ │ │ │ + Limits the zone refresh
│ │ │ │ │ +_m_i_n_-_r_e_f_r_e_s_h_-_t_i_m_e interval to no more often transfer
│ │ │ │ │ + than the specified value, in
│ │ │ │ │ + seconds.
│ │ │ │ │ + Limits the zone refresh
│ │ │ │ │ +_m_i_n_-_r_e_t_r_y_-_t_i_m_e retry interval to no more transfer
│ │ │ │ │ + often than the specified
│ │ │ │ │ + value, in seconds.
│ │ │ │ │ + Sets the minimum size of the
│ │ │ │ │ +_m_i_n_-_t_a_b_l_e_-_s_i_z_e table used to track requests query
│ │ │ │ │ + and rate-limit responses.
│ │ │ │ │ + Controls whether the server
│ │ │ │ │ + replies with only one of the
│ │ │ │ │ +_m_i_n_i_m_a_l_-_a_n_y RRsets for a query name, query
│ │ │ │ │ + when generating a positive
│ │ │ │ │ + response to a query of type
│ │ │ │ │ + ANY over UDP.
│ │ │ │ │ + Controls whether the server
│ │ │ │ │ + only adds records to the
│ │ │ │ │ + authority and additional
│ │ │ │ │ +_m_i_n_i_m_a_l_-_r_e_s_p_o_n_s_e_s data sections when they are query
│ │ │ │ │ + required (e.g. delegations,
│ │ │ │ │ + negative responses). This
│ │ │ │ │ + improves server performance.
│ │ │ │ │ + Controls whether serial
│ │ │ │ │ +_m_u_l_t_i_-_m_a_s_t_e_r number mismatch errors are transfer
│ │ │ │ │ + logged.
│ │ │ │ │ + Specifies the directory
│ │ │ │ │ +_n_e_w_-_z_o_n_e_s_-_d_i_r_e_c_t_o_r_y where configuration zone
│ │ │ │ │ + parameters are stored for
│ │ │ │ │ + zones added by _r_n_d_c_ _a_d_d_z_o_n_e.
│ │ │ │ │ + Specifies a list of
│ │ │ │ │ +_n_o_-_c_a_s_e_-_c_o_m_p_r_e_s_s addresses that require case- server
│ │ │ │ │ + insensitive compression in
│ │ │ │ │ + responses.
│ │ │ │ │ + Sets the maximum size of UDP
│ │ │ │ │ +_n_o_c_o_o_k_i_e_-_u_d_p_-_s_i_z_e responses that are sent to query
│ │ │ │ │ + queries without a valid
│ │ │ │ │ + server COOKIE.
│ │ │ │ │ + Limits the number of empty
│ │ │ │ │ +_n_o_d_a_t_a_-_p_e_r_-_s_e_c_o_n_d (NODATA) responses for a query
│ │ │ │ │ + valid domain name.
│ │ │ │ │ + Controls whether NOTIFY
│ │ │ │ │ +_n_o_t_i_f_y messages are sent on zone transfer
│ │ │ │ │ + changes.
│ │ │ │ │ + Sets the delay (in seconds)
│ │ │ │ │ +_n_o_t_i_f_y_-_d_e_l_a_y between sending sets of transfer, zone
│ │ │ │ │ + NOTIFY messages for a zone.
│ │ │ │ │ + Specifies the rate at which
│ │ │ │ │ +_n_o_t_i_f_y_-_r_a_t_e NOTIFY requests are sent transfer, zone
│ │ │ │ │ + during normal zone
│ │ │ │ │ + maintenance operations.
│ │ │ │ │ + Defines the IPv4 address
│ │ │ │ │ +_n_o_t_i_f_y_-_s_o_u_r_c_e (and optional port) to be transfer
│ │ │ │ │ + used for outgoing NOTIFY
│ │ │ │ │ + messages.
│ │ │ │ │ + Defines the IPv6 address
│ │ │ │ │ +_n_o_t_i_f_y_-_s_o_u_r_c_e_-_v_6 (and optional port) to be transfer
│ │ │ │ │ + used for outgoing NOTIFY
│ │ │ │ │ + messages.
│ │ │ │ │ + Controls whether the name
│ │ │ │ │ +_n_o_t_i_f_y_-_t_o_-_s_o_a servers in the NS RRset are transfer
│ │ │ │ │ + checked against the SOA
│ │ │ │ │ + MNAME.
│ │ │ │ │ + Specifies the use of NSEC3
│ │ │ │ │ +_n_s_e_c_3_p_a_r_a_m instead of NSEC, and sets dnssec
│ │ │ │ │ + NSEC3 parameters.
│ │ │ │ │ + Specifies the lifetime, in
│ │ │ │ │ +_n_t_a_-_l_i_f_e_t_i_m_e seconds, for negative trust dnssec
│ │ │ │ │ + anchors added via _r_n_d_c_ _n_t_a.
│ │ │ │ │ + Specifies the time interval
│ │ │ │ │ + for checking whether
│ │ │ │ │ +_n_t_a_-_r_e_c_h_e_c_k negative trust anchors added dnssec
│ │ │ │ │ + via _r_n_d_c_ _n_t_a are still
│ │ │ │ │ + necessary.
