b.liu | e958203 | 2025-04-17 19:18:16 +0800 | [diff] [blame^] | 1 | # Autogenerated configuration file template |
| 2 | ################################# |
| 3 | # allow-from If set, only allow these comma separated netmasks to recurse |
| 4 | # |
| 5 | # allow-from=127.0.0.0/8, 10.0.0.0/8, 100.64.0.0/10, 169.254.0.0/16, 192.168.0.0/16, 172.16.0.0/12, ::1/128, fc00::/7, fe80::/10 |
| 6 | |
| 7 | ################################# |
| 8 | # allow-from-file If set, load allowed netmasks from this file |
| 9 | # |
| 10 | # allow-from-file= |
| 11 | |
| 12 | ################################# |
| 13 | # any-to-tcp Answer ANY queries with tc=1, shunting to TCP |
| 14 | # |
| 15 | # any-to-tcp=no |
| 16 | |
| 17 | ################################# |
| 18 | # api-config-dir Directory where REST API stores config and zones |
| 19 | # |
| 20 | # api-config-dir= |
| 21 | |
| 22 | ################################# |
| 23 | # api-key Static pre-shared authentication key for access to the REST API |
| 24 | # |
| 25 | # api-key= |
| 26 | |
| 27 | ################################# |
| 28 | # auth-zones Zones for which we have authoritative data, comma separated domain=file pairs |
| 29 | # |
| 30 | # auth-zones= |
| 31 | |
| 32 | ################################# |
| 33 | # carbon-instance If set overwrites the the instance name default |
| 34 | # |
| 35 | # carbon-instance=recursor |
| 36 | |
| 37 | ################################# |
| 38 | # carbon-interval Number of seconds between carbon (graphite) updates |
| 39 | # |
| 40 | # carbon-interval=30 |
| 41 | |
| 42 | ################################# |
| 43 | # carbon-namespace If set overwrites the first part of the carbon string |
| 44 | # |
| 45 | # carbon-namespace=pdns |
| 46 | |
| 47 | ################################# |
| 48 | # carbon-ourname If set, overrides our reported hostname for carbon stats |
| 49 | # |
| 50 | # carbon-ourname= |
| 51 | |
| 52 | ################################# |
| 53 | # carbon-server If set, send metrics in carbon (graphite) format to this server IP address |
| 54 | # |
| 55 | # carbon-server= |
| 56 | |
| 57 | ################################# |
| 58 | # chroot switch to chroot jail |
| 59 | # |
| 60 | # chroot= |
| 61 | |
| 62 | ################################# |
| 63 | # client-tcp-timeout Timeout in seconds when talking to TCP clients |
| 64 | # |
| 65 | # client-tcp-timeout=2 |
| 66 | |
| 67 | ################################# |
| 68 | # config-dir Location of configuration directory (recursor.conf) |
| 69 | # |
| 70 | # config-dir=/etc/powerdns |
| 71 | |
| 72 | ################################# |
| 73 | # config-name Name of this virtual configuration - will rename the binary image |
| 74 | # |
| 75 | # config-name= |
| 76 | |
| 77 | ################################# |
| 78 | # cpu-map Thread to CPU mapping, space separated thread-id=cpu1,cpu2..cpuN pairs |
| 79 | # |
| 80 | # cpu-map= |
| 81 | |
| 82 | ################################# |
| 83 | # daemon Operate as a daemon |
| 84 | # |
| 85 | # daemon=no |
| 86 | |
| 87 | ################################# |
| 88 | # delegation-only Which domains we only accept delegations from |
| 89 | # |
| 90 | # delegation-only= |
| 91 | |
| 92 | ################################# |
| 93 | # disable-packetcache Disable packetcache |
| 94 | # |
| 95 | # disable-packetcache=no |
| 96 | |
| 97 | ################################# |
| 98 | # disable-syslog Disable logging to syslog, useful when running inside a supervisor that logs stdout |
| 99 | # |
| 100 | # disable-syslog=no |
| 101 | |
| 102 | ################################# |
| 103 | # distribution-load-factor The load factor used when PowerDNS is distributing queries to worker threads |
| 104 | # |
| 105 | # distribution-load-factor=0.0 |
| 106 | |
| 107 | ################################# |
| 108 | # distribution-pipe-buffer-size Size in bytes of the internal buffer of the pipe used by the distributor to pass incoming queries to a worker thread |
| 109 | # |
| 110 | # distribution-pipe-buffer-size=0 |
| 111 | |
| 112 | ################################# |
| 113 | # distributor-threads Launch this number of distributor threads, distributing queries to other threads |
| 114 | # |
| 115 | # distributor-threads=0 |
| 116 | |
| 117 | ################################# |
| 118 | # dnssec DNSSEC mode: off/process-no-validate (default)/process/log-fail/validate |
| 119 | # |
| 120 | # dnssec=process-no-validate |
| 121 | |
| 122 | ################################# |
| 123 | # dnssec-log-bogus Log DNSSEC bogus validations |
| 124 | # |
| 125 | # dnssec-log-bogus=no |
| 126 | |
| 127 | ################################# |
| 128 | # dont-query If set, do not query these netmasks for DNS data |
| 129 | # |
| 130 | # dont-query=127.0.0.0/8, 10.0.0.0/8, 100.64.0.0/10, 169.254.0.0/16, 192.168.0.0/16, 172.16.0.0/12, ::1/128, fc00::/7, fe80::/10, 0.0.0.0/8, 192.0.0.0/24, 192.0.2.0/24, 198.51.100.0/24, 203.0.113.0/24, 240.0.0.0/4, ::/96, ::ffff:0:0/96, 100::/64, 2001:db8::/32 |
| 131 | |
| 132 | ################################# |
| 133 | # dont-throttle-names Do not throttle nameservers with this name or suffix |
