"Fossies" - the Fresh Open Source Software Archive

Member "bind-9.16.7/doc/misc/options" (4 Sep 2020, 46087 Bytes) of package /linux/misc/dns/bind9/9.16.7/bind-9.16.7.tar.xz:


As a special service "Fossies" has tried to format the requested text file into HTML format (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file. See also the latest Fossies "Diffs" side-by-side code changes report for "options": 9.16.6_vs_9.16.7.

    1 
    2 This is a summary of the named.conf options supported by
    3 this version of BIND 9.
    4 
    5 acl <string> { <address_match_element>; ... }; // may occur multiple times
    6 
    7 controls {
    8         inet ( <ipv4_address> | <ipv6_address> |
    9             * ) [ port ( <integer> | * ) ] allow
   10             { <address_match_element>; ... } [
   11             keys { <string>; ... } ] [ read-only
   12             <boolean> ]; // may occur multiple times
   13         unix <quoted_string> perm <integer>
   14             owner <integer> group <integer> [
   15             keys { <string>; ... } ] [ read-only
   16             <boolean> ]; // may occur multiple times
   17 }; // may occur multiple times
   18 
   19 dlz <string> {
   20         database <string>;
   21         search <boolean>;
   22 }; // may occur multiple times
   23 
   24 dnssec-policy <string> {
   25         dnskey-ttl <duration>;
   26         keys { ( csk | ksk | zsk ) [ ( key-directory ) ] lifetime
   27             <duration_or_unlimited> algorithm <string> [ <integer> ]; ... };
   28         max-zone-ttl <duration>;
   29         parent-ds-ttl <duration>;
   30         parent-propagation-delay <duration>;
   31         parent-registration-delay <duration>; // obsolete
   32         publish-safety <duration>;
   33         retire-safety <duration>;
   34         signatures-refresh <duration>;
   35         signatures-validity <duration>;
   36         signatures-validity-dnskey <duration>;
   37         zone-propagation-delay <duration>;
   38 }; // may occur multiple times
   39 
   40 dyndb <string> <quoted_string> {
   41     <unspecified-text> }; // may occur multiple times
   42 
   43 key <string> {
   44         algorithm <string>;
   45         secret <string>;
   46 }; // may occur multiple times
   47 
   48 logging {
   49         category <string> { <string>; ... }; // may occur multiple times
   50         channel <string> {
   51                 buffered <boolean>;
   52                 file <quoted_string> [ versions ( unlimited | <integer> ) ]
   53                     [ size <size> ] [ suffix ( increment | timestamp ) ];
   54                 null;
   55                 print-category <boolean>;
   56                 print-severity <boolean>;
   57                 print-time ( iso8601 | iso8601-utc | local | <boolean> );
   58                 severity <log_severity>;
   59                 stderr;
   60                 syslog [ <syslog_facility> ];
   61         }; // may occur multiple times
   62 };
   63 
   64 lwres { <unspecified-text> }; // obsolete, may occur multiple times
   65 
   66 managed-keys { <string> ( static-key
   67     | initial-key | static-ds |
   68     initial-ds ) <integer> <integer>
   69     <integer> <quoted_string>; ... }; // may occur multiple times, deprecated
   70 
   71 masters <string> [ port <integer> ] [ dscp
   72     <integer> ] { ( <masters> | <ipv4_address> [
   73     port <integer> ] | <ipv6_address> [ port
   74     <integer> ] ) [ key <string> ]; ... }; // may occur multiple times
   75 
   76 options {
   77         acache-cleaning-interval <integer>; // obsolete
   78         acache-enable <boolean>; // obsolete
   79         additional-from-auth <boolean>; // obsolete
   80         additional-from-cache <boolean>; // obsolete
   81         allow-new-zones <boolean>;
   82         allow-notify { <address_match_element>; ... };
   83         allow-query { <address_match_element>; ... };
   84         allow-query-cache { <address_match_element>; ... };
   85         allow-query-cache-on { <address_match_element>; ... };
   86         allow-query-on { <address_match_element>; ... };
   87         allow-recursion { <address_match_element>; ... };
   88         allow-recursion-on { <address_match_element>; ... };
   89         allow-transfer { <address_match_element>; ... };
   90         allow-update { <address_match_element>; ... };
   91         allow-update-forwarding { <address_match_element>; ... };
   92         allow-v6-synthesis { <address_match_element>; ... }; // obsolete
   93         also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |
   94             <ipv4_address> [ port <integer> ] | <ipv6_address> [ port
   95             <integer> ] ) [ key <string> ]; ... };
   96         alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )
   97             ] [ dscp <integer> ];
   98         alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
   99             * ) ] [ dscp <integer> ];
  100         answer-cookie <boolean>;
  101         attach-cache <string>;
  102         auth-nxdomain <boolean>; // default changed
  103         auto-dnssec ( allow | maintain | off );
  104         automatic-interface-scan <boolean>;
  105         avoid-v4-udp-ports { <portrange>; ... };
  106         avoid-v6-udp-ports { <portrange>; ... };
  107         bindkeys-file <quoted_string>;
  108         blackhole { <address_match_element>; ... };
  109         cache-file <quoted_string>;
  110         catalog-zones { zone <string> [ default-masters [ port <integer> ]
  111             [ dscp <integer> ] { ( <masters> | <ipv4_address> [ port
  112             <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
  113             <string> ]; ... } ] [ zone-directory <quoted_string> ] [
  114             in-memory <boolean> ] [ min-update-interval <duration> ]; ... };
  115         check-dup-records ( fail | warn | ignore );
  116         check-integrity <boolean>;
  117         check-mx ( fail | warn | ignore );
  118         check-mx-cname ( fail | warn | ignore );
  119         check-names ( primary | master |
  120             secondary | slave | response ) (
  121             fail | warn | ignore ); // may occur multiple times
  122         check-sibling <boolean>;
  123         check-spf ( warn | ignore );
  124         check-srv-cname ( fail | warn | ignore );
  125         check-wildcard <boolean>;
  126         cleaning-interval <integer>; // obsolete
  127         clients-per-query <integer>;
  128         cookie-algorithm ( aes | siphash24 );
  129         cookie-secret <string>; // may occur multiple times
  130         coresize ( default | unlimited | <sizeval> );
  131         datasize ( default | unlimited | <sizeval> );
  132         deallocate-on-exit <boolean>; // ancient
  133         deny-answer-addresses { <address_match_element>; ... } [
  134             except-from { <string>; ... } ];
  135         deny-answer-aliases { <string>; ... } [ except-from { <string>; ...