│ │ │ │ │ + Causes all messages sent to
│ │ │ │ │ +_n_u_l_l the logging channel to be logging
│ │ │ │ │ + discarded.
│ │ │ │ │ + Appends the specified suffix
│ │ │ │ │ +_n_x_d_o_m_a_i_n_-_r_e_d_i_r_e_c_t to the original query name, query
│ │ │ │ │ + when replacing an NXDOMAIN
│ │ │ │ │ + with a redirect namespace.
│ │ │ │ │ + Limits the number of
│ │ │ │ │ +_n_x_d_o_m_a_i_n_s_-_p_e_r_-_s_e_c_o_n_d undefined subdomains for a query
│ │ │ │ │ + valid domain name.
│ │ │ │ │ +_o_p_t_i_o_n_s Defines global options to be server
│ │ │ │ │ + used by BIND 9.
│ │ │ │ │ + Adds EDNS Padding options to
│ │ │ │ │ +_p_a_d_d_i_n_g outgoing messages to server
│ │ │ │ │ + increase the packet size.
│ │ │ │ │ + Sets the time to live (TTL)
│ │ │ │ │ +_p_a_r_e_n_t_-_d_s_-_t_t_l of the DS RRset used by the dnssec
│ │ │ │ │ + parent zone.
│ │ │ │ │ + Sets the propagation delay
│ │ │ │ │ + from the time the parent
│ │ │ │ │ +_p_a_r_e_n_t_-_p_r_o_p_a_g_a_t_i_o_n_-_d_e_l_a_y zone is updated to when the zone, dnssec
│ │ │ │ │ + new version is served by all
│ │ │ │ │ + of the parent zone's name
│ │ │ │ │ + servers.
│ │ │ │ │ + Defines a list of delegation
│ │ │ │ │ +_p_a_r_e_n_t_a_l_-_a_g_e_n_t_s agents to be used by primary zone
│ │ │ │ │ + and secondary zones.
│ │ │ │ │ + Specifies which local IPv4
│ │ │ │ │ +_p_a_r_e_n_t_a_l_-_s_o_u_r_c_e source address is used to dnssec
│ │ │ │ │ + send parental DS queries.
│ │ │ │ │ + Specifies which local IPv6
│ │ │ │ │ +_p_a_r_e_n_t_a_l_-_s_o_u_r_c_e_-_v_6 source address is used to dnssec
│ │ │ │ │ + send parental DS queries.
│ │ │ │ │ + Specifies the pathname of
│ │ │ │ │ +_p_i_d_-_f_i_l_e the file where the server server
│ │ │ │ │ + writes its process ID.
│ │ │ │ │ +_p_l_u_g_i_n Configures plugins in server
│ │ │ │ │ + _n_a_m_e_d_._c_o_n_f.
│ │ │ │ │ + Specifies the UDP/TCP port
│ │ │ │ │ +_p_o_r_t number the server uses to query, server
│ │ │ │ │ + receive and send DNS
│ │ │ │ │ + protocol traffic.
│ │ │ │ │ + Specifies that server
│ │ │ │ │ +_p_r_e_f_e_r_-_s_e_r_v_e_r_-_c_i_p_h_e_r_s ciphers should be preferred security, server
│ │ │ │ │ + over client ones.
│ │ │ │ │ + Controls the order of glue
│ │ │ │ │ +_p_r_e_f_e_r_r_e_d_-_g_l_u_e records in an A or AAAA query
│ │ │ │ │ + response.
│ │ │ │ │ + Specifies the "trigger"
│ │ │ │ │ +_p_r_e_f_e_t_c_h time-to-live (TTL) value at query
│ │ │ │ │ + which prefetch of the
│ │ │ │ │ + current query takes place.
│ │ │ │ │ +_p_r_i_m_a_r_i_e_s Defines one or more primary zone
│ │ │ │ │ + servers for a zone.
│ │ │ │ │ +_p_r_i_n_t_-_c_a_t_e_g_o_r_y Includes the category in log logging
│ │ │ │ │ + messages.
│ │ │ │ │ +_p_r_i_n_t_-_s_e_v_e_r_i_t_y Includes the severity in log logging
│ │ │ │ │ + messages.
│ │ │ │ │ +_p_r_i_n_t_-_t_i_m_e Specifies the time format logging
│ │ │ │ │ + for log messages.
│ │ │ │ │ + Specifies the allowed
│ │ │ │ │ +_p_r_o_t_o_c_o_l_s versions of the TLS security
│ │ │ │ │ + protocol.
│ │ │ │ │ + Controls whether a primary
│ │ │ │ │ + responds to an incremental
│ │ │ │ │ +_p_r_o_v_i_d_e_-_i_x_f_r zone request (IXFR) or only transfer
│ │ │ │ │ + responds with a full zone
│ │ │ │ │ + transfer (AXFR).
│ │ │ │ │ + Increases the amount of time
│ │ │ │ │ + between when keys are
│ │ │ │ │ +_p_u_b_l_i_s_h_-_s_a_f_e_t_y published and when they dnssec
│ │ │ │ │ + become active, to allow for
│ │ │ │ │ + unforeseen events.
