Nevar pievienot vairāk kā 25 tēmas Tēmai ir jāsākas ar burtu vai ciparu, tā var saturēt domu zīmes ('-') un var būt līdz 35 simboliem gara.

pdns.conf 13KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518
  1. #################################
  2. # allow-axfr-ips Allow zonetransfers only to these subnets
  3. #
  4. # allow-axfr-ips=
  5. #################################
  6. # allow-dnsupdate-from A global setting to allow DNS updates from these IP ranges.
  7. #
  8. # allow-dnsupdate-from=127.0.0.0/8,::1
  9. #################################
  10. # allow-recursion List of subnets that are allowed to recurse
  11. #
  12. allow-recursion=127.0.0.1,172.0.0.0/8,192.168.0.0/16
  13. #################################
  14. # also-notify When notifying a domain, also notify these nameservers
  15. #
  16. # also-notify=
  17. #################################
  18. # any-to-tcp Answer ANY queries with tc=1, shunting to TCP
  19. #
  20. # any-to-tcp=no
  21. #################################
  22. # cache-ttl Seconds to store packets in the PacketCache
  23. #
  24. # cache-ttl=20
  25. #################################
  26. # carbon-interval Number of seconds between carbon (graphite) updates
  27. #
  28. # carbon-interval=30
  29. #################################
  30. # carbon-ourname If set, overrides our reported hostname for carbon stats
  31. #
  32. # carbon-ourname=
  33. #################################
  34. # carbon-server If set, send metrics in carbon (graphite) format to this server
  35. #
  36. # carbon-server=
  37. #################################
  38. # chroot If set, chroot to this directory for more security
  39. #
  40. # chroot=
  41. #################################
  42. # config-dir Location of configuration directory (pdns.conf)
  43. #
  44. config-dir=/etc/powerdns
  45. #################################
  46. # config-name Name of this virtual configuration - will rename the binary image
  47. #
  48. # config-name=
  49. #################################
  50. # control-console Debugging switch - don't use
  51. #
  52. # control-console=no
  53. #################################
  54. # daemon Operate as a daemon
  55. #
  56. # daemon=yes
  57. #################################
  58. # default-ksk-algorithms Default KSK algorithms
  59. #
  60. # default-ksk-algorithms=rsasha256
  61. #################################
  62. # default-ksk-size Default KSK size (0 means default)
  63. #
  64. # default-ksk-size=0
  65. #################################
  66. # default-soa-mail mail address to insert in the SOA record if none set in the backend
  67. #
  68. # default-soa-mail=
  69. #################################
  70. # default-soa-name name to insert in the SOA record if none set in the backend
  71. #
  72. # default-soa-name=a.misconfigured.powerdns.server
  73. #################################
  74. # default-ttl Seconds a result is valid if not set otherwise
  75. #
  76. # default-ttl=3600
  77. #################################
  78. # default-zsk-algorithms Default ZSK algorithms
  79. #
  80. # default-zsk-algorithms=rsasha256
  81. #################################
  82. # default-zsk-size Default ZSK size (0 means default)
  83. #
  84. # default-zsk-size=0
  85. #################################
  86. # direct-dnskey Fetch DNSKEY RRs from backend during DNSKEY synthesis
  87. #
  88. # direct-dnskey=no
  89. #################################
  90. # disable-axfr Disable zonetransfers but do allow TCP queries
  91. #
  92. disable-axfr=no
  93. #################################
  94. # disable-axfr-rectify Disable the rectify step during an outgoing AXFR. Only required for regression testing.
  95. #
  96. # disable-axfr-rectify=no
  97. #################################
  98. # disable-tcp Do not listen to TCP queries
  99. #
  100. # disable-tcp=no
  101. #################################
  102. # distributor-threads Default number of Distributor (backend) threads to start
  103. #
  104. # distributor-threads=3
  105. #################################
  106. # do-ipv6-additional-processing Do AAAA additional processing
  107. #
  108. # do-ipv6-additional-processing=yes
  109. #################################
  110. # edns-subnet-processing If we should act on EDNS Subnet options
  111. #
  112. # edns-subnet-processing=no
  113. #################################
  114. # entropy-source If set, read entropy from this file
  115. #
  116. # entropy-source=/dev/urandom
  117. #################################
  118. # experimental-api-key REST API Static authentication key (required for API use)
  119. #
  120. # experimental-api-key=
  121. #################################
  122. # experimental-api-readonly If the JSON API should disallow data modification
  123. #
  124. # experimental-api-readonly=no
  125. #################################
  126. # experimental-dname-processing If we should support DNAME records
  127. #
  128. # experimental-dname-processing=no
  129. #################################
  130. # experimental-dnsupdate Enable/Disable DNS update (RFC2136) support. Default is no.
