bind之named.conf 详解

1acl acl-name {
2    address_match_list;
3}

1controls {
2   [ inet ( ip_addr | * ) [ port ip_port ] allow {  address_match_list  }
3                keys { key_list }; ]
4   [ inet ...; ]
5   [ unix path perm number owner number group number keys { key_list }; ]
6   [ unix ...; ]
7};

1语法: include filename;

1key key_id {
2    algorithm string;
3    secret string;
4};

 1logging {
 2   [ channel channel_name {
 3     ( file path name [ versions ( number | unlimited ) ]
 4         [ size size spec ]
 5       | syslog syslog_facility | stderr | null );
 6     [ severity (critical|error|warning|notice|info|debug[ level ] |dynamic); ]
 7     [ print-category yesorno; ]
 8     [ print-severity yesorno; ]
 9     [ print-time yesorno; ]
10   }; ]
11   [ category category_name { channel_name ; [ channel_name ; ... ]
12   }; ]
13   ...
14};

1{
2    [ listen-on { ip_addr [port ip_port] ; [ ip_addr [port ip_port] ; ... ] }; ]
3    [ view view_name; ]
4    [ search { domain_name ; [ domain_name ; ... ] }; ]
5    [ ndots number; ]
6};

  1options {
  2    [ version version_string; ]
  3    [ hostname hostname_string; ]
  4    [ server-id server_id_string; ]
  5    [ directory path_name; ]
  6    [ key-directory path_name; ]
  7    [ named-xfer path_name; ]
  8    [ tkey-domain domainname; ]
  9    [ tkey-dhkey key_name key_tag; ]
 10    [ cache-file path_name; ]
 11    [ dump-file path_name; ]
 12    [ memstatistics-file path_name; ]
 13    [ pid-file path_name; ]
 14    [ statistics-file path_name; ]
 15    [ zone-statistics yes_or_no; ]
 16    [ auth-nxdomain yes_or_no; ]
 17    [ deallocate-on-exit yes_or_no; ]
 18    [ dialup dialup_option; ]
 19    [ fake-iquery yes_or_no; ]
 20    [ fetch-glue yes_or_no; ]
 21    [ flush-zones-on-shutdown yes_or_no; ]
 22    [ has-old-clients yes_or_no; ]
 23    [ host-statistics yes_or_no; ]
 24    [ host-statistics-max number; ]
 25    [ minimal-responses yes_or_no; ]
 26    [ multiple-cnames yes_or_no; ]
 27    [ notify yes_or_no | explicit | master-only; ]
 28    [ recursion yes_or_no; ]
 29    [ rfc2308-type1 yes_or_no; ]
 30    [ use-id-pool yes_or_no; ]
 31    [ maintain-ixfr-base yes_or_no; ]
 32    [ dnssec-enable yes_or_no; ]
 33    [ dnssec-validation yes_or_no; ]
 34    [ dnssec-lookaside domain trust-anchor domain; ]
 35    [ dnssec-must-be-secure domain yes_or_no; ]
 36    [ dnssec-accept-expired yes_or_no; ]
 37    [ forward ( only | first ); ]
 38    [ forwarders { [ ip_addr [port ip_port] ; ... ] }; ]
 39    [ dual-stack-servers [port ip_port] {
 40        ( domain_name [port ip_port] |
 41          ip_addr [port ip_port] ) ;
 42        ... }; ]
 43    [ check-names ( master | slave | response )
 44        ( warn | fail | ignore ); ]
 45    [ check-mx ( warn | fail | ignore ); ]
 46    [ check-wildcard yes_or_no; ]
 47    [ check-integrity yes_or_no; ]
 48    [ check-mx-cname ( warn | fail | ignore ); ]
 49    [ check-srv-cname ( warn | fail | ignore ); ]
 50    [ check-sibling yes_or_no; ]
 51    [ allow-notify { address_match_list }; ]
 52    [ allow-query { address_match_list }; ]
 53    [ allow-query-cache { address_match_list }; ]
 54    [ allow-transfer { address_match_list }; ]
 55    [ allow-recursion { address_match_list }; ]
 56    [ allow-update { address_match_list }; ]
 57    [ allow-update-forwarding { address_match_list }; ]
 58    [ update-check-ksk yes_or_no; ]
 59    [ allow-v6-synthesis { address_match_list }; ]
 60    [ blackhole { address_match_list }; ]
