Home | History | Annotate | Line # | Download | only in ns4 
      1 /*
      2  * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
      3  *
      4  * SPDX-License-Identifier: MPL-2.0
      5  *
      6  * This Source Code Form is subject to the terms of the Mozilla Public
      7  * License, v. 2.0.  If a copy of the MPL was not distributed with this
      8  * file, you can obtain one at https://mozilla.org/MPL/2.0/.
      9  *
     10  * See the COPYRIGHT file distributed with this work for additional
     11  * information regarding copyright ownership.
     12  */
     13 {% set maxdelegationservers = maxdelegationservers | default(None) %}
     14 
     15 options {
     16 	query-source address 10.53.0.4;
     17 	notify-source 10.53.0.4;
     18 	transfer-source 10.53.0.4;
     19 	port @PORT@;
     20 	pid-file "named.pid";
     21 	listen-on { 10.53.0.4; };
     22 	recursion yes;
     23 	dnssec-validation no;
     24 	dnstap { resolver query; };
     25 	dnstap-output file "dnstap.out";
     26 	{% if maxdelegationservers %}
     27         @maxdelegationservers@
     28 	{% endif %}
     29 };
     30 
     31 /*
     32  * Forcing TCP ensures that ADDITIONAL won't be truncated (responses won't have
     33  * the TC flag, hence the resolver won't retry using TCP by itself, see
     34  * https://datatracker.ietf.org/doc/html/rfc2181#section-9)
     35  */
     36 server 10.53.0.3 { tcp-only true; };
     37 server 10.53.0.5 { tcp-only true; };
     38 server 10.53.0.6 { tcp-only true; };
     39 server 10.53.0.7 { tcp-only true; };
     40 server 10.53.0.8 { tcp-only true; };
     41 server 10.53.0.9 { tcp-only true; };
     42 server 10.53.0.10 { tcp-only true; };
     43 server 10.53.1.1 { tcp-only true; };
     44 server 10.53.1.2 { tcp-only true; };
     45 server 10.53.2.1 { tcp-only true; };
     46 
     47 zone "." {
     48 	type hint;
     49 	file "root.hint";
     50 };
     51 
     52 key rndc_key {
     53 	secret "1234abcd8765";
     54 	algorithm @DEFAULT_HMAC@;
     55 };
     56 
     57 controls {
     58 	inet 10.53.0.4 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
     59 };
     60