2 This is a summary of the named.conf options supported by
3 this version of BIND 9.
5 acl <string> { <address_match_element>; ... };
8 inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
9 ) ] allow { <address_match_element>; ... } [ keys { <string>;
11 unix <quoted_string> perm <integer> owner <integer> group <integer>
12 [ keys { <string>; ... } ];
25 category <string> { <string>; ... };
27 file <quoted_string> [ versions ( "unlimited" | <integer> )
30 print-category <boolean>;
31 print-severity <boolean>;
33 severity <log_severity>;
35 syslog <optional_facility>;
40 listen-on [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
41 [ port <integer> ]; ... };
43 search { <string>; ... };
44 view <string> <optional_class>;
47 managed-keys { <string> <string> <integer> <integer> <integer>
48 <quoted_string>; ... };
50 masters <string> [ port <integer> ] { ( <masters> | <ipv4_address> [ port
51 <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ]; ... };
54 acache-cleaning-interval <integer>;
55 acache-enable <boolean>;
56 additional-from-auth <boolean>;
57 additional-from-cache <boolean>;
58 allow-new-zones <boolean>;
59 allow-notify { <address_match_element>; ... };
60 allow-query { <address_match_element>; ... };
61 allow-query-cache { <address_match_element>; ... };
62 allow-query-cache-on { <address_match_element>; ... };
63 allow-query-on { <address_match_element>; ... };
64 allow-recursion { <address_match_element>; ... };
65 allow-recursion-on { <address_match_element>; ... };
66 allow-transfer { <address_match_element>; ... };
67 allow-update { <address_match_element>; ... };
68 allow-update-forwarding { <address_match_element>; ... };
69 allow-v6-synthesis { <address_match_element>; ... }; // obsolete
70 also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
71 ) [ port <integer> ]; ... };
72 alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
73 alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
75 attach-cache <string>;
76 auth-nxdomain <boolean>; // default changed
77 auto-dnssec ( allow | maintain | off );
78 avoid-v4-udp-ports { <portrange>; ... };
79 avoid-v6-udp-ports { <portrange>; ... };
80 bindkeys-file <quoted_string>;
81 blackhole { <address_match_element>; ... };
82 cache-file <quoted_string>;
83 check-dup-records ( fail | warn | ignore );
84 check-integrity <boolean>;
85 check-mx ( fail | warn | ignore );
86 check-mx-cname ( fail | warn | ignore );
87 check-names ( master | slave | response ) ( fail | warn | ignore );
88 check-sibling <boolean>;
89 check-srv-cname ( fail | warn | ignore );
90 check-wildcard <boolean>;
91 cleaning-interval <integer>;
92 clients-per-query <integer>;
95 deallocate-on-exit <boolean>; // obsolete
96 deny-answer-addresses { <address_match_element>; ... } [
97 except-from { <quoted_string>; ... } ];
98 deny-answer-aliases { <quoted_string>; ... } [ except-from {
99 <quoted_string>; ... } ];
101 directory <quoted_string>;
102 disable-algorithms <string> { <string>; ... };
103 disable-empty-zone <string>;
105 break-dnssec <boolean>;
106 clients { <address_match_element>; ... };
107 exclude { <address_match_element>; ... };
108 mapped { <address_match_element>; ... };
109 recursive-only <boolean>;
110 suffix <ipv6_address>;
112 dns64-contact <string>;
113 dns64-server <string>;
114 dnssec-accept-expired <boolean>;
115 dnssec-dnskey-kskonly <boolean>;
116 dnssec-enable <boolean>;
117 dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
118 dnssec-must-be-secure <string> <boolean>;
119 dnssec-secure-to-insecure <boolean>;
120 dnssec-validation ( yes | no | auto );
121 dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
122 <integer> ] | <ipv4_address> [ port <integer> ] |
123 <ipv6_address> [ port <integer> ] ); ... };
124 dump-file <quoted_string>;
125 edns-udp-size <integer>;
126 empty-contact <string>;
127 empty-server <string>;
128 empty-zones-enable <boolean>;
129 fake-iquery <boolean>; // obsolete
130 fetch-glue <boolean>; // obsolete
132 filter-aaaa { <address_match_element>; ... }; // not configured
133 filter-aaaa-on-v4 <v4_aaaa>; // not configured
134 flush-zones-on-shutdown <boolean>;
135 forward ( first | only );
136 forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
137 [ port <integer> ]; ... };
138 has-old-clients <boolean>; // obsolete
139 heartbeat-interval <integer>;
140 host-statistics <boolean>; // not implemented
141 host-statistics-max <integer>; // not implemented