  136             } ];
  137         dialup ( notify | notify-passive | passive | refresh | <boolean> );
  138         directory <quoted_string>;
  139         disable-algorithms <string> { <string>;
  140             ... }; // may occur multiple times
  141         disable-ds-digests <string> { <string>;
  142             ... }; // may occur multiple times
  143         disable-empty-zone <string>; // may occur multiple times
  144         dns64 <netprefix> {
  145                 break-dnssec <boolean>;
  146                 clients { <address_match_element>; ... };
  147                 exclude { <address_match_element>; ... };
  148                 mapped { <address_match_element>; ... };
  149                 recursive-only <boolean>;
  150                 suffix <ipv6_address>;
  151         }; // may occur multiple times
  152         dns64-contact <string>;
  153         dns64-server <string>;
  154         dnskey-sig-validity <integer>;
  155         dnsrps-enable <boolean>; // not configured
  156         dnsrps-options { <unspecified-text> }; // not configured
  157         dnssec-accept-expired <boolean>;
  158         dnssec-dnskey-kskonly <boolean>;
  159         dnssec-enable <boolean>; // obsolete
  160         dnssec-loadkeys-interval <integer>;
  161         dnssec-lookaside ( <string>
  162             trust-anchor <string> |
  163             auto | no ); // obsolete, may occur multiple times
  164         dnssec-must-be-secure <string> <boolean>; // may occur multiple times
  165         dnssec-policy <string>;
  166         dnssec-secure-to-insecure <boolean>;
  167         dnssec-update-mode ( maintain | no-resign );
  168         dnssec-validation ( yes | no | auto );
  169         dnstap { ( all | auth | client | forwarder |
  170             resolver | update ) [ ( query | response ) ];
  171             ... }; // not configured
  172         dnstap-identity ( <quoted_string> | none |
  173             hostname ); // not configured
  174         dnstap-output ( file | unix ) <quoted_string> [
  175             size ( unlimited | <size> ) ] [ versions (
  176             unlimited | <integer> ) ] [ suffix ( increment
  177             | timestamp ) ]; // not configured
  178         dnstap-version ( <quoted_string> | none ); // not configured
  179         dscp <integer>;
  180         dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
  181             <integer> ] [ dscp <integer> ] | <ipv4_address> [ port
  182             <integer> ] [ dscp <integer> ] | <ipv6_address> [ port
  183             <integer> ] [ dscp <integer> ] ); ... };
  184         dump-file <quoted_string>;
  185         edns-udp-size <integer>;
  186         empty-contact <string>;
  187         empty-server <string>;
  188         empty-zones-enable <boolean>;
  189         fake-iquery <boolean>; // ancient
  190         fetch-glue <boolean>; // ancient
  191         fetch-quota-params <integer> <fixedpoint> <fixedpoint> <fixedpoint>;
  192         fetches-per-server <integer> [ ( drop | fail ) ];
  193         fetches-per-zone <integer> [ ( drop | fail ) ];
  194         files ( default | unlimited | <sizeval> );
  195         filter-aaaa { <address_match_element>; ... }; // obsolete
  196         filter-aaaa-on-v4 <boolean>; // obsolete
  197         filter-aaaa-on-v6 <boolean>; // obsolete
  198         flush-zones-on-shutdown <boolean>;
  199         forward ( first | only );
  200         forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>
  201             | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };
  202         fstrm-set-buffer-hint <integer>; // not configured
  203         fstrm-set-flush-timeout <integer>; // not configured
  204         fstrm-set-input-queue-size <integer>; // not configured
  205         fstrm-set-output-notify-threshold <integer>; // not configured
  206         fstrm-set-output-queue-model ( mpsc | spsc ); // not configured
  207         fstrm-set-output-queue-size <integer>; // not configured
  208         fstrm-set-reopen-interval <duration>; // not configured
  209         geoip-directory ( <quoted_string> | none );
  210         geoip-use-ecs <boolean>; // obsolete
  211         glue-cache <boolean>;
  212         has-old-clients <boolean>; // ancient
  213         heartbeat-interval <integer>;
  214         host-statistics <boolean>; // ancient
  215         host-statistics-max <integer>; // ancient
  216         hostname ( <quoted_string> | none );
  217         inline-signing <boolean>;
  218         interface-interval <duration>;
  219         ixfr-from-differences ( primary | master | secondary | slave |
  220             <boolean> );
  221         keep-response-order { <address_match_element>; ... };
  222         key-directory <quoted_string>;
  223         lame-ttl <duration>;
  224         listen-on [ port <integer> ] [ dscp
  225             <integer> ] {
  226             <address_match_element>; ... }; // may occur multiple times
  227         listen-on-v6 [ port <integer> ] [ dscp
  228             <integer> ] {
  229             <address_match_element>; ... }; // may occur multiple times
  230         lmdb-mapsize <sizeval>;
  231         lock-file ( <quoted_string> | none );
  232         maintain-ixfr-base <boolean>; // ancient
  233         managed-keys-directory <quoted_string>;
  234         masterfile-format ( map | raw | text );
  235         masterfile-style ( full | relative );
  236         match-mapped-addresses <boolean>;
  237         max-acache-size ( unlimited | <sizeval> ); // obsolete
  238         max-cache-size ( default | unlimited | <sizeval> | <percentage> );
  239         max-cache-ttl <duration>;
  240         max-clients-per-query <integer>;
  241         max-ixfr-log-size ( default | unlimited | <sizeval> ); // ancient
  242         max-journal-size ( default | unlimited | <sizeval> );
  243         max-ncache-ttl <duration>;
  244         max-records <integer>;
  245         max-recursion-depth <integer>;
  246         max-recursion-queries <integer>;
  247         max-refresh-time <integer>;
  248         max-retry-time <integer>;
  249         max-rsa-exponent-size <integer>;
  250         max-stale-ttl <duration>;
  251         max-transfer-idle-in <integer>;
  252         max-transfer-idle-out <integer>;
  253         max-transfer-time-in <integer>;
  254         max-transfer-time-out <integer>;
  255         max-udp-size <integer>;
  256         max-zone-ttl ( unlimited | <duration> );
  257         memstatistics <boolean>;
  258         memstatistics-file <quoted_string>;