| 134 | # |
| 135 | # dont-throttle-names= |
| 136 | |
| 137 | ################################# |
| 138 | # dont-throttle-netmasks Do not throttle nameservers with this IP netmask |
| 139 | # |
| 140 | # dont-throttle-netmasks= |
| 141 | |
| 142 | ################################# |
| 143 | # ecs-add-for List of client netmasks for which EDNS Client Subnet will be added |
| 144 | # |
| 145 | # ecs-add-for=0.0.0.0/0, ::/0, !127.0.0.0/8, !10.0.0.0/8, !100.64.0.0/10, !169.254.0.0/16, !192.168.0.0/16, !172.16.0.0/12, !::1/128, !fc00::/7, !fe80::/10 |
| 146 | |
| 147 | ################################# |
| 148 | # ecs-cache-limit-ttl Minimum TTL to cache ECS response |
| 149 | # |
| 150 | # ecs-cache-limit-ttl=0 |
| 151 | |
| 152 | ################################# |
| 153 | # ecs-ipv4-bits Number of bits of IPv4 address to pass for EDNS Client Subnet |
| 154 | # |
| 155 | # ecs-ipv4-bits=24 |
| 156 | |
| 157 | ################################# |
| 158 | # ecs-ipv4-cache-bits Maximum number of bits of IPv4 mask to cache ECS response |
| 159 | # |
| 160 | # ecs-ipv4-cache-bits=24 |
| 161 | |
| 162 | ################################# |
| 163 | # ecs-ipv6-bits Number of bits of IPv6 address to pass for EDNS Client Subnet |
| 164 | # |
| 165 | # ecs-ipv6-bits=56 |
| 166 | |
| 167 | ################################# |
| 168 | # ecs-ipv6-cache-bits Maximum number of bits of IPv6 mask to cache ECS response |
| 169 | # |
| 170 | # ecs-ipv6-cache-bits=56 |
| 171 | |
| 172 | ################################# |
| 173 | # ecs-minimum-ttl-override Set under adverse conditions, a minimum TTL for records in ECS-specific answers |
| 174 | # |
| 175 | # ecs-minimum-ttl-override=0 |
| 176 | |
| 177 | ################################# |
| 178 | # ecs-scope-zero-address Address to send to whitelisted authoritative servers for incoming queries with ECS prefix-length source of 0 |
| 179 | # |
| 180 | # ecs-scope-zero-address= |
| 181 | |
| 182 | ################################# |
| 183 | # edns-outgoing-bufsize Outgoing EDNS buffer size |
| 184 | # |
| 185 | # edns-outgoing-bufsize=1232 |
| 186 | |
| 187 | ################################# |
| 188 | # edns-subnet-whitelist List of netmasks and domains that we should enable EDNS subnet for |
| 189 | # |
| 190 | # edns-subnet-whitelist= |
| 191 | |
| 192 | ################################# |
| 193 | # entropy-source If set, read entropy from this file |
| 194 | # |
| 195 | # entropy-source=/dev/urandom |
| 196 | |
| 197 | ################################# |
| 198 | # etc-hosts-file Path to 'hosts' file |
| 199 | # |
| 200 | # etc-hosts-file=/etc/hosts |
| 201 | |
| 202 | ################################# |
| 203 | # export-etc-hosts If we should serve up contents from /etc/hosts |
| 204 | # |
| 205 | # export-etc-hosts=off |
| 206 | |
| 207 | ################################# |
| 208 | # export-etc-hosts-search-suffix Also serve up the contents of /etc/hosts with this suffix |
| 209 | # |
| 210 | # export-etc-hosts-search-suffix= |
| 211 | |
| 212 | ################################# |
| 213 | # forward-zones Zones for which we forward queries, comma separated domain=ip pairs |
| 214 | # |
| 215 | # forward-zones= |
| 216 | |
| 217 | ################################# |
| 218 | # forward-zones-file File with (+)domain=ip pairs for forwarding |
| 219 | # |
| 220 | # forward-zones-file= |
| 221 | |
| 222 | ################################# |
| 223 | # forward-zones-recurse Zones for which we forward queries with recursion bit, comma separated domain=ip pairs |
| 224 | # |
| 225 | # forward-zones-recurse= |
| 226 | |
| 227 | ################################# |
| 228 | # gettag-needs-edns-options If EDNS Options should be extracted before calling the gettag() hook |
| 229 | # |
| 230 | # gettag-needs-edns-options=no |
| 231 | |
| 232 | ################################# |
| 233 | # hint-file If set, load root hints from this file |
| 234 | # |
| 235 | # hint-file= |
| 236 | |
| 237 | ################################# |
| 238 | # include-dir Include *.conf files from this directory |
| 239 | # |
| 240 | # include-dir= |
| 241 | |
| 242 | ################################# |
| 243 | # latency-statistic-size Number of latency values to calculate the qa-latency average |
| 244 | # |
| 245 | # latency-statistic-size=10000 |
| 246 | |
| 247 | ################################# |
| 248 | # local-address IP addresses to listen on, separated by spaces or commas. Also accepts ports. |
| 249 | # |
| 250 | # local-address=127.0.0.1 |
| 251 | |
| 252 | ################################# |
| 253 | # local-port port to listen on |
| 254 | # |
| 255 | # local-port=53 |
| 256 | |
| 257 | ################################# |
| 258 | # log-common-errors If we should log rather common errors |
| 259 | # |
| 260 | # log-common-errors=no |
| 261 | |
| 262 | ################################# |
| 263 | # log-rpz-changes Log additions and removals to RPZ zones at Info level |
| 264 | # |
| 265 | # log-rpz-changes=no |
| 266 | |
| 267 | ################################# |
| 268 | # log-timestamp Print timestamps in log lines, useful to disable when running with a tool that timestamps stdout already |