142 hostname ( <quoted_string> | none );
143 interface-interval <integer>;
144 ixfr-from-differences <ixfrdiff>;
145 key-directory <quoted_string>;
147 listen-on [ port <integer> ] { <address_match_element>; ... };
148 listen-on-v6 [ port <integer> ] { <address_match_element>; ... };
149 maintain-ixfr-base <boolean>; // obsolete
150 managed-keys-directory <quoted_string>;
151 masterfile-format ( text | raw );
152 match-mapped-addresses <boolean>;
153 max-acache-size <size_no_default>;
154 max-cache-size <size_no_default>;
155 max-cache-ttl <integer>;
156 max-clients-per-query <integer>;
157 max-ixfr-log-size <size>; // obsolete
158 max-journal-size <size_no_default>;
159 max-ncache-ttl <integer>;
160 max-refresh-time <integer>;
161 max-retry-time <integer>;
162 max-transfer-idle-in <integer>;
163 max-transfer-idle-out <integer>;
164 max-transfer-time-in <integer>;
165 max-transfer-time-out <integer>;
166 max-udp-size <integer>;
167 memstatistics <boolean>;
168 memstatistics-file <quoted_string>;
169 min-refresh-time <integer>;
170 min-retry-time <integer>;
171 min-roots <integer>; // not implemented
172 minimal-responses <boolean>;
173 multi-master <boolean>;
174 multiple-cnames <boolean>; // obsolete
175 named-xfer <quoted_string>; // obsolete
177 notify-delay <integer>;
178 notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
179 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
180 notify-to-soa <boolean>;
181 nsec3-test-zone <boolean>; // test only
182 pid-file ( <quoted_string> | none );
184 preferred-glue <string>;
185 provide-ixfr <boolean>;
186 query-source <querysource4>;
187 query-source-v6 <querysource6>;
189 queryport-pool-ports <integer>; // obsolete
190 queryport-pool-updateinterval <integer>; // obsolete
191 random-device <quoted_string>;
192 recursing-file <quoted_string>;
194 recursive-clients <integer>;
195 request-ixfr <boolean>;
196 request-nsid <boolean>;
197 reserved-sockets <integer>;
198 resolver-query-timeout <integer>;
199 response-policy { zone <quoted_string> [ policy ( given | disabled
200 | passthru | no-op | nxdomain | nodata | cname <quoted_string>
201 ) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ];
202 ... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [
203 max-policy-ttl <integer> ];
204 rfc2308-type1 <boolean>; // not yet implemented
205 root-delegation-only [ exclude { <quoted_string>; ... } ];
206 rrset-order { [ class <string> ] [ type <string> ] [ name
207 <quoted_string> ] <string> <string>; ... };
208 secroots-file <quoted_string>;
209 serial-queries <integer>; // obsolete
210 serial-query-rate <integer>;
211 server-id ( <quoted_string> | none | hostname );
212 session-keyalg <string>;
213 session-keyfile ( <quoted_string> | none );
214 session-keyname <string>;
215 sig-signing-nodes <integer>;
216 sig-signing-signatures <integer>;
217 sig-signing-type <integer>;
218 sig-validity-interval <integer> [ <integer> ];
219 sortlist { <address_match_element>; ... };
221 statistics-file <quoted_string>;
222 statistics-interval <integer>; // not yet implemented
223 suppress-initial-notify <boolean>; // not yet implemented
224 tcp-clients <integer>;
225 tcp-listen-queue <integer>;
226 tkey-dhkey <quoted_string> <integer>;
227 tkey-domain <quoted_string>;
228 tkey-gssapi-credential <quoted_string>;
229 tkey-gssapi-keytab <quoted_string>;
230 topology { <address_match_element>; ... }; // not implemented
231 transfer-format ( many-answers | one-answer );
232 transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
233 transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
234 transfers-in <integer>;
235 transfers-out <integer>;
236 transfers-per-ns <integer>;
237 treat-cr-as-space <boolean>; // obsolete
238 try-tcp-refresh <boolean>;
239 update-check-ksk <boolean>;
240 use-alt-transfer-source <boolean>;
241 use-id-pool <boolean>; // obsolete
243 use-queryport-pool <boolean>; // obsolete
244 use-v4-udp-ports { <portrange>; ... };
245 use-v6-udp-ports { <portrange>; ... };
246 version ( <quoted_string> | none );
247 zero-no-soa-ttl <boolean>;
248 zero-no-soa-ttl-cache <boolean>;
249 zone-statistics <boolean>;
255 edns-udp-size <integer>;
257 max-udp-size <integer>;
258 notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
259 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
260 provide-ixfr <boolean>;
261 query-source <querysource4>;
262 query-source-v6 <querysource6>;