  259         message-compression <boolean>;
  260         min-cache-ttl <duration>;
  261         min-ncache-ttl <duration>;
  262         min-refresh-time <integer>;
  263         min-retry-time <integer>;
  264         min-roots <integer>; // ancient
  265         minimal-any <boolean>;
  266         minimal-responses ( no-auth | no-auth-recursive | <boolean> );
  267         multi-master <boolean>;
  268         multiple-cnames <boolean>; // ancient
  269         named-xfer <quoted_string>; // ancient
  270         new-zones-directory <quoted_string>;
  271         no-case-compress { <address_match_element>; ... };
  272         nocookie-udp-size <integer>;
  273         nosit-udp-size <integer>; // obsolete
  274         notify ( explicit | master-only | <boolean> );
  275         notify-delay <integer>;
  276         notify-rate <integer>;
  277         notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
  278             dscp <integer> ];
  279         notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]
  280             [ dscp <integer> ];
  281         notify-to-soa <boolean>;
  282         nsec3-test-zone <boolean>; // test only
  283         nta-lifetime <duration>;
  284         nta-recheck <duration>;
  285         nxdomain-redirect <string>;
  286         pid-file ( <quoted_string> | none );
  287         port <integer>;
  288         preferred-glue <string>;
  289         prefetch <integer> [ <integer> ];
  290         provide-ixfr <boolean>;
  291         qname-minimization ( strict | relaxed | disabled | off );
  292         query-source ( ( [ address ] ( <ipv4_address> | * ) [ port (
  293             <integer> | * ) ] ) | ( [ [ address ] ( <ipv4_address> | * ) ]
  294             port ( <integer> | * ) ) ) [ dscp <integer> ];
  295         query-source-v6 ( ( [ address ] ( <ipv6_address> | * ) [ port (
  296             <integer> | * ) ] ) | ( [ [ address ] ( <ipv6_address> | * ) ]
  297             port ( <integer> | * ) ) ) [ dscp <integer> ];
  298         querylog <boolean>;
  299         queryport-pool-ports <integer>; // obsolete
  300         queryport-pool-updateinterval <integer>; // obsolete
  301         random-device ( <quoted_string> | none );
  302         rate-limit {
  303                 all-per-second <integer>;
  304                 errors-per-second <integer>;
  305                 exempt-clients { <address_match_element>; ... };
  306                 ipv4-prefix-length <integer>;
  307                 ipv6-prefix-length <integer>;
  308                 log-only <boolean>;
  309                 max-table-size <integer>;
  310                 min-table-size <integer>;
  311                 nodata-per-second <integer>;
  312                 nxdomains-per-second <integer>;
  313                 qps-scale <integer>;
  314                 referrals-per-second <integer>;
  315                 responses-per-second <integer>;
  316                 slip <integer>;
  317                 window <integer>;
  318         };
  319         recursing-file <quoted_string>;
  320         recursion <boolean>;
  321         recursive-clients <integer>;
  322         request-expire <boolean>;
  323         request-ixfr <boolean>;
  324         request-nsid <boolean>;
  325         request-sit <boolean>; // obsolete
  326         require-server-cookie <boolean>;
  327         reserved-sockets <integer>;
  328         resolver-nonbackoff-tries <integer>;
  329         resolver-query-timeout <integer>;
  330         resolver-retry-interval <integer>;
  331         response-padding { <address_match_element>; ... } block-size
  332             <integer>;
  333         response-policy { zone <string> [ add-soa <boolean> ] [ log
  334             <boolean> ] [ max-policy-ttl <duration> ] [ min-update-interval
  335             <duration> ] [ policy ( cname | disabled | drop | given | no-op
  336             | nodata | nxdomain | passthru | tcp-only <quoted_string> ) ] [
  337             recursive-only <boolean> ] [ nsip-enable <boolean> ] [
  338             nsdname-enable <boolean> ]; ... } [ add-soa <boolean> ] [
  339             break-dnssec <boolean> ] [ max-policy-ttl <duration> ] [
  340             min-update-interval <duration> ] [ min-ns-dots <integer> ] [
  341             nsip-wait-recurse <boolean> ] [ qname-wait-recurse <boolean> ]
  342             [ recursive-only <boolean> ] [ nsip-enable <boolean> ] [
  343             nsdname-enable <boolean> ] [ dnsrps-enable <boolean> ] [
  344             dnsrps-options { <unspecified-text> } ];
  345         rfc2308-type1 <boolean>; // ancient
  346         root-delegation-only [ exclude { <string>; ... } ];
  347         root-key-sentinel <boolean>;
  348         rrset-order { [ class <string> ] [ type <string> ] [ name
  349             <quoted_string> ] <string> <string>; ... };
  350         secroots-file <quoted_string>;
  351         send-cookie <boolean>;
  352         serial-queries <integer>; // ancient
  353         serial-query-rate <integer>;
  354         serial-update-method ( date | increment | unixtime );
  355         server-id ( <quoted_string> | none | hostname );
  356         servfail-ttl <duration>;
  357         session-keyalg <string>;
  358         session-keyfile ( <quoted_string> | none );
  359         session-keyname <string>;
  360         sig-signing-nodes <integer>;
  361         sig-signing-signatures <integer>;
  362         sig-signing-type <integer>;
  363         sig-validity-interval <integer> [ <integer> ];
  364         sit-secret <string>; // obsolete
  365         sortlist { <address_match_element>; ... };
  366         stacksize ( default | unlimited | <sizeval> );
  367         stale-answer-enable <boolean>;
  368         stale-answer-ttl <duration>;
  369         stale-cache-enable <boolean>;
  370         startup-notify-rate <integer>;
  371         statistics-file <quoted_string>;
  372         statistics-interval <integer>; // ancient
  373         suppress-initial-notify <boolean>; // not yet implemented
  374         synth-from-dnssec <boolean>;
  375         tcp-advertised-timeout <integer>;
  376         tcp-clients <integer>;
  377         tcp-idle-timeout <integer>;
  378         tcp-initial-timeout <integer>;
  379         tcp-keepalive-timeout <integer>;
  380         tcp-listen-queue <integer>;
  381         tkey-dhkey <quoted_string> <integer>;
  382         tkey-domain <quoted_string>;
  383         tkey-gssapi-credential <quoted_string>;
  384         tkey-gssapi-keytab <quoted_string>;