  131. #
  132. # experimental-dnsupdate=no
  133. #################################
  134. # experimental-json-interface If the webserver should serve JSON data
  135. #
  136. # experimental-json-interface=no
  137. #################################
  138. # experimental-logfile Filename of the log file for JSON parser
  139. #
  140. # experimental-logfile=/var/log/pdns.log
  141. #################################
  142. # forward-dnsupdate A global setting to allow DNS update packages that are for a Slave domain, to be forwarded to the master.
  143. #
  144. # forward-dnsupdate=yes
  145. #################################
  146. # guardian Run within a guardian process
  147. #
  148. guardian=yes
  149. #################################
  150. # include-dir Include *.conf files from this directory
  151. #
  152. # include-dir=
  153. include-dir=/etc/powerdns/pdns.d
  154. #################################
  155. # launch Which backends to launch and order to query them in
  156. #
  157. # launch=
  158. launch=gpgsql
  159. #################################
  160. # load-modules Load this module - supply absolute or relative path
  161. #
  162. # load-modules=
  163. #################################
  164. # local-address Local IP addresses to which we bind
  165. #
  166. local-address=0.0.0.0
  167. #################################
  168. # local-address-nonexist-fail Fail to start if one or more of the local-address's do not exist on this server
  169. #
  170. # local-address-nonexist-fail=yes
  171. #################################
  172. # local-ipv6 Local IP address to which we bind
  173. #
  174. # local-ipv6=
  175. #################################
  176. # local-ipv6-nonexist-fail Fail to start if one or more of the local-ipv6 addresses do not exist on this server
  177. #
  178. # local-ipv6-nonexist-fail=yes
  179. #################################
  180. # local-port The port on which we listen
  181. #
  182. # local-port=53
  183. #################################
  184. # log-dns-details If PDNS should log DNS non-erroneous details
  185. #
  186. # log-dns-details=no
  187. #################################
  188. # log-dns-queries If PDNS should log all incoming DNS queries
  189. #
  190. # log-dns-queries=no
  191. #################################
  192. # logging-facility Log under a specific facility
  193. #
  194. # logging-facility=
  195. #################################
  196. # loglevel Amount of logging. Higher is more. Do not set below 3
  197. #
  198. # loglevel=4
  199. #################################
  200. # lua-prequery-script Lua script with prequery handler
  201. #
  202. # lua-prequery-script=
  203. #################################
  204. # master Act as a master
  205. #
  206. master=yes
  207. #################################
  208. # max-cache-entries Maximum number of cache entries
  209. #
  210. # max-cache-entries=1000000
  211. #################################
  212. # max-ent-entries Maximum number of empty non-terminals in a zone
  213. #
  214. # max-ent-entries=100000
  215. #################################
  216. # max-nsec3-iterations Limit the number of NSEC3 hash iterations
  217. #
  218. # max-nsec3-iterations=500
  219. #################################
  220. # max-queue-length Maximum queuelength before considering situation lost
  221. #
  222. # max-queue-length=5000
  223. #################################
  224. # max-signature-cache-entries Maximum number of signatures cache entries
  225. #
  226. # max-signature-cache-entries=
  227. #################################
  228. # max-tcp-connections Maximum number of TCP connections
  229. #
  230. # max-tcp-connections=10
  231. #################################
  232. # module-dir Default directory for modules
  233. #
  234. # module-dir=/usr/lib/TRIPLET/pdns
  235. #################################
  236. # negquery-cache-ttl Seconds to store negative query results in the QueryCache
  237. #
  238. # negquery-cache-ttl=60
  239. #################################
  240. # no-shuffle Set this to prevent random shuffling of answers - for regression testing
  241. #
  242. # no-shuffle=off
  243. #################################
  244. # only-notify Only send AXFR NOTIFY to these IP addresses or netmasks
  245. #
  246. # only-notify=0.0.0.0/0,::/0
  247. #################################
  248. # out-of-zone-additional-processing Do out of zone additional processing
  249. #
  250. # out-of-zone-additional-processing=yes
  251. #################################
  252. # overload-queue-length Maximum queuelength moving to packetcache only
  253. #
  254. # overload-queue-length=0
  255. #################################
  256. # pipebackend-abi-version Version of the pipe backend ABI
  257. #
  258. # pipebackend-abi-version=1
  259. #################################
  260. # prevent-self-notification Don't send notifications to what we think is ourself
  261. #
  262. # prevent-self-notification=yes
  263. #################################
  264. # query-cache-ttl Seconds to store query results in the QueryCache
  265. #
  266. # query-cache-ttl=20
  267. #################################
  268. # query-local-address Source IP address for sending queries
  269. #
  270. # query-local-address=0.0.0.0
  271. #################################
  272. # query-local-address6 Source IPv6 address for sending queries
  273. #
  274. # query-local-address6=::
  275. #################################
  276. # query-logging Hint backends that queries should be logged
  277. #
  278. # query-logging=no
  279. #################################
  280. # queue-limit Maximum number of milliseconds to queue a query
  281. #
  282. # queue-limit=1500
  283. #################################
  284. # receiver-threads Default number of receiver threads to start
  285. #
  286. # receiver-threads=1
  287. #################################
  288. # recursive-cache-ttl Seconds to store packets for recursive queries in the PacketCache
  289. #
  290. # recursive-cache-ttl=10
  291. #################################
  292. # recursor If recursion is desired, IP address of a recursing nameserver
  293. #
  294. recursor=PDNS_RECURSOR_HOST:53
  295. #################################
  296. # retrieval-threads Number of AXFR-retrieval threads for slave operation
  297. #
  298. # retrieval-threads=2
  299. #################################
  300. # reuseport Enable higher performance on compliant kernels by using SO_REUSEPORT allowing each receiver thread to open its own socket
  301. #
  302. # reuseport=no
  303. #################################
  304. # security-poll-suffix Domain name from which to query security update notifications
  305. #
  306. # security-poll-suffix=secpoll.powerdns.com.
