Grammar: disable-ds-digests <string> { <string>; ... }; // may occur multiple times
Blocks: options, view
│ │ │ │ -Tags: zone, dnssec
│ │ │ │ +Tags: dnssec, zone
│ │ │ │Disables DS digest types from a specified zone.
│ │ │ │ │ │ │ │This disables the specified DS digest types at and below the specified
│ │ │ │ name. Multiple disable-ds-digests statements are allowed. Only
│ │ │ │ the best-match disable-ds-digests clause is used to
│ │ │ │ determine the digest types.
If all supported digest types are disabled, the zones covered by │ │ │ │ @@ -2708,15 +2708,15 @@ │ │ │ │
Grammar: zone-statistics ( full | terse | none | <boolean> );
Blocks: options, view, zone (mirror, primary, redirect, secondary, static-stub, stub)
│ │ │ │ -Tags: logging, zone
│ │ │ │ +Tags: zone, logging
│ │ │ │Controls the level of statistics gathered for all zones.
│ │ │ │ │ │ │ │If full, the server collects statistical data on all zones,
│ │ │ │ unless specifically turned off on a per-zone basis by specifying
│ │ │ │ zone-statistics terse or zone-statistics none in the zone
│ │ │ │ statement. The statistical data includes, for example, DNSSEC signing
│ │ │ │ operations and the number of authoritative answers per query type. The
│ │ │ │ @@ -3586,15 +3586,15 @@
│ │ │ │
Grammar: check-dup-records ( fail | warn | ignore );
Blocks: options, view, zone (primary)
│ │ │ │ -Tags: query, dnssec
│ │ │ │ +Tags: dnssec, query
│ │ │ │Checks primary zones for records that are treated as different by DNSSEC but are semantically equal in plain DNS.
│ │ │ │ │ │ │ │This checks primary zones for records that are treated as different by
│ │ │ │ DNSSEC but are semantically equal in plain DNS. The default is to
│ │ │ │ warn. Other possible values are fail and ignore.
Grammar: notify-rate <integer>;
Blocks: options
│ │ │ │ -Tags: transfer, zone
│ │ │ │ +Tags: zone, transfer
│ │ │ │Specifies the rate at which NOTIFY requests are sent during normal zone maintenance operations.
│ │ │ │ │ │ │ │This specifies the rate at which NOTIFY requests are sent during normal zone │ │ │ │ maintenance operations. (NOTIFY requests due to initial zone loading │ │ │ │ are subject to a separate rate limit; see below.) The default is 20 │ │ │ │ per second. The lowest possible rate is one per second; when set to │ │ │ │ zero, it is silently raised to one.
│ │ │ │Grammar: startup-notify-rate <integer>;
Blocks: options
│ │ │ │ -Tags: transfer, zone
│ │ │ │ +Tags: zone, transfer
│ │ │ │Specifies the rate at which NOTIFY requests are sent when the name server is first starting, or when new zones have been added.
│ │ │ │ │ │ │ │This is the rate at which NOTIFY requests are sent when the name server │ │ │ │ is first starting up, or when zones have been newly added to the │ │ │ │ name server. The default is 20 per second. The lowest possible rate is │ │ │ │ one per second; when set to zero, it is silently raised to one.
│ │ │ │Grammar: notify-delay <integer>;
Blocks: options, view, zone (mirror, primary, secondary)
│ │ │ │ -Tags: transfer, zone
│ │ │ │ +Tags: zone, transfer
│ │ │ │Sets the delay (in seconds) between sending sets of NOTIFY messages for a zone.
│ │ │ │ │ │ │ │This sets the delay, in seconds, between sending sets of NOTIFY messages │ │ │ │ for a zone. Whenever a NOTIFY message is sent for a zone, a timer will │ │ │ │ be set for this duration. If the zone is updated again before the timer │ │ │ │ expires, the NOTIFY for that update will be postponed. The default is 5 │ │ │ │ seconds.
│ │ │ │ @@ -5930,15 +5930,15 @@ │ │ │ │Grammar: max-rsa-exponent-size <integer>;
Blocks: options
│ │ │ │ -Tags: query, dnssec
│ │ │ │ +Tags: dnssec, query
│ │ │ │Sets the maximum RSA exponent size (in bits) when validating.
│ │ │ │ │ │ │ │This sets the maximum RSA exponent size, in bits, that is accepted when │ │ │ │ validating. Valid values are 35 to 4096 bits. The default, zero, is │ │ │ │ also accepted and is equivalent to 4096.