  385         topology { <address_match_element>; ... }; // ancient
  386         transfer-format ( many-answers | one-answer );
  387         transfer-message-size <integer>;
  388         transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
  389             dscp <integer> ];
  390         transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )
  391             ] [ dscp <integer> ];
  392         transfers-in <integer>;
  393         transfers-out <integer>;
  394         transfers-per-ns <integer>;
  395         treat-cr-as-space <boolean>; // ancient
  396         trust-anchor-telemetry <boolean>; // experimental
  397         try-tcp-refresh <boolean>;
  398         update-check-ksk <boolean>;
  399         use-alt-transfer-source <boolean>;
  400         use-id-pool <boolean>; // ancient
  401         use-ixfr <boolean>; // obsolete
  402         use-queryport-pool <boolean>; // obsolete
  403         use-v4-udp-ports { <portrange>; ... };
  404         use-v6-udp-ports { <portrange>; ... };
  405         v6-bias <integer>;
  406         validate-except { <string>; ... };
  407         version ( <quoted_string> | none );
  408         zero-no-soa-ttl <boolean>;
  409         zero-no-soa-ttl-cache <boolean>;
  410         zone-statistics ( full | terse | none | <boolean> );
  411 };
  412 
  413 plugin ( query ) <string> [ { <unspecified-text>
  414     } ]; // may occur multiple times
  415 
  416 server <netprefix> {
  417         bogus <boolean>;
  418         edns <boolean>;
  419         edns-udp-size <integer>;
  420         edns-version <integer>;
  421         keys <server_key>;
  422         max-udp-size <integer>;
  423         notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
  424             dscp <integer> ];
  425         notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]
  426             [ dscp <integer> ];
  427         padding <integer>;
  428         provide-ixfr <boolean>;
  429         query-source ( ( [ address ] ( <ipv4_address> | * ) [ port (
  430             <integer> | * ) ] ) | ( [ [ address ] ( <ipv4_address> | * ) ]
  431             port ( <integer> | * ) ) ) [ dscp <integer> ];
  432         query-source-v6 ( ( [ address ] ( <ipv6_address> | * ) [ port (
  433             <integer> | * ) ] ) | ( [ [ address ] ( <ipv6_address> | * ) ]
  434             port ( <integer> | * ) ) ) [ dscp <integer> ];
  435         request-expire <boolean>;
  436         request-ixfr <boolean>;
  437         request-nsid <boolean>;
  438         request-sit <boolean>; // obsolete
  439         send-cookie <boolean>;
  440         support-ixfr <boolean>; // obsolete
  441         tcp-keepalive <boolean>;
  442         tcp-only <boolean>;
  443         transfer-format ( many-answers | one-answer );
  444         transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
  445             dscp <integer> ];
  446         transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )
  447             ] [ dscp <integer> ];
  448         transfers <integer>;
  449 }; // may occur multiple times
  450 
  451 statistics-channels {
  452         inet ( <ipv4_address> | <ipv6_address> |
  453             * ) [ port ( <integer> | * ) ] [
  454             allow { <address_match_element>; ...
  455             } ]; // may occur multiple times
  456 }; // may occur multiple times
  457 
  458 trust-anchors { <string> ( static-key |
  459     initial-key | static-ds | initial-ds )
  460     <integer> <integer> <integer>
  461     <quoted_string>; ... }; // may occur multiple times
  462 
  463 trusted-keys { <string> <integer>
  464     <integer> <integer>
  465     <quoted_string>; ... }; // may occur multiple times, deprecated
  466 
  467 view <string> [ <class> ] {
  468         acache-cleaning-interval <integer>; // obsolete
  469         acache-enable <boolean>; // obsolete
  470         additional-from-auth <boolean>; // obsolete
  471         additional-from-cache <boolean>; // obsolete
  472         allow-new-zones <boolean>;
  473         allow-notify { <address_match_element>; ... };
  474         allow-query { <address_match_element>; ... };
  475         allow-query-cache { <address_match_element>; ... };
  476         allow-query-cache-on { <address_match_element>; ... };
  477         allow-query-on { <address_match_element>; ... };
  478         allow-recursion { <address_match_element>; ... };
  479         allow-recursion-on { <address_match_element>; ... };
  480         allow-transfer { <address_match_element>; ... };
  481         allow-update { <address_match_element>; ... };
  482         allow-update-forwarding { <address_match_element>; ... };
  483         allow-v6-synthesis { <address_match_element>; ... }; // obsolete
  484         also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |
  485             <ipv4_address> [ port <integer> ] | <ipv6_address> [ port
  486             <integer> ] ) [ key <string> ]; ... };
  487         alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )
  488             ] [ dscp <integer> ];
  489         alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
  490             * ) ] [ dscp <integer> ];
  491         attach-cache <string>;
  492         auth-nxdomain <boolean>; // default changed
  493         auto-dnssec ( allow | maintain | off );
  494         cache-file <quoted_string>;
  495         catalog-zones { zone <string> [ default-masters [ port <integer> ]
  496             [ dscp <integer> ] { ( <masters> | <ipv4_address> [ port
  497             <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
  498             <string> ]; ... } ] [ zone-directory <quoted_string> ] [
  499             in-memory <boolean> ] [ min-update-interval <duration> ]; ... };
  500         check-dup-records ( fail | warn | ignore );
  501         check-integrity <boolean>;
  502         check-mx ( fail | warn | ignore );
  503         check-mx-cname ( fail | warn | ignore );
  504         check-names ( primary | master |
  505             secondary | slave | response ) (
  506             fail | warn | ignore ); // may occur multiple times
  507         check-sibling <boolean>;
  508         check-spf ( warn | ignore );
  509         check-srv-cname ( fail | warn | ignore );
  510         check-wildcard <boolean>;
  511         cleaning-interval <integer>; // obsolete
  512         clients-per-query <integer>;
  513         deny-answer-addresses { <address_match_element>; ... } [
  514             except-from { <string>; ... } ];
  515         deny-answer-aliases { <string>; ... } [ except-from { <string>; ...