  307. #################################
  308. # send-root-referral Send out old-fashioned root-referral instead of ServFail in case of no authority
  309. #
  310. # send-root-referral=no
  311. #################################
  312. # server-id Returned when queried for 'server.id' TXT or NSID, defaults to hostname - disabled or custom
  313. #
  314. # server-id=
  315. #################################
  316. # setgid If set, change group id to this gid for more security
  317. #
  318. setgid=pdns
  319. #################################
  320. # setuid If set, change user id to this uid for more security
  321. #
  322. setuid=pdns
  323. #################################
  324. # signing-threads Default number of signer threads to start
  325. #
  326. # signing-threads=3
  327. #################################
  328. # slave Act as a slave
  329. #
  330. # slave=no
  331. #################################
  332. # slave-cycle-interval Reschedule failed SOA serial checks once every .. seconds
  333. #
  334. # slave-cycle-interval=60
  335. #################################
  336. # slave-renotify If we should send out notifications for slaved updates
  337. #
  338. # slave-renotify=no
  339. #################################
  340. # soa-expire-default Default SOA expire
  341. #
  342. # soa-expire-default=604800
  343. #################################
  344. # soa-minimum-ttl Default SOA minimum ttl
  345. #
  346. # soa-minimum-ttl=3600
  347. #################################
  348. # soa-refresh-default Default SOA refresh
  349. #
  350. # soa-refresh-default=10800
  351. #################################
  352. # soa-retry-default Default SOA retry
  353. #
  354. # soa-retry-default=3600
  355. #################################
  356. # socket-dir Where the controlsocket will live
  357. #
  358. # socket-dir=/var/run
  359. #################################
  360. # tcp-control-address If set, PowerDNS can be controlled over TCP on this address
  361. #
  362. # tcp-control-address=
  363. #################################
  364. # tcp-control-port If set, PowerDNS can be controlled over TCP on this address
  365. #
  366. # tcp-control-port=53000
  367. #################################
  368. # tcp-control-range If set, remote control of PowerDNS is possible over these networks only
  369. #
  370. # tcp-control-range=127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, ::1/128, fe80::/10
  371. #################################
  372. # tcp-control-secret If set, PowerDNS can be controlled over TCP after passing this secret
  373. #
  374. # tcp-control-secret=
  375. #################################
  376. # traceback-handler Enable the traceback handler (Linux only)
  377. #
  378. # traceback-handler=yes
  379. #################################
  380. # trusted-notification-proxy IP address of incoming notification proxy
  381. #
  382. # trusted-notification-proxy=
  383. #################################
  384. # udp-truncation-threshold Maximum UDP response size before we truncate
  385. #
  386. # udp-truncation-threshold=1680
  387. #################################
  388. # version-string PowerDNS version in packets - full, anonymous, powerdns or custom
  389. #
  390. # version-string=full
  391. #################################
  392. # webserver Start a webserver for monitoring
  393. #
  394. # webserver=no
  395. #################################
  396. # webserver-address IP Address of webserver to listen on
  397. #
  398. # webserver-address=127.0.0.1
  399. #################################
  400. # webserver-allow-from Webserver access is only allowed from these subnets
  401. #
  402. # webserver-allow-from=0.0.0.0/0,::/0
  403. #################################
  404. # webserver-password Password required for accessing the webserver
  405. #
  406. # webserver-password=
  407. #################################
  408. # webserver-port Port of webserver to listen on
  409. #
  410. # webserver-port=8081
  411. #################################
  412. # webserver-print-arguments If the webserver should print arguments
  413. #
  414. # webserver-print-arguments=no