│ │ │ │ │ + Specifies the amount of time
│ │ │ │ │ + after which DNSSEC keys that
│ │ │ │ │ +_p_u_r_g_e_-_k_e_y_s have been deleted from the dnssec
│ │ │ │ │ + zone can be removed from
│ │ │ │ │ + disk.
│ │ │ │ │ + Controls QNAME minimization
│ │ │ │ │ +_q_n_a_m_e_-_m_i_n_i_m_i_z_a_t_i_o_n behavior in the BIND 9 query
│ │ │ │ │ + resolver.
│ │ │ │ │ + Tightens defenses during DNS
│ │ │ │ │ +_q_p_s_-_s_c_a_l_e attacks by scaling back the query
│ │ │ │ │ + ratio of the current query-
│ │ │ │ │ + per-second rate.
│ │ │ │ │ + Controls the IPv4 address
│ │ │ │ │ +_q_u_e_r_y_-_s_o_u_r_c_e from which queries are query
│ │ │ │ │ + issued.
│ │ │ │ │ + Controls the IPv6 address
│ │ │ │ │ +_q_u_e_r_y_-_s_o_u_r_c_e_-_v_6 from which queries are query
│ │ │ │ │ + issued.
│ │ │ │ │ + Specifies whether query
│ │ │ │ │ +_q_u_e_r_y_l_o_g logging should be active logging, server
│ │ │ │ │ + when _n_a_m_e_d first starts.
│ │ │ │ │ + Controls excessive UDP
│ │ │ │ │ + responses, to prevent BIND 9
│ │ │ │ │ +_r_a_t_e_-_l_i_m_i_t from being used to amplify query
│ │ │ │ │ + reflection denial-of-service
│ │ │ │ │ + (DoS) attacks.
│ │ │ │ │ + Specifies the pathname of
│ │ │ │ │ + the file where the server
│ │ │ │ │ +_r_e_c_u_r_s_i_n_g_-_f_i_l_e dumps queries that are server
│ │ │ │ │ + currently recursing via _r_n_d_c
│ │ │ │ │ + _r_e_c_u_r_s_i_n_g.
│ │ │ │ │ +_r_e_c_u_r_s_i_o_n Defines whether recursion query
│ │ │ │ │ + and caching are allowed.
│ │ │ │ │ + Specifies the maximum number
│ │ │ │ │ +_r_e_c_u_r_s_i_v_e_-_c_l_i_e_n_t_s of concurrent recursive query
│ │ │ │ │ + queries the server can
│ │ │ │ │ + perform.
│ │ │ │ │ + Toggles whether _d_n_s_6_4
│ │ │ │ │ +_r_e_c_u_r_s_i_v_e_-_o_n_l_y synthesis occurs only for query
│ │ │ │ │ + recursive queries.
│ │ │ │ │ + Limits the number of
│ │ │ │ │ +_r_e_f_e_r_r_a_l_s_-_p_e_r_-_s_e_c_o_n_d referrals or delegations to query
│ │ │ │ │ + a server for a given domain.
│ │ │ │ │ + Specifies the expected
│ │ │ │ │ +_r_e_m_o_t_e_-_h_o_s_t_n_a_m_e hostname in the TLS security
│ │ │ │ │ + certificate of the remote
│ │ │ │ │ + server.
│ │ │ │ │ + Specifies whether the local
│ │ │ │ │ +_r_e_q_u_e_s_t_-_e_x_p_i_r_e server requests the EDNS transfer, query
│ │ │ │ │ + EXPIRE value, when acting as
│ │ │ │ │ + a secondary.
│ │ │ │ │ + Controls whether a secondary
│ │ │ │ │ +_r_e_q_u_e_s_t_-_i_x_f_r requests an incremental zone transfer
│ │ │ │ │ + transfer (IXFR) or a full
│ │ │ │ │ + zone transfer (AXFR).
│ │ │ │ │ + Controls whether an empty
│ │ │ │ │ + EDNS(0) NSID (Name Server
│ │ │ │ │ +_r_e_q_u_e_s_t_-_n_s_i_d Identifier) option is sent query
│ │ │ │ │ + with all queries to
│ │ │ │ │ + authoritative name servers
│ │ │ │ │ + during iterative resolution.
│ │ │ │ │ + Controls whether responses
│ │ │ │ │ +_r_e_q_u_i_r_e_-_c_o_o_k_i_e without a server cookie are query
│ │ │ │ │ + accepted
│ │ │ │ │ + Controls whether a valid
│ │ │ │ │ +_r_e_q_u_i_r_e_-_s_e_r_v_e_r_-_c_o_o_k_i_e server cookie is required query
│ │ │ │ │ + before sending a full
│ │ │ │ │ + response to a UDP request.
│ │ │ │ │ + Specifies the length of
│ │ │ │ │ + time, in milliseconds, that
│ │ │ │ │ +_r_e_s_o_l_v_e_r_-_q_u_e_r_y_-_t_i_m_e_o_u_t a resolver attempts to query
│ │ │ │ │ + resolve a recursive query
│ │ │ │ │ + before failing.