| 269 | # |
| 270 | # log-timestamp=yes |
| 271 | |
| 272 | ################################# |
| 273 | # logging-facility Facility to log messages as. 0 corresponds to local0 |
| 274 | # |
| 275 | # logging-facility= |
| 276 | |
| 277 | ################################# |
| 278 | # loglevel Amount of logging. Higher is more. Do not set below 3 |
| 279 | # |
| 280 | # loglevel=6 |
| 281 | |
| 282 | ################################# |
| 283 | # lowercase-outgoing Force outgoing questions to lowercase |
| 284 | # |
| 285 | # lowercase-outgoing=no |
| 286 | |
| 287 | ################################# |
| 288 | # lua-config-file More powerful configuration options |
| 289 | # |
| 290 | # lua-config-file= |
| 291 | |
| 292 | ################################# |
| 293 | # lua-dns-script Filename containing an optional 'lua' script that will be used to modify dns answers |
| 294 | # |
| 295 | # lua-dns-script= |
| 296 | |
| 297 | ################################# |
| 298 | # lua-maintenance-interval Number of seconds between calls to the lua user defined maintenance() function |
| 299 | # |
| 300 | # lua-maintenance-interval=1 |
| 301 | |
| 302 | ################################# |
| 303 | # max-cache-bogus-ttl maximum number of seconds to keep a Bogus (positive or negative) cached entry in memory |
| 304 | # |
| 305 | # max-cache-bogus-ttl=3600 |
| 306 | |
| 307 | ################################# |
| 308 | # max-cache-entries If set, maximum number of entries in the main cache |
| 309 | # |
| 310 | # max-cache-entries=1000000 |
| 311 | |
| 312 | ################################# |
| 313 | # max-cache-ttl maximum number of seconds to keep a cached entry in memory |
| 314 | # |
| 315 | # max-cache-ttl=86400 |
| 316 | |
| 317 | ################################# |
| 318 | # max-mthreads Maximum number of simultaneous Mtasker threads |
| 319 | # |
| 320 | # max-mthreads=2048 |
| 321 | |
| 322 | ################################# |
| 323 | # max-negative-ttl maximum number of seconds to keep a negative cached entry in memory |
| 324 | # |
| 325 | # max-negative-ttl=3600 |
| 326 | |
| 327 | ################################# |
| 328 | # max-packetcache-entries maximum number of entries to keep in the packetcache |
| 329 | # |
| 330 | # max-packetcache-entries=500000 |
| 331 | |
| 332 | ################################# |
| 333 | # max-qperq Maximum outgoing queries per query |
| 334 | # |
| 335 | # max-qperq=50 |
| 336 | |
| 337 | ################################# |
| 338 | # max-recursion-depth Maximum number of internal recursion calls per query, 0 for unlimited |
| 339 | # |
| 340 | # max-recursion-depth=40 |
| 341 | |
| 342 | ################################# |
| 343 | # max-tcp-clients Maximum number of simultaneous TCP clients |
| 344 | # |
| 345 | # max-tcp-clients=128 |
| 346 | |
| 347 | ################################# |
| 348 | # max-tcp-per-client If set, maximum number of TCP sessions per client (IP address) |
| 349 | # |
| 350 | # max-tcp-per-client=0 |
| 351 | |
| 352 | ################################# |
| 353 | # max-tcp-queries-per-connection If set, maximum number of TCP queries in a TCP connection |
| 354 | # |
| 355 | # max-tcp-queries-per-connection=0 |
| 356 | |
| 357 | ################################# |
| 358 | # max-total-msec Maximum total wall-clock time per query in milliseconds, 0 for unlimited |
| 359 | # |
| 360 | # max-total-msec=7000 |
| 361 | |
| 362 | ################################# |
| 363 | # max-udp-queries-per-round Maximum number of UDP queries processed per recvmsg() round, before returning back to normal processing |
| 364 | # |
| 365 | # max-udp-queries-per-round=10000 |
| 366 | |
| 367 | ################################# |
| 368 | # minimum-ttl-override Set under adverse conditions, a minimum TTL |
| 369 | # |
| 370 | # minimum-ttl-override=0 |
| 371 | |
| 372 | ################################# |
| 373 | # network-timeout Wait this number of milliseconds for network i/o |
| 374 | # |
| 375 | # network-timeout=1500 |
| 376 | |
| 377 | ################################# |
| 378 | # no-shuffle Don't change |
| 379 | # |
| 380 | # no-shuffle=off |
| 381 | |
| 382 | ################################# |
| 383 | # non-local-bind Enable binding to non-local addresses by using FREEBIND / BINDANY socket options |
| 384 | # |
| 385 | # non-local-bind=no |
| 386 | |
| 387 | ################################# |
| 388 | # nsec3-max-iterations Maximum number of iterations allowed for an NSEC3 record |
| 389 | # |
| 390 | # nsec3-max-iterations=2500 |
| 391 | |
| 392 | ################################# |
| 393 | # packetcache-servfail-ttl maximum number of seconds to keep a cached servfail entry in packetcache |
| 394 | # |
| 395 | # packetcache-servfail-ttl=60 |
| 396 | |
| 397 | ################################# |
| 398 | # packetcache-ttl maximum number of seconds to keep a cached entry in packetcache |
| 399 | # |
| 400 | # packetcache-ttl=3600 |
| 401 | |
| 402 | ################################# |
| 403 | # pdns-distributes-queries If PowerDNS itself should distribute queries over threads |