  516             } ];
  517         dialup ( notify | notify-passive | passive | refresh | <boolean> );
  518         disable-algorithms <string> { <string>;
  519             ... }; // may occur multiple times
  520         disable-ds-digests <string> { <string>;
  521             ... }; // may occur multiple times
  522         disable-empty-zone <string>; // may occur multiple times
  523         dlz <string> {
  524                 database <string>;
  525                 search <boolean>;
  526         }; // may occur multiple times
  527         dns64 <netprefix> {
  528                 break-dnssec <boolean>;
  529                 clients { <address_match_element>; ... };
  530                 exclude { <address_match_element>; ... };
  531                 mapped { <address_match_element>; ... };
  532                 recursive-only <boolean>;
  533                 suffix <ipv6_address>;
  534         }; // may occur multiple times
  535         dns64-contact <string>;
  536         dns64-server <string>;
  537         dnskey-sig-validity <integer>;
  538         dnsrps-enable <boolean>; // not configured
  539         dnsrps-options { <unspecified-text> }; // not configured
  540         dnssec-accept-expired <boolean>;
  541         dnssec-dnskey-kskonly <boolean>;
  542         dnssec-enable <boolean>; // obsolete
  543         dnssec-loadkeys-interval <integer>;
  544         dnssec-lookaside ( <string>
  545             trust-anchor <string> |
  546             auto | no ); // obsolete, may occur multiple times
  547         dnssec-must-be-secure <string> <boolean>; // may occur multiple times
  548         dnssec-policy <string>;
  549         dnssec-secure-to-insecure <boolean>;
  550         dnssec-update-mode ( maintain | no-resign );
  551         dnssec-validation ( yes | no | auto );
  552         dnstap { ( all | auth | client | forwarder |
  553             resolver | update ) [ ( query | response ) ];
  554             ... }; // not configured
  555         dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
  556             <integer> ] [ dscp <integer> ] | <ipv4_address> [ port
  557             <integer> ] [ dscp <integer> ] | <ipv6_address> [ port
  558             <integer> ] [ dscp <integer> ] ); ... };
  559         dyndb <string> <quoted_string> {
  560             <unspecified-text> }; // may occur multiple times
  561         edns-udp-size <integer>;
  562         empty-contact <string>;
  563         empty-server <string>;
  564         empty-zones-enable <boolean>;
  565         fetch-glue <boolean>; // ancient
  566         fetch-quota-params <integer> <fixedpoint> <fixedpoint> <fixedpoint>;
  567         fetches-per-server <integer> [ ( drop | fail ) ];
  568         fetches-per-zone <integer> [ ( drop | fail ) ];
  569         filter-aaaa { <address_match_element>; ... }; // obsolete
  570         filter-aaaa-on-v4 <boolean>; // obsolete
  571         filter-aaaa-on-v6 <boolean>; // obsolete
  572         forward ( first | only );
  573         forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>
  574             | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };
  575         glue-cache <boolean>;
  576         inline-signing <boolean>;
  577         ixfr-from-differences ( primary | master | secondary | slave |
  578             <boolean> );
  579         key <string> {
  580                 algorithm <string>;
  581                 secret <string>;
  582         }; // may occur multiple times
  583         key-directory <quoted_string>;
  584         lame-ttl <duration>;
  585         lmdb-mapsize <sizeval>;
  586         maintain-ixfr-base <boolean>; // ancient
  587         managed-keys { <string> (
  588             static-key | initial-key
  589             | static-ds | initial-ds
  590             ) <integer> <integer>
  591             <integer>
  592             <quoted_string>; ... }; // may occur multiple times, deprecated
  593         masterfile-format ( map | raw | text );
  594         masterfile-style ( full | relative );
  595         match-clients { <address_match_element>; ... };
  596         match-destinations { <address_match_element>; ... };
  597         match-recursive-only <boolean>;
  598         max-acache-size ( unlimited | <sizeval> ); // obsolete
  599         max-cache-size ( default | unlimited | <sizeval> | <percentage> );
  600         max-cache-ttl <duration>;
  601         max-clients-per-query <integer>;
  602         max-ixfr-log-size ( default | unlimited | <sizeval> ); // ancient
  603         max-journal-size ( default | unlimited | <sizeval> );
  604         max-ncache-ttl <duration>;
  605         max-records <integer>;
  606         max-recursion-depth <integer>;
  607         max-recursion-queries <integer>;
  608         max-refresh-time <integer>;
  609         max-retry-time <integer>;
  610         max-stale-ttl <duration>;
  611         max-transfer-idle-in <integer>;
  612         max-transfer-idle-out <integer>;
  613         max-transfer-time-in <integer>;
  614         max-transfer-time-out <integer>;
  615         max-udp-size <integer>;
  616         max-zone-ttl ( unlimited | <duration> );
  617         message-compression <boolean>;
  618         min-cache-ttl <duration>;
  619         min-ncache-ttl <duration>;
  620         min-refresh-time <integer>;
  621         min-retry-time <integer>;
  622         min-roots <integer>; // ancient
  623         minimal-any <boolean>;
  624         minimal-responses ( no-auth | no-auth-recursive | <boolean> );
  625         multi-master <boolean>;
  626         new-zones-directory <quoted_string>;
  627         no-case-compress { <address_match_element>; ... };
  628         nocookie-udp-size <integer>;
  629         nosit-udp-size <integer>; // obsolete
  630         notify ( explicit | master-only | <boolean> );
  631         notify-delay <integer>;
  632         notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
  633             dscp <integer> ];
  634         notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]
  635             [ dscp <integer> ];
  636         notify-to-soa <boolean>;
  637         nsec3-test-zone <boolean>; // test only
  638         nta-lifetime <duration>;
  639         nta-recheck <duration>;
  640         nxdomain-redirect <string>;