│ │ │ │Grammar: zone-propagation-delay <duration>;
Blocks: dnssec-policy
│ │ │ │ -Tags: zone, dnssec
│ │ │ │ +Tags: dnssec, zone
│ │ │ │Sets the propagation delay from the time a zone is first updated to when the new version of the zone is served by all secondary servers.
│ │ │ │ │ │ │ ││ │ │ ││ │ │ │ @@ -8276,15 +8276,15 @@ │ │ │ │This is the expected propagation delay from the time when a zone is │ │ │ │ first updated to the time when the new version of the zone is served │ │ │ │ by all secondary servers. The default is
│ │ │ │PT5M(5 minutes).
Grammar: parent-propagation-delay <duration>;
Blocks: dnssec-policy
│ │ │ │ -Tags: zone, dnssec
│ │ │ │ +Tags: dnssec, zone
│ │ │ │Sets the propagation delay from the time the parent zone is updated to when the new version is served by all of the parent zone’s name servers.
│ │ │ │ │ │ │ ││ │ │ ││ │ │ │ @@ -9506,15 +9506,15 @@ │ │ │ │ in-view <string>; │ │ │ │ }; │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │This is the expected propagation delay from the time when the parent │ │ │ │ zone is updated to the time when the new version is served by all of │ │ │ │ the parent zone’s name servers. The default is
│ │ │ │PT1H(1 hour).
Grammar zone (in-view): in-view <string>;
Blocks: zone, zone (in-view), view.zone
│ │ │ │ -Tags: view, zone
│ │ │ │ +Tags: zone, view
│ │ │ │Specifies the view in which a given zone is defined.
│ │ │ │ │ │ │ │When using multiple views, a type primary or type secondary zone configured
│ │ │ │ in one view can be referenced in a subsequent view. This allows both views
│ │ │ │ to use the same zone without the overhead of loading it more than once. This
│ │ │ │ is configured using a zone statement, with an in-view option
│ │ │ │ specifying the view in which the zone is defined. A zone statement
│ │ │ │ @@ -9771,15 +9771,15 @@
│ │ │ │
Grammar: inline-signing <boolean>;
Blocks: dnssec-policy, zone (primary, secondary)
│ │ │ │ -Tags: zone, dnssec
│ │ │ │ +Tags: dnssec, zone
│ │ │ │Specifies whether BIND 9 maintains a separate signed version of a zone.
│ │ │ │ │ │ │ │The use of inline signing is determined by the dnssec-policy for
│ │ │ │ the zone. If inline-signing is explicitly set to yes or no
│ │ │ │ in zone, then it overrides any value from dnssec-policy.
Defines a stream of data that can be independently logged.
│ │ │ │logging
Checks primary zones for records that are treated as different by DNSSEC but are semantically equal in plain DNS.
│ │ │ │query, dnssec
dnssec, query
Performs post-load zone integrity checks on primary zones.
│ │ │ │zone
Disables DNSSEC algorithms from a specified zone.
│ │ │ │dnssec
Disables DS digest types from a specified zone.
│ │ │ │zone, dnssec
dnssec, zone
Disables individual empty zones.
│ │ │ │zone, server
Specifies the TCP port number the server uses to receive and send DNS-over-HTTPS protocol traffic.
│ │ │ │query, server
Specifies the view in which a given zone is defined.
│ │ │ │view, zone
zone, view
Specifies a TCP socket as a control channel.
│ │ │ │server
Specifies whether BIND 9 maintains a separate signed version of a zone.
│ │ │ │zone, dnssec
dnssec, zone
Sets the interval at which the server scans the network interface list.
│ │ │ │server
Limits the zone refresh retry interval to no less often than the specified value, in seconds.
│ │ │ │transfer
Sets the maximum RSA exponent size (in bits) when validating.
│ │ │ │query, dnssec
dnssec, query
Specifies the maximum time that the server retains records past their normal expiry, to return them as stale records.
│ │ │ │server
Controls whether NOTIFY messages are sent on zone changes.
transfer
Sets the delay (in seconds) between sending sets of NOTIFY messages for a zone.
│ │ │ │transfer, zone
zone, transfer
Specifies the rate at which NOTIFY requests are sent during normal zone maintenance operations.
│ │ │ │transfer, zone
zone, transfer
Defines the IPv4 address (and optional port) to be used for outgoing NOTIFY messages.
transfer
Sets the time to live (TTL) of the DS RRset used by the parent zone.
│ │ │ │dnssec
Sets the propagation delay from the time the parent zone is updated to when the new version is served by all of the parent zone's name servers.