| 404 | # |
| 405 | # pdns-distributes-queries=yes |
| 406 | |
| 407 | ################################# |
| 408 | # processes Launch this number of processes (EXPERIMENTAL, DO NOT CHANGE) |
| 409 | # |
| 410 | # processes=1 |
| 411 | |
| 412 | ################################# |
| 413 | # protobuf-use-kernel-timestamp Compute the latency of queries in protobuf messages by using the timestamp set by the kernel when the query was received (when available) |
| 414 | # |
| 415 | # protobuf-use-kernel-timestamp= |
| 416 | |
| 417 | ################################# |
| 418 | # public-suffix-list-file Path to the Public Suffix List file, if any |
| 419 | # |
| 420 | # public-suffix-list-file= |
| 421 | |
| 422 | ################################# |
| 423 | # query-local-address Source IP address for sending queries |
| 424 | # |
| 425 | # query-local-address=0.0.0.0 |
| 426 | |
| 427 | ################################# |
| 428 | # query-local-address6 Source IPv6 address for sending queries. IF UNSET, IPv6 WILL NOT BE USED FOR OUTGOING QUERIES |
| 429 | # |
| 430 | # query-local-address6= |
| 431 | |
| 432 | ################################# |
| 433 | # quiet Suppress logging of questions and answers |
| 434 | # |
| 435 | # quiet= |
| 436 | |
| 437 | ################################# |
| 438 | # reuseport Enable SO_REUSEPORT allowing multiple recursors processes to listen to 1 address |
| 439 | # |
| 440 | # reuseport=no |
| 441 | |
| 442 | ################################# |
| 443 | # rng Specify random number generator to use. Valid values are auto,sodium,openssl,getrandom,arc4random,urandom. |
| 444 | # |
| 445 | # rng=auto |
| 446 | |
| 447 | ################################# |
| 448 | # root-nx-trust If set, believe that an NXDOMAIN from the root means the TLD does not exist |
| 449 | # |
| 450 | # root-nx-trust=yes |
| 451 | |
| 452 | ################################# |
| 453 | # security-poll-suffix Domain name from which to query security update notifications |
| 454 | # |
| 455 | # security-poll-suffix=secpoll.powerdns.com. |
| 456 | |
| 457 | ################################# |
| 458 | # serve-rfc1918 If we should be authoritative for RFC 1918 private IP space |
| 459 | # |
| 460 | # serve-rfc1918=yes |
| 461 | |
| 462 | ################################# |
| 463 | # server-down-max-fails Maximum number of consecutive timeouts (and unreachables) to mark a server as down ( 0 => disabled ) |
| 464 | # |
| 465 | # server-down-max-fails=64 |
| 466 | |
| 467 | ################################# |
| 468 | # server-down-throttle-time Number of seconds to throttle all queries to a server after being marked as down |
| 469 | # |
| 470 | # server-down-throttle-time=60 |
| 471 | |
| 472 | ################################# |
| 473 | # server-id Returned when queried for 'id.server' TXT or NSID, defaults to hostname, set custom or 'disabled' |
| 474 | # |
| 475 | # server-id= |
| 476 | |
| 477 | ################################# |
| 478 | # setgid If set, change group id to this gid for more security |
| 479 | # |
| 480 | # setgid= |
| 481 | |
| 482 | ################################# |
| 483 | # setuid If set, change user id to this uid for more security |
| 484 | # |
| 485 | # setuid= |
| 486 | |
| 487 | ################################# |
| 488 | # signature-inception-skew Allow the signature inception to be off by this number of seconds |
| 489 | # |
| 490 | # signature-inception-skew=60 |
| 491 | |
| 492 | ################################# |
| 493 | # single-socket If set, only use a single socket for outgoing queries |
| 494 | # |
| 495 | # single-socket=off |
| 496 | |
| 497 | ################################# |
| 498 | # snmp-agent If set, register as an SNMP agent |
| 499 | # |
| 500 | # snmp-agent=no |
| 501 | |
| 502 | ################################# |
| 503 | # snmp-master-socket If set and snmp-agent is set, the socket to use to register to the SNMP master |
| 504 | # |
| 505 | # snmp-master-socket= |
| 506 | |
| 507 | ################################# |
| 508 | # soa-minimum-ttl Don't change |
| 509 | # |
| 510 | # soa-minimum-ttl=0 |
| 511 | |
| 512 | ################################# |
| 513 | # socket-dir Where the controlsocket will live, /var/run when unset and not chrooted |
| 514 | # |
| 515 | # socket-dir= |
| 516 | |
| 517 | ################################# |
| 518 | # socket-group Group of socket |
| 519 | # |
| 520 | # socket-group= |
| 521 | |
| 522 | ################################# |
| 523 | # socket-mode Permissions for socket |
| 524 | # |
| 525 | # socket-mode= |
| 526 | |
| 527 | ################################# |
| 528 | # socket-owner Owner of socket |
| 529 | # |
| 530 | # socket-owner= |
| 531 | |
| 532 | ################################# |
| 533 | # spoof-nearmiss-max If non-zero, assume spoofing after this many near misses |
| 534 | # |
| 535 | # spoof-nearmiss-max=20 |
| 536 | |
| 537 | ################################# |
| 538 | # stack-size stack size per mthread |
| 539 | # |
| 540 | # stack-size=200000 |
| 541 | |
| 542 | ################################# |