263 request-ixfr <boolean>;
264 support-ixfr <boolean>; // obsolete
265 transfer-format ( many-answers | one-answer );
266 transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
267 transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
271 statistics-channels {
272 inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
273 ) ] [ allow { <address_match_element>; ... } ];
276 trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };
278 view <string> <optional_class> {
279 acache-cleaning-interval <integer>;
280 acache-enable <boolean>;
281 additional-from-auth <boolean>;
282 additional-from-cache <boolean>;
283 allow-new-zones <boolean>;
284 allow-notify { <address_match_element>; ... };
285 allow-query { <address_match_element>; ... };
286 allow-query-cache { <address_match_element>; ... };
287 allow-query-cache-on { <address_match_element>; ... };
288 allow-query-on { <address_match_element>; ... };
289 allow-recursion { <address_match_element>; ... };
290 allow-recursion-on { <address_match_element>; ... };
291 allow-transfer { <address_match_element>; ... };
292 allow-update { <address_match_element>; ... };
293 allow-update-forwarding { <address_match_element>; ... };
294 allow-v6-synthesis { <address_match_element>; ... }; // obsolete
295 also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
296 ) [ port <integer> ]; ... };
297 alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
298 alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
300 attach-cache <string>;
301 auth-nxdomain <boolean>; // default changed
302 auto-dnssec ( allow | maintain | off );
303 cache-file <quoted_string>;
304 check-dup-records ( fail | warn | ignore );
305 check-integrity <boolean>;
306 check-mx ( fail | warn | ignore );
307 check-mx-cname ( fail | warn | ignore );
308 check-names ( master | slave | response ) ( fail | warn | ignore );
309 check-sibling <boolean>;
310 check-srv-cname ( fail | warn | ignore );
311 check-wildcard <boolean>;
312 cleaning-interval <integer>;
313 clients-per-query <integer>;
315 deny-answer-addresses { <address_match_element>; ... } [
316 except-from { <quoted_string>; ... } ];
317 deny-answer-aliases { <quoted_string>; ... } [ except-from {
318 <quoted_string>; ... } ];
320 disable-algorithms <string> { <string>; ... };
321 disable-empty-zone <string>;
326 break-dnssec <boolean>;
327 clients { <address_match_element>; ... };
328 exclude { <address_match_element>; ... };
329 mapped { <address_match_element>; ... };
330 recursive-only <boolean>;
331 suffix <ipv6_address>;
333 dns64-contact <string>;
334 dns64-server <string>;
335 dnssec-accept-expired <boolean>;
336 dnssec-dnskey-kskonly <boolean>;
337 dnssec-enable <boolean>;
338 dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
339 dnssec-must-be-secure <string> <boolean>;
340 dnssec-secure-to-insecure <boolean>;
341 dnssec-validation ( yes | no | auto );
342 dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
343 <integer> ] | <ipv4_address> [ port <integer> ] |
344 <ipv6_address> [ port <integer> ] ); ... };
345 edns-udp-size <integer>;
346 empty-contact <string>;
347 empty-server <string>;
348 empty-zones-enable <boolean>;
349 fetch-glue <boolean>; // obsolete
350 filter-aaaa { <address_match_element>; ... }; // not configured
351 filter-aaaa-on-v4 <v4_aaaa>; // not configured
352 forward ( first | only );
353 forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
354 [ port <integer> ]; ... };
355 ixfr-from-differences <ixfrdiff>;
360 key-directory <quoted_string>;
362 maintain-ixfr-base <boolean>; // obsolete
363 managed-keys { <string> <string> <integer> <integer> <integer>
364 <quoted_string>; ... };
365 masterfile-format ( text | raw );
366 match-clients { <address_match_element>; ... };
367 match-destinations { <address_match_element>; ... };
368 match-recursive-only <boolean>;
369 max-acache-size <size_no_default>;
370 max-cache-size <size_no_default>;
371 max-cache-ttl <integer>;
372 max-clients-per-query <integer>;
373 max-ixfr-log-size <size>; // obsolete
374 max-journal-size <size_no_default>;
375 max-ncache-ttl <integer>;
376 max-refresh-time <integer>;
377 max-retry-time <integer>;
378 max-transfer-idle-in <integer>;
379 max-transfer-idle-out <integer>;
380 max-transfer-time-in <integer>;
381 max-transfer-time-out <integer>;
382 max-udp-size <integer>;
383 min-refresh-time <integer>;
384 min-retry-time <integer>;