│ │ │ │ │ + Specifies whether to apply
│ │ │ │ │ +_r_e_s_o_l_v_e_r_-_u_s_e_-_d_n_s_6_4 DNS64 mappings when sending server
│ │ │ │ │ + queries.
│ │ │ │ │ + Adds an EDNS Padding option
│ │ │ │ │ + to encrypted messages, to
│ │ │ │ │ +_r_e_s_p_o_n_s_e_-_p_a_d_d_i_n_g reduce the chance of query
│ │ │ │ │ + guessing the contents based
│ │ │ │ │ + on size.
│ │ │ │ │ + Specifies response policy security, zone, query,
│ │ │ │ │ +_r_e_s_p_o_n_s_e_-_p_o_l_i_c_y zones for the view or among server
│ │ │ │ │ + global options.
│ │ │ │ │ + Limits the number of non-
│ │ │ │ │ +_r_e_s_p_o_n_s_e_s_-_p_e_r_-_s_e_c_o_n_d empty responses for a valid query
│ │ │ │ │ + domain name and record type.
│ │ │ │ │ + Increases the amount of time
│ │ │ │ │ + a key remains published
│ │ │ │ │ +_r_e_t_i_r_e_-_s_a_f_e_t_y after it is no longer dnssec
│ │ │ │ │ + active, to allow for
│ │ │ │ │ + unforeseen events.
│ │ │ │ │ +_r_e_u_s_e_p_o_r_t Enables kernel load- server
│ │ │ │ │ + balancing of sockets.
│ │ │ │ │ + Controls whether BIND 9
│ │ │ │ │ +_r_o_o_t_-_k_e_y_-_s_e_n_t_i_n_e_l responds to root key server
│ │ │ │ │ + sentinel probes.
│ │ │ │ │ + Defines the order in which
│ │ │ │ │ +_r_r_s_e_t_-_o_r_d_e_r equal RRs (RRsets) are query
│ │ │ │ │ + returned.
│ │ │ │ │ + Specifies whether a
│ │ │ │ │ +_s_e_a_r_c_h Dynamically Loadable Zone query
│ │ │ │ │ + (DLZ) module is queried for
│ │ │ │ │ + an answer to a query name.
│ │ │ │ │ + Defines a Base64-encoded
│ │ │ │ │ +_s_e_c_r_e_t string to be used as the security
│ │ │ │ │ + secret by the algorithm.
│ │ │ │ │ + Specifies the pathname of
│ │ │ │ │ +_s_e_c_r_o_o_t_s_-_f_i_l_e the file where the server dnssec
│ │ │ │ │ + dumps security roots, when
│ │ │ │ │ + using _r_n_d_c_ _s_e_c_r_o_o_t_s.
│ │ │ │ │ + Controls whether a COOKIE
│ │ │ │ │ +_s_e_n_d_-_c_o_o_k_i_e EDNS option is sent along query
│ │ │ │ │ + with a query.
│ │ │ │ │ + Defines an upper limit on
│ │ │ │ │ + the number of queries per
│ │ │ │ │ +_s_e_r_i_a_l_-_q_u_e_r_y_-_r_a_t_e second issued by the server, transfer
│ │ │ │ │ + when querying the SOA RRs
│ │ │ │ │ + used for zone transfers.
│ │ │ │ │ + Specifies the update method
│ │ │ │ │ +_s_e_r_i_a_l_-_u_p_d_a_t_e_-_m_e_t_h_o_d to be used for the zone zone
│ │ │ │ │ + serial number in the SOA
│ │ │ │ │ + record.
│ │ │ │ │ + Defines characteristics to
│ │ │ │ │ +_s_e_r_v_e_r be associated with a remote server
│ │ │ │ │ + name server.
│ │ │ │ │ + Specifies a list of IP
│ │ │ │ │ + addresses to which queries
│ │ │ │ │ +_s_e_r_v_e_r_-_a_d_d_r_e_s_s_e_s should be sent in recursive zone, query
│ │ │ │ │ + resolution for a static-stub
│ │ │ │ │ + zone.
│ │ │ │ │ + Specifies the ID of the
│ │ │ │ │ +_s_e_r_v_e_r_-_i_d server to return in response server
│ │ │ │ │ + to a ID.SERVER query.
│ │ │ │ │ + Specifies a list of domain
│ │ │ │ │ +_s_e_r_v_e_r_-_n_a_m_e_s names of name servers that zone
│ │ │ │ │ + act as authoritative servers
│ │ │ │ │ + of a static-stub zone.
│ │ │ │ │ + Sets the length of time (in
│ │ │ │ │ +_s_e_r_v_f_a_i_l_-_t_t_l seconds) that a SERVFAIL server
│ │ │ │ │ + response is cached.
│ │ │ │ │ + Specifies the algorithm to
│ │ │ │ │ +_s_e_s_s_i_o_n_-_k_e_y_a_l_g use for the TSIG session security
│ │ │ │ │ + key.