| 543 | # statistics-interval Number of seconds between printing of recursor statistics, 0 to disable |
| 544 | # |
| 545 | # statistics-interval=1800 |
| 546 | |
| 547 | ################################# |
| 548 | # stats-api-blacklist List of statistics that are disabled when retrieving the complete list of statistics via the API |
| 549 | # |
| 550 | # stats-api-blacklist=cache-bytes, packetcache-bytes, special-memory-usage, ecs-v4-response-bits-1, ecs-v4-response-bits-2, ecs-v4-response-bits-3, ecs-v4-response-bits-4, ecs-v4-response-bits-5, ecs-v4-response-bits-6, ecs-v4-response-bits-7, ecs-v4-response-bits-8, ecs-v4-response-bits-9, ecs-v4-response-bits-10, ecs-v4-response-bits-11, ecs-v4-response-bits-12, ecs-v4-response-bits-13, ecs-v4-response-bits-14, ecs-v4-response-bits-15, ecs-v4-response-bits-16, ecs-v4-response-bits-17, ecs-v4-response-bits-18, ecs-v4-response-bits-19, ecs-v4-response-bits-20, ecs-v4-response-bits-21, ecs-v4-response-bits-22, ecs-v4-response-bits-23, ecs-v4-response-bits-24, ecs-v4-response-bits-25, ecs-v4-response-bits-26, ecs-v4-response-bits-27, ecs-v4-response-bits-28, ecs-v4-response-bits-29, ecs-v4-response-bits-30, ecs-v4-response-bits-31, ecs-v4-response-bits-32, ecs-v6-response-bits-1, ecs-v6-response-bits-2, ecs-v6-response-bits-3, ecs-v6-response-bits-4, ecs-v6-response-bits-5, ecs-v6-response-bits-6, ecs-v6-response-bits-7, ecs-v6-response-bits-8, ecs-v6-response-bits-9, ecs-v6-response-bits-10, ecs-v6-response-bits-11, ecs-v6-response-bits-12, ecs-v6-response-bits-13, ecs-v6-response-bits-14, ecs-v6-response-bits-15, ecs-v6-response-bits-16, ecs-v6-response-bits-17, ecs-v6-response-bits-18, ecs-v6-response-bits-19, ecs-v6-response-bits-20, ecs-v6-response-bits-21, ecs-v6-response-bits-22, ecs-v6-response-bits-23, ecs-v6-response-bits-24, ecs-v6-response-bits-25, ecs-v6-response-bits-26, ecs-v6-response-bits-27, ecs-v6-response-bits-28, ecs-v6-response-bits-29, ecs-v6-response-bits-30, ecs-v6-response-bits-31, ecs-v6-response-bits-32, ecs-v6-response-bits-33, ecs-v6-response-bits-34, ecs-v6-response-bits-35, ecs-v6-response-bits-36, ecs-v6-response-bits-37, ecs-v6-response-bits-38, ecs-v6-response-bits-39, ecs-v6-response-bits-40, ecs-v6-response-bits-41, ecs-v6-response-bits-42, ecs-v6-response-bits-43, ecs-v6-response-bits-44, ecs-v6-response-bits-45, ecs-v6-response-bits-46, ecs-v6-response-bits-47, ecs-v6-response-bits-48, ecs-v6-response-bits-49, ecs-v6-response-bits-50, ecs-v6-response-bits-51, ecs-v6-response-bits-52, ecs-v6-response-bits-53, ecs-v6-response-bits-54, ecs-v6-response-bits-55, ecs-v6-response-bits-56, ecs-v6-response-bits-57, ecs-v6-response-bits-58, ecs-v6-response-bits-59, ecs-v6-response-bits-60, ecs-v6-response-bits-61, ecs-v6-response-bits-62, ecs-v6-response-bits-63, ecs-v6-response-bits-64, ecs-v6-response-bits-65, ecs-v6-response-bits-66, ecs-v6-response-bits-67, ecs-v6-response-bits-68, ecs-v6-response-bits-69, ecs-v6-response-bits-70, ecs-v6-response-bits-71, ecs-v6-response-bits-72, ecs-v6-response-bits-73, ecs-v6-response-bits-74, ecs-v6-response-bits-75, ecs-v6-response-bits-76, ecs-v6-response-bits-77, ecs-v6-response-bits-78, ecs-v6-response-bits-79, ecs-v6-response-bits-80, ecs-v6-response-bits-81, ecs-v6-response-bits-82, ecs-v6-response-bits-83, ecs-v6-response-bits-84, ecs-v6-response-bits-85, ecs-v6-response-bits-86, ecs-v6-response-bits-87, ecs-v6-response-bits-88, ecs-v6-response-bits-89, ecs-v6-response-bits-90, ecs-v6-response-bits-91, ecs-v6-response-bits-92, ecs-v6-response-bits-93, ecs-v6-response-bits-94, ecs-v6-response-bits-95, ecs-v6-response-bits-96, ecs-v6-response-bits-97, ecs-v6-response-bits-98, ecs-v6-response-bits-99, ecs-v6-response-bits-100, ecs-v6-response-bits-101, ecs-v6-response-bits-102, ecs-v6-response-bits-103, ecs-v6-response-bits-104, ecs-v6-response-bits-105, ecs-v6-response-bits-106, ecs-v6-response-bits-107, ecs-v6-response-bits-108, ecs-v6-response-bits-109, ecs-v6-response-bits-110, ecs-v6-response-bits-111, ecs-v6-response-bits-112, ecs-v6-response-bits-113, ecs-v6-response-bits-114, ecs-v6-response-bits-115, ecs-v6-response-bits-116, ecs-v6-response-bits-117, ecs-v6-response-bits-118, ecs-v6-response-bits-119, ecs-v6-response-bits-120, ecs-v6-response-bits-121, ecs-v6-response-bits-122, ecs-v6-response-bits-123, ecs-v6-response-bits-124, ecs-v6-response-bits-125, ecs-v6-response-bits-126, ecs-v6-response-bits-127, ecs-v6-response-bits-128 |
| 551 | |
| 552 | ################################# |
| 553 | # stats-carbon-blacklist List of statistics that are prevented from being exported via Carbon |
| 554 | # |