  641         plugin ( query ) <string> [ {
  642             <unspecified-text> } ]; // may occur multiple times
  643         preferred-glue <string>;
  644         prefetch <integer> [ <integer> ];
  645         provide-ixfr <boolean>;
  646         qname-minimization ( strict | relaxed | disabled | off );
  647         query-source ( ( [ address ] ( <ipv4_address> | * ) [ port (
  648             <integer> | * ) ] ) | ( [ [ address ] ( <ipv4_address> | * ) ]
  649             port ( <integer> | * ) ) ) [ dscp <integer> ];
  650         query-source-v6 ( ( [ address ] ( <ipv6_address> | * ) [ port (
  651             <integer> | * ) ] ) | ( [ [ address ] ( <ipv6_address> | * ) ]
  652             port ( <integer> | * ) ) ) [ dscp <integer> ];
  653         queryport-pool-ports <integer>; // obsolete
  654         queryport-pool-updateinterval <integer>; // obsolete
  655         rate-limit {
  656                 all-per-second <integer>;
  657                 errors-per-second <integer>;
  658                 exempt-clients { <address_match_element>; ... };
  659                 ipv4-prefix-length <integer>;
  660                 ipv6-prefix-length <integer>;
  661                 log-only <boolean>;
  662                 max-table-size <integer>;
  663                 min-table-size <integer>;
  664                 nodata-per-second <integer>;
  665                 nxdomains-per-second <integer>;
  666                 qps-scale <integer>;
  667                 referrals-per-second <integer>;
  668                 responses-per-second <integer>;
  669                 slip <integer>;
  670                 window <integer>;
  671         };
  672         recursion <boolean>;
  673         request-expire <boolean>;
  674         request-ixfr <boolean>;
  675         request-nsid <boolean>;
  676         request-sit <boolean>; // obsolete
  677         require-server-cookie <boolean>;
  678         resolver-nonbackoff-tries <integer>;
  679         resolver-query-timeout <integer>;
  680         resolver-retry-interval <integer>;
  681         response-padding { <address_match_element>; ... } block-size
  682             <integer>;
  683         response-policy { zone <string> [ add-soa <boolean> ] [ log
  684             <boolean> ] [ max-policy-ttl <duration> ] [ min-update-interval
  685             <duration> ] [ policy ( cname | disabled | drop | given | no-op
  686             | nodata | nxdomain | passthru | tcp-only <quoted_string> ) ] [
  687             recursive-only <boolean> ] [ nsip-enable <boolean> ] [
  688             nsdname-enable <boolean> ]; ... } [ add-soa <boolean> ] [
  689             break-dnssec <boolean> ] [ max-policy-ttl <duration> ] [
  690             min-update-interval <duration> ] [ min-ns-dots <integer> ] [
  691             nsip-wait-recurse <boolean> ] [ qname-wait-recurse <boolean> ]
  692             [ recursive-only <boolean> ] [ nsip-enable <boolean> ] [
  693             nsdname-enable <boolean> ] [ dnsrps-enable <boolean> ] [
  694             dnsrps-options { <unspecified-text> } ];
  695         rfc2308-type1 <boolean>; // ancient
  696         root-delegation-only [ exclude { <string>; ... } ];
  697         root-key-sentinel <boolean>;
  698         rrset-order { [ class <string> ] [ type <string> ] [ name
  699             <quoted_string> ] <string> <string>; ... };
  700         send-cookie <boolean>;
  701         serial-update-method ( date | increment | unixtime );
  702         server <netprefix> {
  703                 bogus <boolean>;
  704                 edns <boolean>;
  705                 edns-udp-size <integer>;
  706                 edns-version <integer>;
  707                 keys <server_key>;
  708                 max-udp-size <integer>;
  709                 notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
  710                     ) ] [ dscp <integer> ];
  711                 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
  712                     | * ) ] [ dscp <integer> ];
  713                 padding <integer>;
  714                 provide-ixfr <boolean>;
  715                 query-source ( ( [ address ] ( <ipv4_address> | * ) [ port
  716                     ( <integer> | * ) ] ) | ( [ [ address ] (
  717                     <ipv4_address> | * ) ] port ( <integer> | * ) ) ) [
  718                     dscp <integer> ];
  719                 query-source-v6 ( ( [ address ] ( <ipv6_address> | * ) [
  720                     port ( <integer> | * ) ] ) | ( [ [ address ] (
  721                     <ipv6_address> | * ) ] port ( <integer> | * ) ) ) [
  722                     dscp <integer> ];
  723                 request-expire <boolean>;
  724                 request-ixfr <boolean>;
  725                 request-nsid <boolean>;
  726                 request-sit <boolean>; // obsolete
  727                 send-cookie <boolean>;
  728                 support-ixfr <boolean>; // obsolete
  729                 tcp-keepalive <boolean>;
  730                 tcp-only <boolean>;
  731                 transfer-format ( many-answers | one-answer );
  732                 transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
  733                     * ) ] [ dscp <integer> ];
  734                 transfer-source-v6 ( <ipv6_address> | * ) [ port (
  735                     <integer> | * ) ] [ dscp <integer> ];
  736                 transfers <integer>;
  737         }; // may occur multiple times
  738         servfail-ttl <duration>;
  739         sig-signing-nodes <integer>;
  740         sig-signing-signatures <integer>;
  741         sig-signing-type <integer>;
  742         sig-validity-interval <integer> [ <integer> ];
  743         sortlist { <address_match_element>; ... };
  744         stale-answer-enable <boolean>;
  745         stale-answer-ttl <duration>;
  746         stale-cache-enable <boolean>;
  747         suppress-initial-notify <boolean>; // not yet implemented
  748         synth-from-dnssec <boolean>;
  749         topology { <address_match_element>; ... }; // ancient
  750         transfer-format ( many-answers | one-answer );
  751         transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
  752             dscp <integer> ];
  753         transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )
  754             ] [ dscp <integer> ];
  755         trust-anchor-telemetry <boolean>; // experimental
  756         trust-anchors { <string> ( static-key |
  757             initial-key | static-ds | initial-ds
  758             ) <integer> <integer> <integer>
  759             <quoted_string>; ... }; // may occur multiple times
  760         trusted-keys { <string>
  761             <integer> <integer>
  762             <integer>
  763             <quoted_string>; ... }; // may occur multiple times, deprecated
  764         try-tcp-refresh <boolean>;
  765         update-check-ksk <boolean>;
  766         use-alt-transfer-source <boolean>;
  767         use-queryport-pool <boolean>; // obsolete
  768         v6-bias <integer>;
  769         validate-except { <string>; ... };
  770         zero-no-soa-ttl <boolean>;
  771         zero-no-soa-ttl-cache <boolean>;
  772         zone <string> [ <class> ] {
  773                 allow-notify { <address_match_element>; ... };
  774                 allow-query { <address_match_element>; ... };
  775                 allow-query-on { <address_match_element>; ... };
  776                 allow-transfer { <address_match_element>; ... };
  777                 allow-update { <address_match_element>; ... };
  778                 allow-update-forwarding { <address_match_element>; ... };
  779                 also-notify [ port <integer> ] [ dscp <integer> ] { (
  780                     <masters> | <ipv4_address> [ port <integer> ] |
  781                     <ipv6_address> [ port <integer> ] ) [ key <string> ];
  782                     ... };
  783                 alt-transfer-source ( <ipv4_address> | * ) [ port (
  784                     <integer> | * ) ] [ dscp <integer> ];
  785                 alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (
  786                     <integer> | * ) ] [ dscp <integer> ];
  787                 auto-dnssec ( allow | maintain | off );
  788                 check-dup-records ( fail | warn | ignore );
  789                 check-integrity <boolean>;
  790                 check-mx ( fail | warn | ignore );
  791                 check-mx-cname ( fail | warn | ignore );
  792                 check-names ( fail | warn | ignore );
  793                 check-sibling <boolean>;
  794                 check-spf ( warn | ignore );
  795                 check-srv-cname ( fail | warn | ignore );
  796                 check-wildcard <boolean>;
  797                 database <string>;
  798                 delegation-only <boolean>;
  799                 dialup ( notify | notify-passive | passive | refresh |
  800                     <boolean> );
  801                 dlz <string>;
  802                 dnskey-sig-validity <integer>;
  803                 dnssec-dnskey-kskonly <boolean>;
  804                 dnssec-loadkeys-interval <integer>;
  805                 dnssec-policy <string>;
  806                 dnssec-secure-to-insecure <boolean>;
  807                 dnssec-update-mode ( maintain | no-resign );
  808                 file <quoted_string>;
  809                 forward ( first | only );
  810                 forwarders [ port <integer> ] [ dscp <integer> ] { (
  811                     <ipv4_address> | <ipv6_address> ) [ port <integer> ] [
  812                     dscp <integer> ]; ... };
  813                 in-view <string>;
  814                 inline-signing <boolean>;
  815                 ixfr-base <quoted_string>; // ancient
  816                 ixfr-from-differences <boolean>;
  817                 ixfr-tmp-file <quoted_string>; // ancient
  818                 journal <quoted_string>;
  819                 key-directory <quoted_string>;
  820                 maintain-ixfr-base <boolean>; // ancient
  821                 masterfile-format ( map | raw | text );
  822                 masterfile-style ( full | relative );
  823                 masters [ port <integer> ] [ dscp <integer> ] { ( <masters>
  824                     | <ipv4_address> [ port <integer> ] | <ipv6_address> [
  825                     port <integer> ] ) [ key <string> ]; ... };
  826                 max-ixfr-log-size ( default | unlimited |
  827                     <sizeval> ); // ancient
  828                 max-journal-size ( default | unlimited | <sizeval> );
  829                 max-records <integer>;
  830                 max-refresh-time <integer>;
  831                 max-retry-time <integer>;
  832                 max-transfer-idle-in <integer>;
  833                 max-transfer-idle-out <integer>;
  834                 max-transfer-time-in <integer>;
  835                 max-transfer-time-out <integer>;
  836                 max-zone-ttl ( unlimited | <duration> );
  837                 min-refresh-time <integer>;
  838                 min-retry-time <integer>;
  839                 multi-master <boolean>;
  840                 notify ( explicit | master-only | <boolean> );
  841                 notify-delay <integer>;
  842                 notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
  843                     ) ] [ dscp <integer> ];
  844                 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
  845                     | * ) ] [ dscp <integer> ];
  846                 notify-to-soa <boolean>;
  847                 nsec3-test-zone <boolean>; // test only
  848                 pubkey <integer> <integer> <integer>
  849                     <quoted_string>; // ancient
  850                 request-expire <boolean>;
  851                 request-ixfr <boolean>;
  852                 serial-update-method ( date | increment | unixtime );
  853                 server-addresses { ( <ipv4_address> | <ipv6_address> ); ... };
  854                 server-names { <string>; ... };
  855                 sig-signing-nodes <integer>;
  856                 sig-signing-signatures <integer>;
  857                 sig-signing-type <integer>;
  858                 sig-validity-interval <integer> [ <integer> ];
  859                 transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
  860                     * ) ] [ dscp <integer> ];
  861                 transfer-source-v6 ( <ipv6_address> | * ) [ port (
  862                     <integer> | * ) ] [ dscp <integer> ];
  863                 try-tcp-refresh <boolean>;
