vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

dns: improve CLI commands by adding missing parameters

Browse Source
This commit is contained in:
Christian Poessinger 2021-10-13 09:32:14 +02:00
parent f51f769c62
commit 90172aca00
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
docs/configuration/service/dns.rst
View File

@ -94,16 +94,19 @@ avoid being tracked by the provider of your upstream DNS server.
Maximum number of DNS cache entries. 1 million per CPU core will generally Maximum number of DNS cache entries. 1 million per CPU core will generally
suffice for most installations. suffice for most installations.
.. cfgcmd:: set service dns forwarding negative-ttl This defaults to 10000.
.. cfgcmd:: set service dns forwarding negative-ttl <0-7200>
A query for which there is authoritatively no answer is cached to quickly A query for which there is authoritatively no answer is cached to quickly
deny a record's existence later on, without putting a heavy load on the deny a record's existence later on, without putting a heavy load on the
remote server. In practice, caches can become saturated with hundreds of remote server. In practice, caches can become saturated with hundreds of
thousands of hosts which are tried only once. This setting, which defaults thousands of hosts which are tried only once.
to 3600 seconds, puts a maximum on the amount of time negative entries are
cached.
.. cfgcmd:: set service dns forwarding listen-address This setting, which defaults to 3600 seconds, puts a maximum on the amount
of time negative entries are cached.
.. cfgcmd:: set service dns forwarding listen-address <address>
The local IPv4 or IPv6 addresses to bind the DNS forwarder to. The forwarder The local IPv4 or IPv6 addresses to bind the DNS forwarder to. The forwarder
will listen on this address for incoming connections. will listen on this address for incoming connections.
@ -111,7 +114,7 @@ avoid being tracked by the provider of your upstream DNS server.
.. cfgcmd:: set service dns forwarding no-serve-rfc1918 .. cfgcmd:: set service dns forwarding no-serve-rfc1918
This makes the server authoritatively not aware of: 10.in-addr.arpa, This makes the server authoritatively not aware of: 10.in-addr.arpa,
168.192.in-addr.arpa, 16-31.172.in-addr.arpa, which enabling upstream 168.192.in-addr.arpa, 16-31.172.in-addr.arpa, which enabling upstream
DNS server(s) to be used for reverse lookups of these zones. DNS server(s) to be used for reverse lookups of these zones.
Example Example