| 555 | # stats-carbon-blacklist=cache-bytes, packetcache-bytes, special-memory-usage, ecs-v4-response-bits-1, ecs-v4-response-bits-2, ecs-v4-response-bits-3, ecs-v4-response-bits-4, ecs-v4-response-bits-5, ecs-v4-response-bits-6, ecs-v4-response-bits-7, ecs-v4-response-bits-8, ecs-v4-response-bits-9, ecs-v4-response-bits-10, ecs-v4-response-bits-11, ecs-v4-response-bits-12, ecs-v4-response-bits-13, ecs-v4-response-bits-14, ecs-v4-response-bits-15, ecs-v4-response-bits-16, ecs-v4-response-bits-17, ecs-v4-response-bits-18, ecs-v4-response-bits-19, ecs-v4-response-bits-20, ecs-v4-response-bits-21, ecs-v4-response-bits-22, ecs-v4-response-bits-23, ecs-v4-response-bits-24, ecs-v4-response-bits-25, ecs-v4-response-bits-26, ecs-v4-response-bits-27, ecs-v4-response-bits-28, ecs-v4-response-bits-29, ecs-v4-response-bits-30, ecs-v4-response-bits-31, ecs-v4-response-bits-32, ecs-v6-response-bits-1, ecs-v6-response-bits-2, ecs-v6-response-bits-3, ecs-v6-response-bits-4, ecs-v6-response-bits-5, ecs-v6-response-bits-6, ecs-v6-response-bits-7, ecs-v6-response-bits-8, ecs-v6-response-bits-9, ecs-v6-response-bits-10, ecs-v6-response-bits-11, ecs-v6-response-bits-12, ecs-v6-response-bits-13, ecs-v6-response-bits-14, ecs-v6-response-bits-15, ecs-v6-response-bits-16, ecs-v6-response-bits-17, ecs-v6-response-bits-18, ecs-v6-response-bits-19, ecs-v6-response-bits-20, ecs-v6-response-bits-21, ecs-v6-response-bits-22, ecs-v6-response-bits-23, ecs-v6-response-bits-24, ecs-v6-response-bits-25, ecs-v6-response-bits-26, ecs-v6-response-bits-27, ecs-v6-response-bits-28, ecs-v6-response-bits-29, ecs-v6-response-bits-30, ecs-v6-response-bits-31, ecs-v6-response-bits-32, ecs-v6-response-bits-33, ecs-v6-response-bits-34, ecs-v6-response-bits-35, ecs-v6-response-bits-36, ecs-v6-response-bits-37, ecs-v6-response-bits-38, ecs-v6-response-bits-39, ecs-v6-response-bits-40, ecs-v6-response-bits-41, ecs-v6-response-bits-42, ecs-v6-response-bits-43, ecs-v6-response-bits-44, ecs-v6-response-bits-45, ecs-v6-response-bits-46, ecs-v6-response-bits-47, ecs-v6-response-bits-48, ecs-v6-response-bits-49, ecs-v6-response-bits-50, ecs-v6-response-bits-51, ecs-v6-response-bits-52, ecs-v6-response-bits-53, ecs-v6-response-bits-54, ecs-v6-response-bits-55, ecs-v6-response-bits-56, ecs-v6-response-bits-57, ecs-v6-response-bits-58, ecs-v6-response-bits-59, ecs-v6-response-bits-60, ecs-v6-response-bits-61, ecs-v6-response-bits-62, ecs-v6-response-bits-63, ecs-v6-response-bits-64, ecs-v6-response-bits-65, ecs-v6-response-bits-66, ecs-v6-response-bits-67, ecs-v6-response-bits-68, ecs-v6-response-bits-69, ecs-v6-response-bits-70, ecs-v6-response-bits-71, ecs-v6-response-bits-72, ecs-v6-response-bits-73, ecs-v6-response-bits-74, ecs-v6-response-bits-75, ecs-v6-response-bits-76, ecs-v6-response-bits-77, ecs-v6-response-bits-78, ecs-v6-response-bits-79, ecs-v6-response-bits-80, ecs-v6-response-bits-81, ecs-v6-response-bits-82, ecs-v6-response-bits-83, ecs-v6-response-bits-84, ecs-v6-response-bits-85, ecs-v6-response-bits-86, ecs-v6-response-bits-87, ecs-v6-response-bits-88, ecs-v6-response-bits-89, ecs-v6-response-bits-90, ecs-v6-response-bits-91, ecs-v6-response-bits-92, ecs-v6-response-bits-93, ecs-v6-response-bits-94, ecs-v6-response-bits-95, ecs-v6-response-bits-96, ecs-v6-response-bits-97, ecs-v6-response-bits-98, ecs-v6-response-bits-99, ecs-v6-response-bits-100, ecs-v6-response-bits-101, ecs-v6-response-bits-102, ecs-v6-response-bits-103, ecs-v6-response-bits-104, ecs-v6-response-bits-105, ecs-v6-response-bits-106, ecs-v6-response-bits-107, ecs-v6-response-bits-108, ecs-v6-response-bits-109, ecs-v6-response-bits-110, ecs-v6-response-bits-111, ecs-v6-response-bits-112, ecs-v6-response-bits-113, ecs-v6-response-bits-114, ecs-v6-response-bits-115, ecs-v6-response-bits-116, ecs-v6-response-bits-117, ecs-v6-response-bits-118, ecs-v6-response-bits-119, ecs-v6-response-bits-120, ecs-v6-response-bits-121, ecs-v6-response-bits-122, ecs-v6-response-bits-123, ecs-v6-response-bits-124, ecs-v6-response-bits-125, ecs-v6-response-bits-126, ecs-v6-response-bits-127, ecs-v6-response-bits-128 |
| 556 | |
| 557 | ################################# |
| 558 | # stats-rec-control-blacklist List of statistics that are prevented from being exported via rec_control get-all |
| 559 | # |
| 560 | # stats-rec-control-blacklist=cache-bytes, packetcache-bytes, special-memory-usage, ecs-v4-response-bits-1, ecs-v4-response-bits-2, ecs-v4-response-bits-3, ecs-v4-response-bits-4, ecs-v4-response-bits-5, ecs-v4-response-bits-6, ecs-v4-response-bits-7, ecs-v4-response-bits-8, ecs-v4-response-bits-9, ecs-v4-response-bits-10, ecs-v4-response-bits-11, ecs-v4-response-bits-12, ecs-v4-response-bits-13, ecs-v4-response-bits-14, ecs-v4-response-bits-15, ecs-v4-response-bits-16, ecs-v4-response-bits-17, ecs-v4-response-bits-18, ecs-v4-response-bits-19, ecs-v4-response-bits-20, ecs-v4-response-bits-21, ecs-v4-response-bits-22, ecs-v4-response-bits-23, ecs-v4-response-bits-24, ecs-v4-response-bits-25, ecs-v4-response-bits-26, ecs-v4-response-bits-27, ecs-v4-response-bits-28, ecs-v4-response-bits-29, ecs-v4-response-bits-30, ecs-v4-response-bits-31, ecs-v4-response-bits-32, ecs-v6-response-bits-1, ecs-v6-response-bits-2, ecs-v6-response-bits-3, ecs-v6-response-bits-4, ecs-v6-response-bits-5, ecs-v6-response-bits-6, ecs-v6-response-bits-7, ecs-v6-response-bits-8, ecs-v6-response-bits-9, ecs-v6-response-bits-10, ecs-v6-response-bits-11, ecs-v6-response-bits-12, ecs-v6-response-bits-13, ecs-v6-response-bits-14, ecs-v6-response-bits-15, ecs-v6-response-bits-16, ecs-v6-response-bits-17, ecs-v6-response-bits-18, ecs-v6-response-bits-19, ecs-v6-response-bits-20, ecs-v6-response-bits-21, ecs-v6-response-bits-22, ecs-v6-response-bits-23, ecs-v6-response-bits-24, ecs-v6-response-bits-25, ecs-v6-response-bits-26, ecs-v6-response-bits-27, ecs-v6-response-bits-28, ecs-v6-response-bits-29, ecs-v6-response-bits-30, ecs-v6-response-bits-31, ecs-v6-response-bits-32, ecs-v6-response-bits-33, ecs-v6-response-bits-34, ecs-v6-response-bits-35, ecs-v6-response-bits-36, ecs-v6-response-bits-37, ecs-v6-response-bits-38, ecs-v6-response-bits-39, ecs-v6-response-bits-40, ecs-v6-response-bits-41, ecs-v6-response-bits-42, ecs-v6-response-bits-43, ecs-v6-response-bits-44, ecs-v6-response-bits-45, ecs-v6-response-bits-46, ecs-v6-response-bits-47, ecs-v6-response-bits-48, ecs-v6-response-bits-49, ecs-v6-response-bits-50, ecs-v6-response-bits-51, ecs-v6-response-bits-52, ecs-v6-response-bits-53, ecs-v6-response-bits-54, ecs-v6-response-bits-55, ecs-v6-response-bits-56, ecs-v6-response-bits-57, ecs-v6-response-bits-58, ecs-v6-response-bits-59, ecs-v6-response-bits-60, ecs-v6-response-bits-61, ecs-v6-response-bits-62, ecs-v6-response-bits-63, ecs-v6-response-bits-64, ecs-v6-response-bits-65, ecs-v6-response-bits-66, ecs-v6-response-bits-67, ecs-v6-response-bits-68, ecs-v6-response-bits-69, ecs-v6-response-bits-70, ecs-v6-response-bits-71, ecs-v6-response-bits-72, ecs-v6-response-bits-73, ecs-v6-response-bits-74, ecs-v6-response-bits-75, ecs-v6-response-bits-76, ecs-v6-response-bits-77, ecs-v6-response-bits-78, ecs-v6-response-bits-79, ecs-v6-response-bits-80, ecs-v6-response-bits-81, ecs-v6-response-bits-82, ecs-v6-response-bits-83, ecs-v6-response-bits-84, ecs-v6-response-bits-85, ecs-v6-response-bits-86, ecs-v6-response-bits-87, ecs-v6-response-bits-88, ecs-v6-response-bits-89, ecs-v6-response-bits-90, ecs-v6-response-bits-91, ecs-v6-response-bits-92, ecs-v6-response-bits-93, ecs-v6-response-bits-94, ecs-v6-response-bits-95, ecs-v6-response-bits-96, ecs-v6-response-bits-97, ecs-v6-response-bits-98, ecs-v6-response-bits-99, ecs-v6-response-bits-100, ecs-v6-response-bits-101, ecs-v6-response-bits-102, ecs-v6-response-bits-103, ecs-v6-response-bits-104, ecs-v6-response-bits-105, ecs-v6-response-bits-106, ecs-v6-response-bits-107, ecs-v6-response-bits-108, ecs-v6-response-bits-109, ecs-v6-response-bits-110, ecs-v6-response-bits-111, ecs-v6-response-bits-112, ecs-v6-response-bits-113, ecs-v6-response-bits-114, ecs-v6-response-bits-115, ecs-v6-response-bits-116, ecs-v6-response-bits-117, ecs-v6-response-bits-118, ecs-v6-response-bits-119, ecs-v6-response-bits-120, ecs-v6-response-bits-121, ecs-v6-response-bits-122, ecs-v6-response-bits-123, ecs-v6-response-bits-124, ecs-v6-response-bits-125, ecs-v6-response-bits-126, ecs-v6-response-bits-127, ecs-v6-response-bits-128 |
| 561 | |
| 562 | ################################# |
| 563 | # stats-ringbuffer-entries maximum number of packets to store statistics for |
| 564 | # |
| 565 | # stats-ringbuffer-entries=10000 |
| 566 | |
| 567 | ################################# |
| 568 | # stats-snmp-blacklist List of statistics that are prevented from being exported via SNMP |
| 569 | # |
| 570 | # stats-snmp-blacklist=cache-bytes, packetcache-bytes, special-memory-usage, ecs-v4-response-bits-1, ecs-v4-response-bits-2, ecs-v4-response-bits-3, ecs-v4-response-bits-4, ecs-v4-response-bits-5, ecs-v4-response-bits-6, ecs-v4-response-bits-7, ecs-v4-response-bits-8, ecs-v4-response-bits-9, ecs-v4-response-bits-10, ecs-v4-response-bits-11, ecs-v4-response-bits-12, ecs-v4-response-bits-13, ecs-v4-response-bits-14, ecs-v4-response-bits-15, ecs-v4-response-bits-16, ecs-v4-response-bits-17, ecs-v4-response-bits-18, ecs-v4-response-bits-19, ecs-v4-response-bits-20, ecs-v4-response-bits-21, ecs-v4-response-bits-22, ecs-v4-response-bits-23, ecs-v4-response-bits-24, ecs-v4-response-bits-25, ecs-v4-response-bits-26, ecs-v4-response-bits-27, ecs-v4-response-bits-28, ecs-v4-response-bits-29, ecs-v4-response-bits-30, ecs-v4-response-bits-31, ecs-v4-response-bits-32, ecs-v6-response-bits-1, ecs-v6-response-bits-2, ecs-v6-response-bits-3, ecs-v6-response-bits-4, ecs-v6-response-bits-5, ecs-v6-response-bits-6, ecs-v6-response-bits-7, ecs-v6-response-bits-8, ecs-v6-response-bits-9, ecs-v6-response-bits-10, ecs-v6-response-bits-11, ecs-v6-response-bits-12, ecs-v6-response-bits-13, ecs-v6-response-bits-14, ecs-v6-response-bits-15, ecs-v6-response-bits-16, ecs-v6-response-bits-17, ecs-v6-response-bits-18, ecs-v6-response-bits-19, ecs-v6-response-bits-20, ecs-v6-response-bits-21, ecs-v6-response-bits-22, ecs-v6-response-bits-23, ecs-v6-response-bits-24, ecs-v6-response-bits-25, ecs-v6-response-bits-26, ecs-v6-response-bits-27, ecs-v6-response-bits-28, ecs-v6-response-bits-29, ecs-v6-response-bits-30, ecs-v6-response-bits-31, ecs-v6-response-bits-32, ecs-v6-response-bits-33, ecs-v6-response-bits-34, ecs-v6-response-bits-35, ecs-v6-response-bits-36, ecs-v6-response-bits-37, ecs-v6-response-bits-38, ecs-v6-response-bits-39, ecs-v6-response-bits-40, ecs-v6-response-bits-41, ecs-v6-response-bits-42, ecs-v6-response-bits-43, ecs-v6-response-bits-44, ecs-v6-response-bits-45, ecs-v6-response-bits-46, ecs-v6-response-bits-47, ecs-v6-response-bits-48, ecs-v6-response-bits-49, ecs-v6-response