  864                 type ( primary | master | secondary | slave | mirror |
  865                     delegation-only | forward | hint | redirect |
  866                     static-stub | stub );
  867                 update-check-ksk <boolean>;
  868                 update-policy ( local | { ( deny | grant ) <string> (
  869                     6to4-self | external | krb5-self | krb5-selfsub |
  870                     krb5-subdomain | ms-self | ms-selfsub | ms-subdomain |
  871                     name | self | selfsub | selfwild | subdomain | tcp-self
  872                     | wildcard | zonesub ) [ <string> ] <rrtypelist>; ... };
  873                 use-alt-transfer-source <boolean>;
  874                 zero-no-soa-ttl <boolean>;
  875                 zone-statistics ( full | terse | none | <boolean> );
  876         }; // may occur multiple times
  877         zone-statistics ( full | terse | none | <boolean> );
  878 }; // may occur multiple times
  879 
  880 zone <string> [ <class> ] {
  881         allow-notify { <address_match_element>; ... };
  882         allow-query { <address_match_element>; ... };
  883         allow-query-on { <address_match_element>; ... };
  884         allow-transfer { <address_match_element>; ... };
  885         allow-update { <address_match_element>; ... };
  886         allow-update-forwarding { <address_match_element>; ... };
  887         also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |
  888             <ipv4_address> [ port <integer> ] | <ipv6_address> [ port
  889             <integer> ] ) [ key <string> ]; ... };
  890         alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )
  891             ] [ dscp <integer> ];
  892         alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
  893             * ) ] [ dscp <integer> ];
  894         auto-dnssec ( allow | maintain | off );
  895         check-dup-records ( fail | warn | ignore );
  896         check-integrity <boolean>;
  897         check-mx ( fail | warn | ignore );
  898         check-mx-cname ( fail | warn | ignore );
  899         check-names ( fail | warn | ignore );
  900         check-sibling <boolean>;
  901         check-spf ( warn | ignore );
  902         check-srv-cname ( fail | warn | ignore );
  903         check-wildcard <boolean>;
  904         database <string>;
  905         delegation-only <boolean>;
  906         dialup ( notify | notify-passive | passive | refresh | <boolean> );
  907         dlz <string>;
  908         dnskey-sig-validity <integer>;
  909         dnssec-dnskey-kskonly <boolean>;
  910         dnssec-loadkeys-interval <integer>;
  911         dnssec-policy <string>;
  912         dnssec-secure-to-insecure <boolean>;
  913         dnssec-update-mode ( maintain | no-resign );
  914         file <quoted_string>;
  915         forward ( first | only );
  916         forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>
  917             | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };
  918         in-view <string>;
  919         inline-signing <boolean>;
  920         ixfr-base <quoted_string>; // ancient
  921         ixfr-from-differences <boolean>;
  922         ixfr-tmp-file <quoted_string>; // ancient
  923         journal <quoted_string>;
  924         key-directory <quoted_string>;
  925         maintain-ixfr-base <boolean>; // ancient
  926         masterfile-format ( map | raw | text );
  927         masterfile-style ( full | relative );
  928         masters [ port <integer> ] [ dscp <integer> ] { ( <masters> |
  929             <ipv4_address> [ port <integer> ] | <ipv6_address> [ port
  930             <integer> ] ) [ key <string> ]; ... };
  931         max-ixfr-log-size ( default | unlimited | <sizeval> ); // ancient
  932         max-journal-size ( default | unlimited | <sizeval> );
  933         max-records <integer>;
  934         max-refresh-time <integer>;
  935         max-retry-time <integer>;
  936         max-transfer-idle-in <integer>;
  937         max-transfer-idle-out <integer>;
  938         max-transfer-time-in <integer>;
  939         max-transfer-time-out <integer>;
  940         max-zone-ttl ( unlimited | <duration> );
  941         min-refresh-time <integer>;
  942         min-retry-time <integer>;
  943         multi-master <boolean>;
  944         notify ( explicit | master-only | <boolean> );
  945         notify-delay <integer>;
  946         notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
  947             dscp <integer> ];
  948         notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]
  949             [ dscp <integer> ];
  950         notify-to-soa <boolean>;
  951         nsec3-test-zone <boolean>; // test only
  952         pubkey <integer> <integer> <integer> <quoted_string>; // ancient
  953         request-expire <boolean>;
  954         request-ixfr <boolean>;
  955         serial-update-method ( date | increment | unixtime );
  956         server-addresses { ( <ipv4_address> | <ipv6_address> ); ... };
  957         server-names { <string>; ... };
  958         sig-signing-nodes <integer>;
  959         sig-signing-signatures <integer>;
  960         sig-signing-type <integer>;
  961         sig-validity-interval <integer> [ <integer> ];
  962         transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [
  963             dscp <integer> ];
  964         transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )
  965             ] [ dscp <integer> ];
  966         try-tcp-refresh <boolean>;
  967         type ( primary | master | secondary | slave | mirror |
  968             delegation-only | forward | hint | redirect | static-stub |
  969             stub );
  970         update-check-ksk <boolean>;
  971         update-policy ( local | { ( deny | grant ) <string> ( 6to4-self |
  972             external | krb5-self | krb5-selfsub | krb5-subdomain | ms-self
  973             | ms-selfsub | ms-subdomain | name | self | selfsub | selfwild
  974             | subdomain | tcp-self | wildcard | zonesub ) [ <string> ]
  975             <rrtypelist>; ... };
  976         use-alt-transfer-source <boolean>;
  977         zero-no-soa-ttl <boolean>;
  978         zone-statistics ( full | terse | none | <boolean> );
  979 }; // may occur multiple times
  980