385 min-roots <integer>; // not implemented
386 minimal-responses <boolean>;
387 multi-master <boolean>;
389 notify-delay <integer>;
390 notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
391 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
392 notify-to-soa <boolean>;
393 nsec3-test-zone <boolean>; // test only
394 preferred-glue <string>;
395 provide-ixfr <boolean>;
396 query-source <querysource4>;
397 query-source-v6 <querysource6>;
398 queryport-pool-ports <integer>; // obsolete
399 queryport-pool-updateinterval <integer>; // obsolete
401 request-ixfr <boolean>;
402 request-nsid <boolean>;
403 resolver-query-timeout <integer>;
404 response-policy { zone <quoted_string> [ policy ( given | disabled
405 | passthru | no-op | nxdomain | nodata | cname <quoted_string>
406 ) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ];
407 ... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [
408 max-policy-ttl <integer> ];
409 rfc2308-type1 <boolean>; // not yet implemented
410 root-delegation-only [ exclude { <quoted_string>; ... } ];
411 rrset-order { [ class <string> ] [ type <string> ] [ name
412 <quoted_string> ] <string> <string>; ... };
416 edns-udp-size <integer>;
418 max-udp-size <integer>;
419 notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
421 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
423 provide-ixfr <boolean>;
424 query-source <querysource4>;
425 query-source-v6 <querysource6>;
426 request-ixfr <boolean>;
427 support-ixfr <boolean>; // obsolete
428 transfer-format ( many-answers | one-answer );
429 transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
431 transfer-source-v6 ( <ipv6_address> | * ) [ port (
435 sig-signing-nodes <integer>;
436 sig-signing-signatures <integer>;
437 sig-signing-type <integer>;
438 sig-validity-interval <integer> [ <integer> ];
439 sortlist { <address_match_element>; ... };
440 suppress-initial-notify <boolean>; // not yet implemented
441 topology { <address_match_element>; ... }; // not implemented
442 transfer-format ( many-answers | one-answer );
443 transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
444 transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
445 trusted-keys { <string> <integer> <integer> <integer>
446 <quoted_string>; ... };
447 try-tcp-refresh <boolean>;
448 update-check-ksk <boolean>;
449 use-alt-transfer-source <boolean>;
450 use-queryport-pool <boolean>; // obsolete
451 zero-no-soa-ttl <boolean>;
452 zero-no-soa-ttl-cache <boolean>;
453 zone <string> <optional_class> {
454 allow-notify { <address_match_element>; ... };
455 allow-query { <address_match_element>; ... };
456 allow-query-on { <address_match_element>; ... };
457 allow-transfer { <address_match_element>; ... };
458 allow-update { <address_match_element>; ... };
459 allow-update-forwarding { <address_match_element>; ... };
460 also-notify [ port <integer> ] { ( <ipv4_address> |
461 <ipv6_address> ) [ port <integer> ]; ... };
462 alt-transfer-source ( <ipv4_address> | * ) [ port (
464 alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (
466 auto-dnssec ( allow | maintain | off );
467 check-dup-records ( fail | warn | ignore );
468 check-integrity <boolean>;
469 check-mx ( fail | warn | ignore );
470 check-mx-cname ( fail | warn | ignore );
471 check-names ( fail | warn | ignore );
472 check-sibling <boolean>;
473 check-srv-cname ( fail | warn | ignore );
474 check-wildcard <boolean>;
476 delegation-only <boolean>;
478 dnssec-dnskey-kskonly <boolean>;
479 dnssec-secure-to-insecure <boolean>;
480 file <quoted_string>;
481 forward ( first | only );
482 forwarders [ port <integer> ] { ( <ipv4_address> |
483 <ipv6_address> ) [ port <integer> ]; ... };
484 ixfr-base <quoted_string>; // obsolete
485 ixfr-from-differences <boolean>;
486 ixfr-tmp-file <quoted_string>; // obsolete
487 journal <quoted_string>;
488 key-directory <quoted_string>;
489 maintain-ixfr-base <boolean>; // obsolete
490 masterfile-format ( text | raw );
491 masters [ port <integer> ] { ( <masters> | <ipv4_address> [
492 port <integer> ] | <ipv6_address> [ port <integer> ] )
493 [ key <string> ]; ... };
494 max-ixfr-log-size <size>; // obsolete
495 max-journal-size <size_no_default>;
496 max-refresh-time <integer>;
497 max-retry-time <integer>;
498 max-transfer-idle-in <integer>;
499 max-transfer-idle-out <integer>;
500 max-transfer-time-in <integer>;
501 max-transfer-time-out <integer>;
502 min-refresh-time <integer>;