 61    [ avoid-v4-udp-ports { port_list }; ]
 62    [ avoid-v6-udp-ports { port_list }; ]
 63    [ listen-on [ port ip_port ] { address_match_list }; ]
 64    [ listen-on-v6 [ port ip_port ] { address_match_list }; ]
 65    [ query-source ( ( ip4_addr | * )
 66        [ port ( ip_port | * ) ] |
 67        [ address ( ip4_addr | * ) ]
 68        [ port ( ip_port | * ) ] ) ; ]
 69    [ query-source-v6 ( ( ip6_addr | * )
 70        [ port ( ip_port | * ) ] |
 71        [ address ( ip6_addr | * ) ]
 72        [ port ( ip_port | * ) ] ) ; ]
 73    [ max-transfer-time-in number; ]
 74    [ max-transfer-time-out number; ]
 75    [ max-transfer-idle-in number; ]
 76    [ max-transfer-idle-out number; ]
 77    [ tcp-clients number; ]
 78    [ recursive-clients number; ]
 79    [ serial-query-rate number; ]
 80    [ serial-queries number; ]
 81    [ tcp-listen-queue number; ]
 82    [ transfer-format ( one-answer | many-answers ); ]
 83    [ transfers-in  number; ]
 84    [ transfers-out number; ]
 85    [ transfers-per-ns number; ]
 86    [ transfer-source (ip4_addr | *) [port ip_port] ; ]
 87    [ transfer-source-v6 (ip6_addr | *) [port ip_port] ; ]
 88    [ alt-transfer-source (ip4_addr | *) [port ip_port] ; ]
 89    [ alt-transfer-source-v6 (ip6_addr | *) [port ip_port] ; ]
 90    [ use-alt-transfer-source yes_or_no; ]
 91    [ notify-source (ip4_addr | *) [port ip_port] ; ]
 92    [ notify-source-v6 (ip6_addr | *) [port ip_port] ; ]
 93    [ also-notify { ip_addr [port ip_port] ; [ ip_addr [port ip_port] ; ... ] }; ]
 94    [ max-ixfr-log-size number; ]
 95    [ max-journal-size size_spec; ]
 96    [ coresize size_spec ; ]
 97    [ datasize size_spec ; ]
 98    [ files size_spec ; ]
 99    [ stacksize size_spec ; ]
100    [ cleaning-interval number; ]
101    [ heartbeat-interval number; ]
102    [ interface-interval number; ]
103    [ statistics-interval number; ]
104    [ topology { address_match_list }];
105    [ sortlist { address_match_list }];
106    [ rrset-order { order_spec ; [ order_spec ; ... ] ] };
107    [ lame-ttl number; ]
108    [ max-ncache-ttl number; ]
109    [ max-cache-ttl number; ]
110    [ sig-validity-interval number ; ]
111    [ min-roots number; ]
112    [ use-ixfr yes_or_no ; ]
113    [ provide-ixfr yes_or_no; ]
114    [ request-ixfr yes_or_no; ]
115    [ treat-cr-as-space yes_or_no ; ]
116    [ min-refresh-time number ; ]
117    [ max-refresh-time number ; ]
118    [ min-retry-time number ; ]
119    [ max-retry-time number ; ]
120    [ port ip_port; ]
121    [ additional-from-auth yes_or_no ; ]
122    [ additional-from-cache yes_or_no ; ]
123    [ random-device path_name ; ]
124    [ max-cache-size size_spec ; ]
125    [ match-mapped-addresses yes_or_no; ]
126    [ preferred-glue ( A | AAAA | NONE ); ]
127    [ edns-udp-size number; ]
128    [ max-udp-size number; ]
129    [ root-delegation-only [ exclude { namelist } ] ; ]
130    [ querylog yes_or_no ; ]
131    [ disable-algorithms domain { algorithm; [ algorithm; ] }; ]
132    [ acache-enable yes_or_no ; ]
133    [ acache-cleaning-interval number; ]
134    [ max-acache-size size_spec ; ]
135    [ clients-per-query number ; ]
136    [ max-clients-per-query number ; ]
137    [ masterfile-format (text|raw) ; ]
138    [ empty-server name ; ]
139    [ empty-contact name ; ]
140    [ empty-zones-enable yes_or_no ; ]
141    [ disable-empty-zone zone_name ; ]
142    [ zero-no-soa-ttl yes_or_no ; ]
143    [ zero-no-soa-ttl-cache yes_or_no ; ]
144};