1/* 2 * Copyright (C) 2005, 2007, 2010-2014 Internet Systems Consortium, Inc. ("ISC") 3 * 4 * Permission to use, copy, modify, and/or distribute this software for any 5 * purpose with or without fee is hereby granted, provided that the above 6 * copyright notice and this permission notice appear in all copies. 7 * 8 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 9 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 10 * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 11 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 12 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 13 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 14 * PERFORMANCE OF THIS SOFTWARE. 15 */ 16 17/* 18 * This is just a random selection of configuration options. 19 */ 20 21/* cut here */ 22options { 23 avoid-v4-udp-ports { 24 100; 25 }; 26 avoid-v6-udp-ports { 27 100; 28 }; 29 blackhole { 30 10.0.0.0/8; 31 }; 32 coresize 1073741824; 33 datasize 104857600; 34 deallocate-on-exit yes; 35 directory "."; 36 dscp 41; 37 dump-file "named_dumpdb"; 38 fake-iquery yes; 39 files 1000; 40 has-old-clients no; 41 heartbeat-interval 30; 42 host-statistics yes; 43 host-statistics-max 100; 44 hostname none; 45 interface-interval 30; 46 listen-on port 90 { 47 "any"; 48 }; 49 listen-on port 100 dscp 33 { 50 127.0.0.1/32; 51 }; 52 listen-on-v6 port 53 dscp 57 { 53 "none"; 54 }; 55 match-mapped-addresses yes; 56 memstatistics-file "named.memstats"; 57 multiple-cnames no; 58 named-xfer "this is no longer needed"; 59 pid-file none; 60 port 5300; 61 querylog yes; 62 recursing-file "named.recursing"; 63 random-device "/dev/random"; 64 recursive-clients 3000; 65 serial-queries 10; 66 serial-query-rate 100; 67 server-id none; 68 max-cache-size 20000000000000; 69 transfer-source 0.0.0.0 dscp 63; 70 zone-statistics none; 71}; 72view "first" { 73 match-clients { 74 "none"; 75 }; 76 zone "example1" { 77 type master; 78 file "xxx"; 79 update-policy local; 80 notify-source 10.10.10.10 port 53 dscp 55; 81 }; 82 zone "clone" { 83 type master; 84 file "yyy"; 85 }; 86 dnssec-lookaside auto; 87 dnssec-validation auto; 88 zone-statistics terse; 89}; 90view "second" { 91 match-clients { 92 "any"; 93 }; 94 zone "example1" { 95 type master; 96 file "zzz"; 97 update-policy local; 98 zone-statistics yes; 99 }; 100 zone "example2" { 101 type static-stub; 102 forward only; 103 forwarders { 104 10.53.0.4; 105 }; 106 zone-statistics no; 107 }; 108 zone "clone" { 109 in-view "first"; 110 }; 111 zone "." { 112 type redirect; 113 masters { 114 1.2.3.4 ; 115 }; 116 }; 117 dnssec-lookaside "." trust-anchor "dlv.isc.org."; 118 dnssec-validation auto; 119 zone-statistics full; 120}; 121view "third" { 122 match-clients { 123 "none"; 124 }; 125 zone "clone" { 126 in-view "first"; 127 forward only; 128 forwarders { 129 10.0.0.100; 130 }; 131 }; 132 zone "dnssec" { 133 type master; 134 file "file"; 135 auto-dnssec maintain; 136 }; 137 allow-update { 138 "any"; 139 }; 140}; 141view "chaos" chaos { 142 zone "hostname.bind" chaos { 143 type master; 144 database "_builtin hostname"; 145 }; 146}; 147key "mykey" { 148 algorithm "hmac-md5"; 149 secret "qwertyuiopasdfgh"; 150}; 151