servers (dnsconfig)

string

The primary identifier of the header stating the type of object.

TRUE

string

string

The primary identifier of an individual object.
For DNS Server, the name of the server object (Configuration) is used as the key.

TRUE

string

string

The name of the configuration.

TRUE

string

string

The comment for the configuration.

FALSE

string

integer

The source port for outbound DNS queries.
When set to 0, the port is unspecified and the implementation may randomize it by using any available port.
Defaults to 0.

FALSE

string

integer

The maximum number of concurrent outbound SOA queries.
When set to 0, a host-dependent default will be used. Defaults to 0.

FALSE

string

integer

The maximum number of concurrent inbound AXFRs.
When set to 0, a host-dependent default will be used.
Defaults to 0.

FALSE

string

array

To make authoritative queries, clients must match this ACL.
Also used for recursive queries, if that ACL is unset.
Defaults to empty.

FALSE

nios

element

access

address

acl

tsig_key

tsig_name

tsig_comment

tsig_algorithm

tsig_secret

boolean

When enabled, the DNS server will only add records to the authority and additional data sections when they are required.
Defaults to "false".

FALSE

string

array

To receive zone transfers, clients must match this ACL.
Defaults to empty.

FALSE

nios

element

access

address

acl

tsig_key

tsig_name

tsig_comment

tsig_algorithm

tsig_secret

boolean

Indicates whether recursive DNS queries are allowed.
Defaults to "true".

FALSE

string

array

To make recursive queries, clients must match this ACL. If this ACL is empty, then query_acl will be used, instead.
Defaults to empty.

FALSE

nios

element

access

address

acl

tsig_key

tsig_name

tsig_comment

tsig_algorithm

tsig_secret

integer

Seconds before a recursive query times out.
Varies from 10 to 30.
Defaults to 10.

FALSE

string

integer

Not used in the current implementation of the on-prem DNS server.
Varies from 0 to 1 hour (3600).
Defaults to 600.

FALSE

string

integer

Seconds to cache positive responses.
Varies from 1 to 7 days (604800).
Defaults to 604800 (7 days).

FALSE

string

integer

Seconds to cache negative responses.
Varies from 1 to 7 days (604800).
Defaults to 10800 (3 hours).

FALSE

string

boolean

Indicates whether custom root nameservers are to be used instead of the default ones.
When this is enabled, custom_root_ns is validated.
Alex: please check the edit
Defaults to "false".

FALSE

string

array

The list of custom root nameservers. The order does not matter.
Error if empty while custom_root_ns_enabled is "true".
Error if there are duplicate items in the list.
Defaults to empty.

FALSE

nios

root_ns_fqdn

root_ns_address

boolean

Set to "true" to only forward.
Defaults to "false".

FALSE

string

array

The list of forwarders.
Error if empty while forwarders_only or use_root_forwarders_for_local_resolution_with_b1td is "true".
Error if the list contains duplicate addresses.
Defaults to empty.

FALSE

nios

forwarder_fqdn

forwarder_address

boolean

Set to "true" to enable EDNS client subnet for recursive queries.
Other ecs_* fields are ignored if this field is not enabled.
Defaults to "false".

FALSE

string

boolean

Set to "true" to enable ECS options in outbound queries. This functionality has additional overhead, so it is disabled by default.
Defaults to "false".

FALSE

string

integer

Maximum scope length for v4 ECS.
Varies from 1 to 24.
Defaults to 24.

FALSE

string

integer

Maximum scope length for v6 ECS.
Varies from 1 to 56.
Defaults to 56.

FALSE

string

array

The list of zones where ECS queries may be sent.
Error if empty while ecs_enabled_ is "true".
Error if there are duplicate FQDNs in the list.
Defaults to empty.

FALSE

nios

ecs_zone_fqdn

ecs_zone_access

boolean

The master toggle for all DNSSEC processing.
If this is disabled, other dnssec_*_ configuration is not used.
Defaults to "true".

FALSE

string

boolean

Set to "true" to perform DNSSEC validation.
Ignored if dnssec_enabled is "false".
Defaults to "true".

FALSE

string

boolean

Set to "true" to reject expired DNSSEC keys.
Ignored if either dnssec_enabled or dnssec_enable_validation is "false".
Defaults to "true".

FALSE

string

array

DNSSEC root keys. The root keys are not configurable.

FALSE

nios

trust_anchor_zone

trust_anchor_sep

trust_anchor_algorithm

trust_anchor_public_key

string

The inheritance configuration for the query_port field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the secondary_soa_query_limit field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the secondary_axfr_query_limit field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the minimal_responses field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the recursion_enabled field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the resolver_query_timeout field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the lame_ttl field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the max_cache_ttl field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the max_negative_ttl field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the query_acl field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the transfer_acl field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the recursion_acl field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the custom_root_ns_block field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the forwarders_block field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the ecs_block field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the dnssec_validation_block field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the use_forwarders_for_subzones field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the update_acl field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the match_recursive_only field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the log_queries_response field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the recursive_clients field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the notify field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the gss_tsig_enabled field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the kerberos_keys field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the add_edns_option_in_outgoing_query field of a Server object.

FALSE

string

inherit

string

The inheritance configuration for the synthesize_address_records_from_https field of a Server object.

FALSE

string

inherit

string

The tags for the DNS Config profile, in JSON format.

FALSE

expandtags

{}

boolean

Use default forwarders to resolve queries for subzones.
Defaults to "true".

FALSE

string

array

Specifies which hosts are allowed to issue Dynamic DNS updates for authoritative zones of the primary_type cloud.
Defaults to empty.

FALSE

nios

element

access

address

acl

tsig_key

tsig_name

tsig_comment

tsig_algorithm

tsig_secret

array

The ordered list of dns/display_view objects served by any DNS/host assigned to a particular DNS Config profile.
Determined automatically. Allows reordering only.

FALSE

nios

view

name

comment

boolean

Controls the order of manual and automatic views.
Defaults to "true".

FALSE

string

boolean

If "true", then only recursive queries from matching clients can access the view.
Defaults to "true".

FALSE

string

boolean

Controls the functionality for logging DNS queries and responses.
Defaults to "true".

FALSE

string

integer

Defines the number of simultaneous recursive lookups the server will perform on behalf of its clients.
Defaults to 1000.

FALSE

string

boolean

Notify all external secondary DNS servers.
Defaults to "false".

FALSE

string

boolean

gss_tsig_enabled enables or disables GSS-TSIG signed dynamic updates.
Defaults to "false".

FALSE

string

array

kerberos_keys contains a list of keys for GSS-TSIG signed dynamic updates.
Defaults to empty.

FALSE

stringarray

boolean

add_edns_option_in_outgoing_query adds the client IP, MAC address, and view name into the outgoing recursive query.
Defaults to "false".

FALSE

string

boolean

synthesize_address_records_from_https enables or disables creation of A/AAAA records from HTTPS RR.
Defaults to "false".

FALSE

string