│ │ │ │zone, dnssec
dnssec, zone
Defines a list of delegation agents to be used by primary and secondary zones.
│ │ │ │zone
Sets the time window for the return of "stale" cached answers before the next attempt to contact, if the name servers for a given zone are not responding.
│ │ │ │query, server
Specifies the rate at which NOTIFY requests are sent when the name server is first starting, or when new zones have been added.
│ │ │ │transfer, zone
zone, transfer
Specifies the communication channels to be used by system administrators to access statistics information on the name server.
│ │ │ │logging
Specifies the zone in a BIND 9 configuration.
│ │ │ │zone
Sets the propagation delay from the time a zone is first updated to when the new version of the zone is served by all secondary servers.
│ │ │ │zone, dnssec
dnssec, zone
Controls the level of statistics gathered for all zones.
│ │ │ │logging, zone
zone, logging
These tables group the various statements permissible in named.conf by
│ │ │ │ ├── html2text {}
│ │ │ │ │ @@ -2505,15 +2505,15 @@
│ │ │ │ │ certificate for a
│ │ │ │ │ connection.
│ │ │ │ │ Defines a stream of data
│ │ │ │ │ _c_h_a_n_n_e_l that can be independently logging
│ │ │ │ │ logged.
│ │ │ │ │ Checks primary zones for
│ │ │ │ │ records that are treated as
│ │ │ │ │ -_c_h_e_c_k_-_d_u_p_-_r_e_c_o_r_d_s different by DNSSEC but are query, dnssec
│ │ │ │ │ +_c_h_e_c_k_-_d_u_p_-_r_e_c_o_r_d_s different by DNSSEC but are dnssec, query
│ │ │ │ │ semantically equal in plain
│ │ │ │ │ DNS.
│ │ │ │ │ Performs post-load zone
│ │ │ │ │ _c_h_e_c_k_-_i_n_t_e_g_r_i_t_y integrity checks on primary zone
│ │ │ │ │ zones.
│ │ │ │ │ Checks whether an MX record
│ │ │ │ │ _c_h_e_c_k_-_m_x appears to refer to an IP zone
│ │ │ │ │ @@ -2587,15 +2587,15 @@
│ │ │ │ │ every _h_e_a_r_t_b_e_a_t_-_i_n_t_e_r_v_a_l,
│ │ │ │ │ ideally during a single
│ │ │ │ │ call.
│ │ │ │ │ _d_i_r_e_c_t_o_r_y Sets the server's working server
│ │ │ │ │ directory.
│ │ │ │ │ _d_i_s_a_b_l_e_-_a_l_g_o_r_i_t_h_m_s Disables DNSSEC algorithms dnssec
│ │ │ │ │ from a specified zone.
│ │ │ │ │ -_d_i_s_a_b_l_e_-_d_s_-_d_i_g_e_s_t_s Disables DS digest types zone, dnssec
│ │ │ │ │ +_d_i_s_a_b_l_e_-_d_s_-_d_i_g_e_s_t_s Disables DS digest types dnssec, zone
│ │ │ │ │ from a specified zone.
│ │ │ │ │ _d_i_s_a_b_l_e_-_e_m_p_t_y_-_z_o_n_e Disables individual empty zone, server
│ │ │ │ │ zones.
│ │ │ │ │ Configures a Dynamically
│ │ │ │ │ _d_l_z Loadable Zone (DLZ) database zone
│ │ │ │ │ in _n_a_m_e_d_._c_o_n_f.
│ │ │ │ │ Instructs _n_a_m_e_d to return
│ │ │ │ │ @@ -2767,20 +2767,20 @@
│ │ │ │ │ Limits the number of active
│ │ │ │ │ _h_t_t_p_-_s_t_r_e_a_m_s_-_p_e_r_-_c_o_n_n_e_c_t_i_o_n concurrent HTTP/2 streams on server
│ │ │ │ │ a per-connection basis.
│ │ │ │ │ Specifies the TCP port
│ │ │ │ │ _h_t_t_p_s_-_p_o_r_t number the server uses to query, server
│ │ │ │ │ receive and send DNS-over-
│ │ │ │ │ HTTPS protocol traffic.
│ │ │ │ │ -_i_n_-_v_i_e_w Specifies the view in which view, zone
│ │ │ │ │ +_i_n_-_v_i_e_w Specifies the view in which zone, view
│ │ │ │ │ a given zone is defined.
│ │ │ │ │ _i_n_e_t Specifies a TCP socket as a server
│ │ │ │ │ control channel.
