views (dnsconfig)

string

The primary identifier of an individual object. For DNS View, name of the view is used as key.

TRUE

string

string

Name of view.

TRUE

string

string

Comment for view.

FALSE

string

boolean

Whether to disable an object or not.
A disabled object is effectively non-existent when generating configuration.

FALSE

string

array

Clients must match this ACL to make authoritative queries.
Also used for recursive queries if that ACL is unset.

FALSE

nios

element

access

address

acl

tsig_key

tsig_name

tsig_comment

tsig_algorithm

tsig_secret

boolean

When enabled, the DNS server will only add records to the authority and additional data sections when they are required

FALSE

string

array

Clients must match this ACL to receive zone transfers.

FALSE

nios

element

access

address

acl

tsig_key

tsig_name

tsig_comment

tsig_algorithm

tsig_secret

boolean

If set true it allows recursive DNS queries.

FALSE

string

array

Clients must match this ACL to make recursive queries.
If this ACL is empty, then the query_acl will be used instead.

FALSE

nios

element

access

address

acl

tsig_key

tsig_name

tsig_comment

tsig_algorithm

tsig_secret

integer

Unused in the current on-prem DNS server implementation.Unsigned integer, min 0 max 3600 (1h).

FALSE

string

integer

Seconds to cache positive responses.Unsigned integer, min 1 max 604800 (7d).

FALSE

string

integer

Seconds to cache negative responses.
Unsigned integer, min 1 max 604800 (7d).
Defaults to 10800 (3h).

FALSE

string

boolean

Whether to use custom root nameservers instead of the default ones or not.
The custom_root_ns is validated when enabled.
Defaults to false.

FALSE

string

array

List of custom root nameservers. The order does not matter.Error if empty while custom_root_ns_enabled is true. Error if there are duplicate items in the list.

FALSE

nios

root_ns_address

root_ns_fqdn

array

List of forwarders.
Error if empty while forwarders_only or use_root_forwarders_for_local_resolution_with_b1td is true.
Error if there are items in the list with duplicate addresses.

FALSE

nios

forwarder_address

forwarder_fqdn

boolean

Set to true to only forward.
Defaults to false.

FALSE

string

boolean

Use default forwarders to resolve queries for subzones.

FALSE

string

integer

ZoneAuthority refresh.

FALSE

string

integer

ZoneAuthority retry.

FALSE

string

integer

ZoneAuthority expire time in seconds.

FALSE

string

integer

ZoneAuthority default ttl for resource records in zone (value in seconds).

FALSE

string

integer

ZoneAuthority negative caching (minimum) ttl in seconds.

FALSE

string

string

ZoneAuthority rname.

FALSE

string

string

ZoneAuthority master name server in punycode.

FALSE

string

boolean

Use default value for master name server.

FALSE

string

array

Specifies which hosts are allowed to issue.
Dynamic DNS updates for authoritative zones of primary_type cloud.

FALSE

nios

element

access

address

acl

tsig_key

tsig_name

tsig_comment

tsig_algorithm

tsig_secret

boolean

Use to enable EDNS client subnet for recursive queries.
Other ecs_*_ fields are ignored if this field is not enabled.

FALSE

string

boolean

Use to enable ECS options in outbound queries. This functionality has additional overhead so it is disabled by default.

FALSE

string

integer

Maximum scope length for v4 ECS. Unsigned integer, min 1 max 24.

FALSE

string

integer

Maximum scope length for v6 ECS. Unsigned integer, min 1 max 56.

FALSE

string

array

List of zones where ECS queries may be sent.
Error if empty while ecs_enabled is true.
Error if there are duplicate FQDNs in the list.

FALSE

nios

ecs_zone_fqdn

ecs_zone_access

boolean

Master toggle for all DNSSEC processing.Other dnssec_*_ configuration is unused if this is disabled.

FALSE

string

boolean

Set to perform DNSSEC validation.Ignored if dnssec_enabled is false.Defaults to true.