│ │ │ │ │ + Specifies the pathname of
│ │ │ │ │ + the file where a TSIG
│ │ │ │ │ +_s_e_s_s_i_o_n_-_k_e_y_f_i_l_e session key is written, when security
│ │ │ │ │ + generated by _n_a_m_e_d for use
│ │ │ │ │ + by nsupdate -l.
│ │ │ │ │ +_s_e_s_s_i_o_n_-_k_e_y_n_a_m_e Specifies the key name for security
│ │ │ │ │ + the TSIG session key.
│ │ │ │ │ + Enables or disables session
│ │ │ │ │ +_s_e_s_s_i_o_n_-_t_i_c_k_e_t_s resumption through TLS security
│ │ │ │ │ + session tickets.
│ │ │ │ │ +_s_e_v_e_r_i_t_y Defines the priority level logging
│ │ │ │ │ + of log messages.
│ │ │ │ │ + Specifies the maximum number
│ │ │ │ │ +_s_i_g_-_s_i_g_n_i_n_g_-_n_o_d_e_s of nodes to be examined in dnssec
│ │ │ │ │ + each quantum, when signing a
│ │ │ │ │ + zone with a new DNSKEY.
│ │ │ │ │ + Specifies the threshold for
│ │ │ │ │ + the number of signatures
│ │ │ │ │ +_s_i_g_-_s_i_g_n_i_n_g_-_s_i_g_n_a_t_u_r_e_s that terminates processing a dnssec
│ │ │ │ │ + quantum, when signing a zone
│ │ │ │ │ + with a new DNSKEY.
│ │ │ │ │ + Specifies a private RDATA
│ │ │ │ │ +_s_i_g_-_s_i_g_n_i_n_g_-_t_y_p_e type to use when generating dnssec
│ │ │ │ │ + signing-state records.
│ │ │ │ │ +_s_i_g_-_v_a_l_i_d_i_t_y_-_i_n_t_e_r_v_a_l obsolete
│ │ │ │ │ +_s_i_g_n_a_t_u_r_e_s_-_r_e_f_r_e_s_h Specifies how frequently an dnssec
│ │ │ │ │ + RRSIG record is refreshed.
│ │ │ │ │ +_s_i_g_n_a_t_u_r_e_s_-_v_a_l_i_d_i_t_y Indicates the validity dnssec
│ │ │ │ │ + period of an RRSIG record.
│ │ │ │ │ +_s_i_g_n_a_t_u_r_e_s_-_v_a_l_i_d_i_t_y_-_d_n_s_k_e_y Indicates the validity dnssec
│ │ │ │ │ + period of DNSKEY records.
│ │ │ │ │ + Sets the number of "slipped"
│ │ │ │ │ +_s_l_i_p responses to minimize the query
│ │ │ │ │ + use of forged source
│ │ │ │ │ + addresses for an attack.
│ │ │ │ │ + Controls the ordering of RRs
│ │ │ │ │ +_s_o_r_t_l_i_s_t returned to the client, query
│ │ │ │ │ + based on the client's IP
│ │ │ │ │ + address.
│ │ │ │ │ + Defines the amount of time
│ │ │ │ │ + (in milliseconds) that _n_a_m_e_d
│ │ │ │ │ +_s_t_a_l_e_-_a_n_s_w_e_r_-_c_l_i_e_n_t_-_t_i_m_e_o_u_t waits before attempting to query, server
│ │ │ │ │ + answer a query with a stale
│ │ │ │ │ + RRset from cache.
│ │ │ │ │ + Enables the returning of
│ │ │ │ │ +_s_t_a_l_e_-_a_n_s_w_e_r_-_e_n_a_b_l_e "stale" cached answers when query, server
│ │ │ │ │ + the name servers for a zone
│ │ │ │ │ + are not answering.
│ │ │ │ │ + Specifies the time to live
│ │ │ │ │ +_s_t_a_l_e_-_a_n_s_w_e_r_-_t_t_l (TTL) to be returned on query
│ │ │ │ │ + stale answers, in seconds.
│ │ │ │ │ +_s_t_a_l_e_-_c_a_c_h_e_-_e_n_a_b_l_e Enables the retention of query, server
│ │ │ │ │ + "stale" cached answers.
│ │ │ │ │ + Sets the time window for the
│ │ │ │ │ + return of "stale" cached
│ │ │ │ │ +_s_t_a_l_e_-_r_e_f_r_e_s_h_-_t_i_m_e answers before the next query, server
│ │ │ │ │ + attempt to contact, if the
│ │ │ │ │ + name servers for a given
│ │ │ │ │ + zone are not responding.
│ │ │ │ │ + Specifies the rate at which
│ │ │ │ │ + NOTIFY requests are sent
│ │ │ │ │ +_s_t_a_r_t_u_p_-_n_o_t_i_f_y_-_r_a_t_e when the name server is transfer, zone
│ │ │ │ │ + first starting, or when new
│ │ │ │ │ + zones have been added.
│ │ │ │ │ + Specifies the communication
│ │ │ │ │ + channels to be used by
│ │ │ │ │ +_s_t_a_t_i_s_t_i_c_s_-_c_h_a_n_n_e_l_s system administrators to logging
│ │ │ │ │ + access statistics
│ │ │ │ │ + information on the name
│ │ │ │ │ + server.