│ │ │ │ │ Specifies whether BIND 9
│ │ │ │ │ -_i_n_l_i_n_e_-_s_i_g_n_i_n_g maintains a separate signed zone, dnssec
│ │ │ │ │ +_i_n_l_i_n_e_-_s_i_g_n_i_n_g maintains a separate signed dnssec, zone
│ │ │ │ │ version of a zone.
│ │ │ │ │ Sets the interval at which
│ │ │ │ │ _i_n_t_e_r_f_a_c_e_-_i_n_t_e_r_v_a_l the server scans the network server
│ │ │ │ │ interface list.
│ │ │ │ │ _i_p_v_4_-_p_r_e_f_i_x_-_l_e_n_g_t_h Specifies the prefix lengths server
│ │ │ │ │ of IPv4 address blocks.
│ │ │ │ │ Specifies the contact for
│ │ │ │ │ @@ -2900,15 +2900,15 @@
│ │ │ │ │ than the specified value, in
│ │ │ │ │ seconds.
│ │ │ │ │ Limits the zone refresh
│ │ │ │ │ _m_a_x_-_r_e_t_r_y_-_t_i_m_e retry interval to no less transfer
│ │ │ │ │ often than the specified
│ │ │ │ │ value, in seconds.
│ │ │ │ │ Sets the maximum RSA
│ │ │ │ │ -_m_a_x_-_r_s_a_-_e_x_p_o_n_e_n_t_-_s_i_z_e exponent size (in bits) when query, dnssec
│ │ │ │ │ +_m_a_x_-_r_s_a_-_e_x_p_o_n_e_n_t_-_s_i_z_e exponent size (in bits) when dnssec, query
│ │ │ │ │ validating.
│ │ │ │ │ Specifies the maximum time
│ │ │ │ │ that the server retains
│ │ │ │ │ _m_a_x_-_s_t_a_l_e_-_t_t_l records past their normal server
│ │ │ │ │ expiry, to return them as
│ │ │ │ │ stale records.
│ │ │ │ │ Sets the maximum size of the
│ │ │ │ │ @@ -3005,18 +3005,18 @@
│ │ │ │ │ Limits the number of empty
│ │ │ │ │ _n_o_d_a_t_a_-_p_e_r_-_s_e_c_o_n_d (NODATA) responses for a query
│ │ │ │ │ valid domain name.
│ │ │ │ │ Controls whether NOTIFY
│ │ │ │ │ _n_o_t_i_f_y messages are sent on zone transfer
│ │ │ │ │ changes.
│ │ │ │ │ Sets the delay (in seconds)
│ │ │ │ │ -_n_o_t_i_f_y_-_d_e_l_a_y between sending sets of transfer, zone
│ │ │ │ │ +_n_o_t_i_f_y_-_d_e_l_a_y between sending sets of zone, transfer
│ │ │ │ │ NOTIFY messages for a zone.
│ │ │ │ │ Specifies the rate at which
│ │ │ │ │ -_n_o_t_i_f_y_-_r_a_t_e NOTIFY requests are sent transfer, zone
│ │ │ │ │ +_n_o_t_i_f_y_-_r_a_t_e NOTIFY requests are sent zone, transfer
│ │ │ │ │ during normal zone
│ │ │ │ │ maintenance operations.
│ │ │ │ │ Defines the IPv4 address
│ │ │ │ │ _n_o_t_i_f_y_-_s_o_u_r_c_e (and optional port) to be transfer
│ │ │ │ │ used for outgoing NOTIFY
│ │ │ │ │ messages.
│ │ │ │ │ Defines the IPv6 address
│ │ │ │ │ @@ -3054,15 +3054,15 @@
│ │ │ │ │ _p_a_d_d_i_n_g outgoing messages to server
│ │ │ │ │ increase the packet size.
│ │ │ │ │ Sets the time to live (TTL)
│ │ │ │ │ _p_a_r_e_n_t_-_d_s_-_t_t_l of the DS RRset used by the dnssec
│ │ │ │ │ parent zone.
│ │ │ │ │ Sets the propagation delay
│ │ │ │ │ from the time the parent
│ │ │ │ │ -_p_a_r_e_n_t_-_p_r_o_p_a_g_a_t_i_o_n_-_d_e_l_a_y zone is updated to when the zone, dnssec
│ │ │ │ │ +_p_a_r_e_n_t_-_p_r_o_p_a_g_a_t_i_o_n_-_d_e_l_a_y zone is updated to when the dnssec, zone
│ │ │ │ │ new version is served by all
│ │ │ │ │ of the parent zone's name
│ │ │ │ │ servers.