503 min-retry-time <integer>;
504 multi-master <boolean>;
506 notify-delay <integer>;
507 notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
509 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
511 notify-to-soa <boolean>;
512 nsec3-test-zone <boolean>; // test only
513 pubkey <integer> <integer> <integer>
514 <quoted_string>; // obsolete
515 server-addresses { ( <ipv4_address> | <ipv6_address> ) [
516 port <integer> ]; ... };
517 server-names { <quoted_string>; ... };
518 sig-signing-nodes <integer>;
519 sig-signing-signatures <integer>;
520 sig-signing-type <integer>;
521 sig-validity-interval <integer> [ <integer> ];
522 transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
524 transfer-source-v6 ( <ipv6_address> | * ) [ port (
526 try-tcp-refresh <boolean>;
527 type ( master | slave | stub | static-stub | hint | forward
529 update-check-ksk <boolean>;
530 update-policy ( local | { ( grant | deny ) <string> ( name
531 | subdomain | wildcard | self | selfsub | selfwild |
532 krb5-self | ms-self | krb5-subdomain | ms-subdomain |
533 tcp-self | 6to4-self | zonesub | external ) [ <string>
534 ] <rrtypelist>; ... };
535 use-alt-transfer-source <boolean>;
536 zero-no-soa-ttl <boolean>;
537 zone-statistics <boolean>;
539 zone-statistics <boolean>;
542 zone <string> <optional_class> {
543 allow-notify { <address_match_element>; ... };
544 allow-query { <address_match_element>; ... };
545 allow-query-on { <address_match_element>; ... };
546 allow-transfer { <address_match_element>; ... };
547 allow-update { <address_match_element>; ... };
548 allow-update-forwarding { <address_match_element>; ... };
549 also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
550 ) [ port <integer> ]; ... };
551 alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
552 alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
554 auto-dnssec ( allow | maintain | off );
555 check-dup-records ( fail | warn | ignore );
556 check-integrity <boolean>;
557 check-mx ( fail | warn | ignore );
558 check-mx-cname ( fail | warn | ignore );
559 check-names ( fail | warn | ignore );
560 check-sibling <boolean>;
561 check-srv-cname ( fail | warn | ignore );
562 check-wildcard <boolean>;
564 delegation-only <boolean>;
566 dnssec-dnskey-kskonly <boolean>;
567 dnssec-secure-to-insecure <boolean>;
568 file <quoted_string>;
569 forward ( first | only );
570 forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
571 [ port <integer> ]; ... };
572 ixfr-base <quoted_string>; // obsolete
573 ixfr-from-differences <boolean>;
574 ixfr-tmp-file <quoted_string>; // obsolete
575 journal <quoted_string>;
576 key-directory <quoted_string>;
577 maintain-ixfr-base <boolean>; // obsolete
578 masterfile-format ( text | raw );
579 masters [ port <integer> ] { ( <masters> | <ipv4_address> [ port
580 <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
582 max-ixfr-log-size <size>; // obsolete
583 max-journal-size <size_no_default>;
584 max-refresh-time <integer>;
585 max-retry-time <integer>;
586 max-transfer-idle-in <integer>;
587 max-transfer-idle-out <integer>;
588 max-transfer-time-in <integer>;
589 max-transfer-time-out <integer>;
590 min-refresh-time <integer>;
591 min-retry-time <integer>;
592 multi-master <boolean>;
594 notify-delay <integer>;
595 notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
596 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
597 notify-to-soa <boolean>;
598 nsec3-test-zone <boolean>; // test only
599 pubkey <integer> <integer> <integer> <quoted_string>; // obsolete
600 server-addresses { ( <ipv4_address> | <ipv6_address> ) [ port
602 server-names { <quoted_string>; ... };
603 sig-signing-nodes <integer>;
604 sig-signing-signatures <integer>;
605 sig-signing-type <integer>;
606 sig-validity-interval <integer> [ <integer> ];
607 transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
608 transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
609 try-tcp-refresh <boolean>;
610 type ( master | slave | stub | static-stub | hint | forward |
612 update-check-ksk <boolean>;
613 update-policy ( local | { ( grant | deny ) <string> ( name |
614 subdomain | wildcard | self | selfsub | selfwild | krb5-self |
615 ms-self | krb5-subdomain | ms-subdomain | tcp-self | 6to4-self
616 | zonesub | external ) [ <string> ] <rrtypelist>; ... };
617 use-alt-transfer-source <boolean>;
618 zero-no-soa-ttl <boolean>;
619 zone-statistics <boolean>;