│ │ │ │ │ + Specifies the pathname of
│ │ │ │ │ +_s_t_a_t_i_s_t_i_c_s_-_f_i_l_e the file where the server logging, server
│ │ │ │ │ + appends statistics, when
│ │ │ │ │ + using _r_n_d_c_ _s_t_a_t_s.
│ │ │ │ │ + Directs the logging channel
│ │ │ │ │ +_s_t_d_e_r_r output to the server's logging
│ │ │ │ │ + standard error stream.
│ │ │ │ │ + Specifies the maximum number
│ │ │ │ │ +_s_t_r_e_a_m_s_-_p_e_r_-_c_o_n_n_e_c_t_i_o_n of concurrent HTTP/2 streams query, server
│ │ │ │ │ + over an HTTP/2 connection.
│ │ │ │ │ + Defines trailing bits for
│ │ │ │ │ +_s_u_f_f_i_x mapped IPv4 address bits in query
│ │ │ │ │ + _d_n_s_6_4.
│ │ │ │ │ + Enables support for _RR_FF_CC
│ │ │ │ │ +_s_y_n_t_h_-_f_r_o_m_-_d_n_s_s_e_c _88_11_99_88, Aggressive Use of dnssec
│ │ │ │ │ + DNSSEC-Validated Cache.
│ │ │ │ │ +_s_y_s_l_o_g Directs the logging channel logging
│ │ │ │ │ + to the system log.
│ │ │ │ │ + Sets the timeout value (in
│ │ │ │ │ + milliseconds) that the
│ │ │ │ │ +_t_c_p_-_a_d_v_e_r_t_i_s_e_d_-_t_i_m_e_o_u_t server sends in responses query
│ │ │ │ │ + containing the EDNS TCP
│ │ │ │ │ + keepalive option.
│ │ │ │ │ + Specifies the maximum number
│ │ │ │ │ +_t_c_p_-_c_l_i_e_n_t_s of simultaneous client TCP server
│ │ │ │ │ + connections accepted by the
│ │ │ │ │ + server.
│ │ │ │ │ + Sets the amount of time (in
│ │ │ │ │ + milliseconds) that the
│ │ │ │ │ + server waits on an idle TCP
│ │ │ │ │ +_t_c_p_-_i_d_l_e_-_t_i_m_e_o_u_t connection before closing query
│ │ │ │ │ + it, if the EDNS TCP
│ │ │ │ │ + keepalive option is not in
│ │ │ │ │ + use.
│ │ │ │ │ + Sets the amount of time (in
│ │ │ │ │ + milliseconds) that the
│ │ │ │ │ +_t_c_p_-_i_n_i_t_i_a_l_-_t_i_m_e_o_u_t server waits on a new TCP query, server
│ │ │ │ │ + connection for the first
│ │ │ │ │ + message from the client.
│ │ │ │ │ +_t_c_p_-_k_e_e_p_a_l_i_v_e Adds EDNS TCP keepalive to server
│ │ │ │ │ + messages sent over TCP.
│ │ │ │ │ + Sets the amount of time (in
│ │ │ │ │ + milliseconds) that the
│ │ │ │ │ +_t_c_p_-_k_e_e_p_a_l_i_v_e_-_t_i_m_e_o_u_t server waits on an idle TCP query
│ │ │ │ │ + connection before closing
│ │ │ │ │ + it, if the EDNS TCP
│ │ │ │ │ + keepalive option is in use.
│ │ │ │ │ +_t_c_p_-_l_i_s_t_e_n_-_q_u_e_u_e Sets the listen-queue depth. server
│ │ │ │ │ +_t_c_p_-_o_n_l_y Sets the transport protocol server
│ │ │ │ │ + to TCP.
│ │ │ │ │ + Sets the operating system's
│ │ │ │ │ +_t_c_p_-_r_e_c_e_i_v_e_-_b_u_f_f_e_r receive buffer size for TCP server
│ │ │ │ │ + sockets.
│ │ │ │ │ + Sets the operating system's
│ │ │ │ │ +_t_c_p_-_s_e_n_d_-_b_u_f_f_e_r send buffer size for TCP server
│ │ │ │ │ + sockets.
│ │ │ │ │ + Sets the domain appended to
│ │ │ │ │ +_t_k_e_y_-_d_o_m_a_i_n the names of all shared keys security
│ │ │ │ │ + generated with TKEY.
│ │ │ │ │ + Sets the security credential
│ │ │ │ │ +_t_k_e_y_-_g_s_s_a_p_i_-_c_r_e_d_e_n_t_i_a_l for authentication keys security
│ │ │ │ │ + requested by the GSS-TSIG
│ │ │ │ │ + protocol.
│ │ │ │ │ +_t_k_e_y_-_g_s_s_a_p_i_-_k_e_y_t_a_b Sets the KRB5 keytab file to security
│ │ │ │ │ + use for GSS-TSIG updates.
│ │ │ │ │ +_t_l_s Configures a TLS connection. security
│ │ │ │ │ + Specifies the TCP port
│ │ │ │ │ +_t_l_s_-_p_o_r_t number the server uses to query, server
│ │ │ │ │ + receive and send DNS-over-
│ │ │ │ │ + TLS protocol traffic.