│ │ │ │ │ Defines a list of delegation
│ │ │ │ │ _p_a_r_e_n_t_a_l_-_a_g_e_n_t_s agents to be used by primary zone
│ │ │ │ │ and secondary zones.
│ │ │ │ │ Specifies which local IPv4
│ │ │ │ │ @@ -3312,15 +3312,15 @@
│ │ │ │ │ return of "stale" cached
│ │ │ │ │ _s_t_a_l_e_-_r_e_f_r_e_s_h_-_t_i_m_e answers before the next query, server
│ │ │ │ │ attempt to contact, if the
│ │ │ │ │ name servers for a given
│ │ │ │ │ zone are not responding.
│ │ │ │ │ Specifies the rate at which
│ │ │ │ │ NOTIFY requests are sent
│ │ │ │ │ -_s_t_a_r_t_u_p_-_n_o_t_i_f_y_-_r_a_t_e when the name server is transfer, zone
│ │ │ │ │ +_s_t_a_r_t_u_p_-_n_o_t_i_f_y_-_r_a_t_e when the name server is zone, transfer
│ │ │ │ │ first starting, or when new
│ │ │ │ │ zones have been added.
│ │ │ │ │ Specifies the communication
│ │ │ │ │ channels to be used by
│ │ │ │ │ _s_t_a_t_i_s_t_i_c_s_-_c_h_a_n_n_e_l_s system administrators to logging
│ │ │ │ │ access statistics
│ │ │ │ │ information on the name
│ │ │ │ │ @@ -3521,20 +3521,20 @@
│ │ │ │ │ _z_e_r_o_-_n_o_-_s_o_a_-_t_t_l_-_c_a_c_h_e to zero when caching a zone, query, server
│ │ │ │ │ negative response to an SOA
│ │ │ │ │ query.
│ │ │ │ │ _z_o_n_e Specifies the zone in a BIND zone
│ │ │ │ │ 9 configuration.
│ │ │ │ │ Sets the propagation delay
│ │ │ │ │ from the time a zone is
│ │ │ │ │ -_z_o_n_e_-_p_r_o_p_a_g_a_t_i_o_n_-_d_e_l_a_y first updated to when the zone, dnssec
│ │ │ │ │ +_z_o_n_e_-_p_r_o_p_a_g_a_t_i_o_n_-_d_e_l_a_y first updated to when the dnssec, zone
│ │ │ │ │ new version of the zone is
│ │ │ │ │ served by all secondary
│ │ │ │ │ servers.
│ │ │ │ │ Controls the level of
│ │ │ │ │ -_z_o_n_e_-_s_t_a_t_i_s_t_i_c_s statistics gathered for all logging, zone
│ │ │ │ │ +_z_o_n_e_-_s_t_a_t_i_s_t_i_c_s statistics gathered for all zone, logging
│ │ │ │ │ zones.
│ │ │ │ │ ********** 88..44.. SSttaatteemmeennttss bbyy TTaagg_? **********
│ │ │ │ │ These tables group the various statements permissible in named.conf by their
│ │ │ │ │ corresponding tag.
│ │ │ │ │ ******** 88..44..11.. DDNNSSSSEECC TTaagg SSttaatteemmeennttss_? ********
│ │ │ │ │ SSttaatteemmeenntt DDeessccrriippttiioonn
│ │ │ │ │ _b_i_n_d_k_e_y_s_-_f_i_l_e Specifies the pathname of a file to override the
│ │ ├── xz --list
│ │ │ @@ -1,13 +1,13 @@
│ │ │ Streams: 1
│ │ │ Blocks: 1
│ │ │ - Compressed size: 3405.1 KiB (3486776 B)
│ │ │ + Compressed size: 3405.1 KiB (3486772 B)
│ │ │ Uncompressed size: 7310.0 KiB (7485440 B)
│ │ │ Ratio: 0.466
│ │ │ Check: CRC64
│ │ │ Stream Padding: 0 B
│ │ │ Streams:
│ │ │ Stream Blocks CompOffset UncompOffset CompSize UncompSize Ratio Check Padding
│ │ │ - 1 1 0 0 3486776 7485440 0.466 CRC64 0
│ │ │ + 1 1 0 0 3486772 7485440 0.466 CRC64 0
│ │ │ Blocks:
│ │ │ Stream Block CompOffset UncompOffset TotalSize UncompSize Ratio Check
│ │ │ - 1 1 12 0 3486736 7485440 0.466 CRC64
│ │ │ + 1 1 12 0 3486732 7485440 0.466 CRC64