FALSE

string

boolean

Set to reject expired DNSSEC keys.Ignored if either dnssec_enabled or dnssec_enable_validation is false.
Defaults to true.

FALSE

string

array

DNSSEC trust anchors.Error if there are list items with duplicate (zone, sep, algorithm) combinations.

FALSE

nios

trust_anchor_zone

trust_anchor_sep

trust_anchor_algorithm

trust_anchor_public_key

array

Specifies which clients have access to the view.

FALSE

nios

element

access

address

acl

tsig_key

tsig_name

tsig_comment

tsig_algorithm

tsig_secret

array

Specifies which destination addresses have access to the view.

FALSE

nios

element

access

address

acl

tsig_key

tsig_name

tsig_comment

tsig_algorithm

tsig_secret

boolean

If true only recursive queries from matching clients access the view.

FALSE

string

string

The inheritance configuration for query_acl field from View object.

FALSE

string

inherit

string

The inheritance configuration for minimal_responses field from View object.

FALSE

string

inherit

string

The inheritance configuration for transfer_acl field from View object.

FALSE

string

inherit

string

The inheritance configuration for recursion_enabled field from View object

FALSE

string

inherit

string

The inheritance configuration for recursion_acl field from View object

FALSE

string

inherit

string

The inheritance configuration for lame_ttl field from View object

FALSE

string

inherit

string

The inheritance configuration for max_cache_ttl field from View object.

FALSE

string

inherit

string

The inheritance configuration for max_negative_ttl field from View object.

FALSE

string

inherit

string

The inheritance configuration for custom_root_ns_block field from View object.

FALSE

string

inherit

string

The inheritance configuration for forwarders_block field from View object.

FALSE

string

inherit

string

The inheritance configuration for use_forwarders_for_subzones field from View object.

FALSE

string

inherit

string

The inheritance configuration for update_acl field from View object.

FALSE

string

inherit

string

The inheritance configuration for ecs_block field from View object.

FALSE

string

inherit

string

The inheritance configuration for dnssec_validation_block field from View object.

FALSE

string

inherit

string

The inheritance configuration for refresh field from View object.

FALSE

string

inherit

string

The inheritance configuration for retry field from View object.

FALSE

string

inherit

string

The inheritance configuration for expire field from View object.

FALSE

string

inherit

string

The inheritance configuration for default_ttl field from View object.

FALSE

string

inherit

string

The inheritance configuration for negative_ttl field from View object.

FALSE

string

inherit

string

The inheritance configuration for rname field from View object.

FALSE

string

inherit

string

The inheritance configuration for protocol_rname field from View object.

FALSE

string

inherit

string

The inheritance configuration for mname_block field from View object.

FALSE

string

inherit

string

The inheritance configuration for match_recursive_only field from View object.

FALSE

string

inherit

string

The inheritance configuration for edns_udp_size field from View object.

FALSE

string

inherit

string

The inheritance configuration for max_udp_size field from View object.

FALSE

string

inherit

string

The inheritance configuration for notify field from View object.

FALSE

string

inherit

string

The inheritance configuration for gss_tsig_enabled field from View object.

FALSE

string

inherit

string

The inheritance configuration for add_edns_option_in_outgoing_query field from View object.

FALSE

string

inherit

string

The inheritance configuration for synthesize_address_records_from_https field from View object.

FALSE

string

inherit

string

The tags for the DNS View in JSON format.

FALSE

expandtags

integer

It represents the edns UDP size.
The size a querying DNS server advertises to the DNS server it’s sending a query to.

FALSE

string

integer

It represents maximum UDP payload size.The maximum number of bytes a responding DNS server will send to a UDP datagram.

FALSE

string

boolean

Notify all external secondary DNS servers.
Defaults to false.

FALSE

string

boolean

The fields enables/disables GSS-TSIG signed dynamic updates.

FALSE

string

boolean

This field adds client IP, MAC address and view name into outgoing recursive query.

FALSE

string

boolean

This field enables/disables creation of A/AAAA records from HTTPS RR.

FALSE

string