│ │ │ │ │ + Controls whether multiple
│ │ │ │ │ +_t_r_a_n_s_f_e_r_-_f_o_r_m_a_t records can be packed into a transfer
│ │ │ │ │ + message during zone
│ │ │ │ │ + transfers.
│ │ │ │ │ + Limits the uncompressed size
│ │ │ │ │ +_t_r_a_n_s_f_e_r_-_m_e_s_s_a_g_e_-_s_i_z_e of DNS messages used in zone transfer
│ │ │ │ │ + transfers over TCP.
│ │ │ │ │ + Defines which local IPv4
│ │ │ │ │ + address(es) are bound to TCP
│ │ │ │ │ +_t_r_a_n_s_f_e_r_-_s_o_u_r_c_e connections used to fetch transfer
│ │ │ │ │ + zones transferred inbound by
│ │ │ │ │ + the server.
│ │ │ │ │ + Defines which local IPv6
│ │ │ │ │ + address(es) are bound to TCP
│ │ │ │ │ +_t_r_a_n_s_f_e_r_-_s_o_u_r_c_e_-_v_6 connections used to fetch transfer
│ │ │ │ │ + zones transferred inbound by
│ │ │ │ │ + the server.
│ │ │ │ │ + Limits the number of
│ │ │ │ │ +_t_r_a_n_s_f_e_r_s concurrent inbound zone server
│ │ │ │ │ + transfers from a server.
│ │ │ │ │ + Limits the number of
│ │ │ │ │ +_t_r_a_n_s_f_e_r_s_-_i_n concurrent inbound zone transfer
│ │ │ │ │ + transfers.
│ │ │ │ │ + Limits the number of
│ │ │ │ │ +_t_r_a_n_s_f_e_r_s_-_o_u_t concurrent outbound zone transfer
│ │ │ │ │ + transfers.
│ │ │ │ │ + Limits the number of
│ │ │ │ │ +_t_r_a_n_s_f_e_r_s_-_p_e_r_-_n_s concurrent inbound zone transfer
│ │ │ │ │ + transfers from a remote
│ │ │ │ │ + server.
│ │ │ │ │ + Instructs _n_a_m_e_d to send
│ │ │ │ │ + specially formed queries
│ │ │ │ │ +_t_r_u_s_t_-_a_n_c_h_o_r_-_t_e_l_e_m_e_t_r_y once per day to domains for dnssec
│ │ │ │ │ + which trust anchors have
│ │ │ │ │ + been configured.
│ │ │ │ │ +_t_r_u_s_t_-_a_n_c_h_o_r_s Defines _D_N_S_S_E_C trust dnssec
│ │ │ │ │ + anchors.
│ │ │ │ │ +_t_r_u_s_t_e_d_-_k_e_y_s deprecated
│ │ │ │ │ + Specifies that BIND 9 should
│ │ │ │ │ +_t_r_y_-_t_c_p_-_r_e_f_r_e_s_h attempt to refresh a zone transfer
│ │ │ │ │ + using TCP if UDP queries
│ │ │ │ │ + fail.
│ │ │ │ │ +_t_y_p_e Specifies the kind of zone zone
│ │ │ │ │ + in a given configuration.
│ │ │ │ │ + Contains forwarding
│ │ │ │ │ +_t_y_p_e_ _f_o_r_w_a_r_d statements that apply to zone
│ │ │ │ │ + queries within a given
│ │ │ │ │ + domain.
│ │ │ │ │ + Contains the initial set of
│ │ │ │ │ +_t_y_p_e_ _h_i_n_t root name servers to be used zone
│ │ │ │ │ + at BIND 9 startup.
│ │ │ │ │ + Contains a DNSSEC-validated
│ │ │ │ │ +_t_y_p_e_ _m_i_r_r_o_r duplicate of the main data zone
│ │ │ │ │ + for a zone.
│ │ │ │ │ +_t_y_p_e_ _p_r_i_m_a_r_y Contains the main copy of zone
│ │ │ │ │ + the data for a zone.
│ │ │ │ │ + Contains information to
│ │ │ │ │ +_t_y_p_e_ _r_e_d_i_r_e_c_t answer queries when normal zone
│ │ │ │ │ + resolution would return
│ │ │ │ │ + NXDOMAIN.
│ │ │ │ │ + Contains a duplicate of the
│ │ │ │ │ +_t_y_p_e_ _s_e_c_o_n_d_a_r_y data for a zone that has zone
│ │ │ │ │ + been transferred from a
│ │ │ │ │ + primary server.
│ │ │ │ │ + Contains a duplicate of the
│ │ │ │ │ + NS records of a primary
│ │ │ │ │ +_t_y_p_e_ _s_t_a_t_i_c_-_s_t_u_b zone, but statically zone
│ │ │ │ │ + configured rather than
│ │ │ │ │ + transferred from a primary
│ │ │ │ │ + server.