-bits-50, ecs-v6-response-bits-51, ecs-v6-response-bits-52, ecs-v6-response-bits-53, ecs-v6-response-bits-54, ecs-v6-response-bits-55, ecs-v6-response-bits-56, ecs-v6-response-bits-57, ecs-v6-response-bits-58, ecs-v6-response-bits-59, ecs-v6-response-bits-60, ecs-v6-response-bits-61, ecs-v6-response-bits-62, ecs-v6-response-bits-63, ecs-v6-response-bits-64, ecs-v6-response-bits-65, ecs-v6-response-bits-66, ecs-v6-response-bits-67, ecs-v6-response-bits-68, ecs-v6-response-bits-69, ecs-v6-response-bits-70, ecs-v6-response-bits-71, ecs-v6-response-bits-72, ecs-v6-response-bits-73, ecs-v6-response-bits-74, ecs-v6-response-bits-75, ecs-v6-response-bits-76, ecs-v6-response-bits-77, ecs-v6-response-bits-78, ecs-v6-response-bits-79, ecs-v6-response-bits-80, ecs-v6-response-bits-81, ecs-v6-response-bits-82, ecs-v6-response-bits-83, ecs-v6-response-bits-84, ecs-v6-response-bits-85, ecs-v6-response-bits-86, ecs-v6-response-bits-87, ecs-v6-response-bits-88, ecs-v6-response-bits-89, ecs-v6-response-bits-90, ecs-v6-response-bits-91, ecs-v6-response-bits-92, ecs-v6-response-bits-93, ecs-v6-response-bits-94, ecs-v6-response-bits-95, ecs-v6-response-bits-96, ecs-v6-response-bits-97, ecs-v6-response-bits-98, ecs-v6-response-bits-99, ecs-v6-response-bits-100, ecs-v6-response-bits-101, ecs-v6-response-bits-102, ecs-v6-response-bits-103, ecs-v6-response-bits-104, ecs-v6-response-bits-105, ecs-v6-response-bits-106, ecs-v6-response-bits-107, ecs-v6-response-bits-108, ecs-v6-response-bits-109, ecs-v6-response-bits-110, ecs-v6-response-bits-111, ecs-v6-response-bits-112, ecs-v6-response-bits-113, ecs-v6-response-bits-114, ecs-v6-response-bits-115, ecs-v6-response-bits-116, ecs-v6-response-bits-117, ecs-v6-response-bits-118, ecs-v6-response-bits-119, ecs-v6-response-bits-120, ecs-v6-response-bits-121, ecs-v6-response-bits-122, ecs-v6-response-bits-123, ecs-v6-response-bits-124, ecs-v6-response-bits-125, ecs-v6-response-bits-126, ecs-v6-response-bits-127, ecs-v6-response-bits-128 |
| 571 | |
| 572 | ################################# |
| 573 | # tcp-fast-open Enable TCP Fast Open support on the listening sockets, using the supplied numerical value as the queue size |
| 574 | # |
| 575 | # tcp-fast-open=0 |
| 576 | |
| 577 | ################################# |
| 578 | # threads Launch this number of threads |
| 579 | # |
| 580 | # threads=2 |
| 581 | |
| 582 | ################################# |
| 583 | # trace if we should output heaps of logging. set to 'fail' to only log failing domains |
| 584 | # |
| 585 | # trace=off |
| 586 | |
| 587 | ################################# |
| 588 | # udp-source-port-avoid List of comma separated UDP port number to avoid |
| 589 | # |
| 590 | # udp-source-port-avoid=11211 |
| 591 | |
| 592 | ################################# |
| 593 | # udp-source-port-max Maximum UDP port to bind on |
| 594 | # |
| 595 | # udp-source-port-max=65535 |
| 596 | |
| 597 | ################################# |
| 598 | # udp-source-port-min Minimum UDP port to bind on |
| 599 | # |
| 600 | # udp-source-port-min=1024 |
| 601 | |
| 602 | ################################# |
| 603 | # udp-truncation-threshold Maximum UDP response size before we truncate |
| 604 | # |
| 605 | # udp-truncation-threshold=1232 |
| 606 | |
| 607 | ################################# |
| 608 | # use-incoming-edns-subnet Pass along received EDNS Client Subnet information |
| 609 | # |
| 610 | # use-incoming-edns-subnet=no |
| 611 | |
| 612 | ################################# |
| 613 | # version-string string reported on version.pdns or version.bind |
| 614 | # |
| 615 | # version-string=PowerDNS Recursor 4.2.1 |
| 616 | |
| 617 | ################################# |
| 618 | # webserver Start a webserver (for REST API) |
| 619 | # |
| 620 | # webserver=no |
| 621 | |
| 622 | ################################# |
| 623 | # webserver-address IP Address of webserver to listen on |
| 624 | # |
| 625 | # webserver-address=127.0.0.1 |
| 626 | |
| 627 | ################################# |
| 628 | # webserver-allow-from Webserver access is only allowed from these subnets |
| 629 | # |
| 630 | # webserver-allow-from=127.0.0.1,::1 |
| 631 | |
| 632 | ################################# |
| 633 | # webserver-loglevel Amount of logging in the webserver (none, normal, detailed) |
| 634 | # |
| 635 | # webserver-loglevel=normal |
| 636 | |
| 637 | ################################# |
| 638 | # webserver-password Password required for accessing the webserver |
| 639 | # |
| 640 | # webserver-password= |
| 641 | |
| 642 | ################################# |
| 643 | # webserver-port Port of webserver to listen on |
| 644 | # |
| 645 | # webserver-port=8082 |
| 646 | |
| 647 | ################################# |
| 648 | # write-pid Write a PID file |
| 649 | # |
| 650 | # write-pid=yes |
| 651 | |
| 652 | ################################# |
| 653 | # xpf-allow-from XPF information is only processed from these subnets |
| 654 | # |
| 655 | # xpf-allow-from= |
| 656 | |
| 657 | ################################# |
| 658 | # xpf-rr-code XPF option code to use |
| 659 | # |
| 660 | # xpf-rr-code=0 |
| 661 | |
| 662 | |