│ │ │ │ │ + Contains a duplicate of the
│ │ │ │ │ +_t_y_p_e_ _s_t_u_b NS records of a primary zone
│ │ │ │ │ + zone.
│ │ │ │ │ + Sets the operating system's
│ │ │ │ │ +_u_d_p_-_r_e_c_e_i_v_e_-_b_u_f_f_e_r receive buffer size for UDP server
│ │ │ │ │ + sockets.
│ │ │ │ │ + Sets the operating system's
│ │ │ │ │ +_u_d_p_-_s_e_n_d_-_b_u_f_f_e_r send buffer size for UDP server
│ │ │ │ │ + sockets.
│ │ │ │ │ +_u_n_i_x Specifies a Unix domain obsolete
│ │ │ │ │ + socket as a control channel.
│ │ │ │ │ +_u_p_d_a_t_e_-_c_h_e_c_k_-_k_s_k obsolete
│ │ │ │ │ + Sets fine-grained rules to
│ │ │ │ │ + allow or deny dynamic
│ │ │ │ │ +_u_p_d_a_t_e_-_p_o_l_i_c_y updates (DDNS), based on transfer
│ │ │ │ │ + requester identity, updated
│ │ │ │ │ + content, etc.
│ │ │ │ │ + Specifies the maximum number
│ │ │ │ │ +_u_p_d_a_t_e_-_q_u_o_t_a of concurrent DNS UPDATE server
│ │ │ │ │ + messages that can be
│ │ │ │ │ + processed by the server.
│ │ │ │ │ + Specifies a list of ports
│ │ │ │ │ +_u_s_e_-_v_4_-_u_d_p_-_p_o_r_t_s that are valid sources for deprecated
│ │ │ │ │ + UDP/IPv4 messages.
│ │ │ │ │ + Specifies a list of ports
│ │ │ │ │ +_u_s_e_-_v_6_-_u_d_p_-_p_o_r_t_s that are valid sources for deprecated
│ │ │ │ │ + UDP/IPv6 messages.
│ │ │ │ │ + Indicates the number of
│ │ │ │ │ +_v_6_-_b_i_a_s milliseconds of preference query, server
│ │ │ │ │ + to give to IPv6 name
│ │ │ │ │ + servers.
│ │ │ │ │ + Specifies a list of domain
│ │ │ │ │ +_v_a_l_i_d_a_t_e_-_e_x_c_e_p_t names at and beneath which dnssec
│ │ │ │ │ + DNSSEC validation should not
│ │ │ │ │ + be performed.
│ │ │ │ │ + Specifies the version number
│ │ │ │ │ +_v_e_r_s_i_o_n of the server to return in server
│ │ │ │ │ + response to a version.bind
│ │ │ │ │ + query.
│ │ │ │ │ + Allows a name server to
│ │ │ │ │ +_v_i_e_w answer a DNS query view
│ │ │ │ │ + differently depending on who
│ │ │ │ │ + is asking.
│ │ │ │ │ + Specifies the length of time
│ │ │ │ │ +_w_i_n_d_o_w during which responses are query
│ │ │ │ │ + tracked.
│ │ │ │ │ + Specifies whether to set the
│ │ │ │ │ + time to live (TTL) of the
│ │ │ │ │ +_z_e_r_o_-_n_o_-_s_o_a_-_t_t_l SOA record to zero, when zone, query, server
│ │ │ │ │ + returning authoritative
│ │ │ │ │ + negative responses to SOA
│ │ │ │ │ + queries.
│ │ │ │ │ + Sets the time to live (TTL)
│ │ │ │ │ +_z_e_r_o_-_n_o_-_s_o_a_-_t_t_l_-_c_a_c_h_e to zero when caching a zone, query, server
│ │ │ │ │ + negative response to an SOA
│ │ │ │ │ + query.
│ │ │ │ │ +_z_o_n_e Specifies the zone in a BIND zone
│ │ │ │ │ + 9 configuration.
│ │ │ │ │ + Sets the propagation delay
│ │ │ │ │ + from the time a zone is
│ │ │ │ │ +_z_o_n_e_-_p_r_o_p_a_g_a_t_i_o_n_-_d_e_l_a_y first updated to when the zone, dnssec
│ │ │ │ │ + new version of the zone is
│ │ │ │ │ + served by all secondary
│ │ │ │ │ + servers.
│ │ │ │ │ + Controls the level of
│ │ │ │ │ +_z_o_n_e_-_s_t_a_t_i_s_t_i_c_s statistics gathered for all zone, logging
│ │ │ │ │ + zones.
│ │ │ │ │ ********** 88..44.. SSttaatteemmeennttss bbyy TTaagg_? **********
│ │ │ │ │ These tables group the various statements permissible in named.conf by their
│ │ │ │ │ corresponding tag.
│ │ │ │ │ ******** 88..44..11.. DDNNSSSSEECC TTaagg SSttaatteemmeennttss_? ********
│ │ │ │ │ SSttaatteemmeenntt DDeessccrriippttiioonn
│ │ │ │ │ _b_i_n_d_k_e_y_s_-_f_i_l_e Specifies the pathname of a file to override the
│ │ │ │ │ built-in trusted keys provided by _n_a_m_e_d.